CVE-2021-3465

Updated p7zip package fixes security vulnerabilities

No scoreFix availableRejected

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

What each source reports

CVE List No score

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

Record: CVE-2021-3465
Updated: 2026-11-02

EUVDEUVD-2021-26787 No score

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

Record: EUVD-2021-26787
Updated: 2026-11-03

NVD No score

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

Record: CVE-2021-3465
Updated: 2026-11-02

OSVMGASA-2021-0305 No score

Updated p7zip package fixes security vulnerabilities

In p7zip-17.03, the function NCompress::CCopyCoder::Code in CPP/7zip/Common/StreamObjects.cpp will call outStream->Write where a memcpy uses a NULL pointer as destination address, leading to a crash (CVE-2021-3465).

Null pointer dereference in function Reserve() found in p7zip 16.02 (rhbz#1951218).

Null Pointer Dereference in function NArchive::NLzh::CItem::GetUnixTime found in p7zip 16.02 (rhbz#1951224).

The p7zip package has been patched to fix these issues.

Also, the Mageia 7 package has been updated to version 17.03.

Record: MGASA-2021-0305
Updated: 2026-11-02

OSVopenSUSE-SU-2021:0684-1 No score

Security update for p7zip

This update for p7zip fixes the following issues:

CVE-2021-3465: Fixed a NULL pointer dereference in NCompress:CCopyCoder:Code (bsc#1184699)

This update was imported from the SUSE:SLE-15-SP2:Update update project.

Record: openSUSE-SU-2021:0684-1
Updated: 2026-11-02

OSVopenSUSE-SU-2024:11137-1 No score

p7zip-16.02-11.3 on GA media

These are all security issues fixed in the p7zip-16.02-11.3 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:11137-1
Updated: 2026-11-02

OSVSUSE-SU-2021:1491-1 No score

Security update for p7zip

This update for p7zip fixes the following issues:

CVE-2021-3465: Fixed a NULL pointer dereference in NCompress:CCopyCoder:Code (bsc#1184699)

Record: SUSE-SU-2021:1491-1
Updated: 2026-11-02

OSVUBUNTU-CVE-2021-3465 No score

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

Record: UBUNTU-CVE-2021-3465
Updated: 2026-11-02

Affected packages

Affected packages
Package	Affected	Fixed
`p7zip` Mageia:7	before 17.03-1.1.mga7	17.03-1.1.mga7
`p7zip` Mageia:8	before 17.03-1.1.mga8	17.03-1.1.mga8
`p7zip` SUSE:Linux Enterprise Module for Basesystem 15 SP2	before 16.02-14.5.1	16.02-14.5.1
`p7zip` SUSE:Linux Enterprise Module for Basesystem 15 SP3	before 16.02-14.5.1	16.02-14.5.1
`p7zip` Ubuntu:14.04:LTS	All versions, plus listed versions 9.20.1~dfsg.1-49.20.1~dfsg.1-4+deb7u1build0.14.04.19.20.1~dfsg.1-4+deb7u2build0.14.04.19.20.1~dfsg.1-4+deb7u3build0.14.04.1	None known
`p7zip` Ubuntu:16.04:LTS	All versions, plus listed versions 9.20.1~dfsg.1-4.29.20.1~dfsg.1-4.2ubuntu0.1	None known
`p7zip` Ubuntu:18.04:LTS	All versions, plus listed versions 16.02+dfsg-416.02+dfsg-516.02+dfsg-6	None known
`p7zip` Ubuntu:20.04:LTS	All versions, plus listed versions 16.02+dfsg-716.02+dfsg-7build1	None known
`p7zip` openSUSE:Leap 15.2	before 16.02-lp152.8.3.1	16.02-lp152.8.3.1
`p7zip` openSUSE:Tumbleweed	before 16.02-11.3	16.02-11.3

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases, references	EUVD
Nov 2, 2026	first indexed	CVE List, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-3465 has been rejected by its source and should not be treated as a live vulnerability, published April 12, 2021. Fixed in p7zip 17.03-1.1.mga7.

References

Show 9 moreShow less