Search for packages
| purl | pkg:deb/debian/libzstd@1.4.8%2Bdfsg-2.1?distro=trixie |
| Next non-vulnerable version | 1.5.4+dfsg2-1 |
| Latest non-vulnerable version | 1.5.7+dfsg-3 |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-vsrg-uyjf-6ycj
Aliases: CVE-2022-4899 GHSA-5c9c-6x87-f9vm PYSEC-2023-121 |
zstd vulnerable to buffer overrun A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-5gmn-3j8n-ubbs | zstd: Race condition allows attacker to access world-readable destination file |
CVE-2021-24032
|
| VCID-d8vr-arx7-kygz | zstd: adds read permissions to files while being compressed or uncompressed |
CVE-2021-24031
|
| VCID-e9jr-kmds-afbr | zstd: race condition in one-pass compression functions that could allow out of bounds write |
CVE-2019-11922
|