PatchTheCVEblosc vulnerabilities
Recent CVEs affecting blosc products. 6 tracked.
blosc has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 6. Most recent: 2024-04-02. Highest priority: CVE-2024-3204 (score 53/100).
- CVE-2024-3204 HIGH 7.3 UPGRADE A vulnerability has been found in c-blosc2 up to 2.13.2 and classified as critical
- CVE-2024-3203 HIGH 7.3 UPGRADE A vulnerability, which was classified as critical, was found in c-blosc2 up to 2.13.2
- CVE-2023-37188 HIGH 7.5 UPGRADE C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the function zfp_rate_decompres
- CVE-2023-37187 HIGH 7.5 UPGRADE C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the zfp/blosc2-zfp.c zfp_acc_de
- CVE-2023-37186 HIGH 7.5 UPGRADE C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference in ndlz/ndlz8x8.c via a NULL pointe
- CVE-2023-37185 HIGH 7.5 UPGRADE C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the function zfp_prec_decompres
FAQ
How do I fix blosc vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is blosc being exploited right now?
None of the tracked blosc CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which blosc CVE should I patch first?
CVE-2024-3204 currently ranks highest (53/100): A vulnerability has been found in c-blosc2 up to 2.13.2 and classified as critical.