A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mecabUpgrade mysql-errmsgUpgrade mysql-testUpgrade mysql-commonUpgrade mysqlUpgrade mecab-ipadicUpgrade mecab-develUpgrade mysql-libsUpgrade mecab-ipadic-EUCJPUpgrade mysql-serverUpgrade mysql-devel | Feb 29, 2024 | Mar 31, 2023 |
| Amazon Linux Ami 2 | — | Upgrade zstd-debuginfoUpgrade zstdUpgrade libzstdUpgrade libzstd-staticUpgrade libzstd-devel | Jul 21, 2023 | Mar 31, 2023 |
| Amazon_linux_2023 | — | Upgrade libzstd-develUpgrade zstdUpgrade zstd-debuginfoUpgrade zstd-debugsourceUpgrade libzstd-staticUpgrade libzstd-debuginfoUpgrade libzstd | Feb 17, 2025 | Jul 17, 2022 |
| Debian | — | Upgrade libzstd | Jul 30, 2024 | Mar 31, 2023 |
| Freebsd | — | Upgrade mysql-client80Upgrade mysql-client57Upgrade mysql-server80Upgrade mysql-server57Upgrade mysql-connector-c++ | Aug 18, 2023 | Aug 17, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade zstd | Jan 10, 2024 | Mar 31, 2023 |
| Oracle Mysql | — | Upgrade to MySQL version 8.0.34 | Jun 15, 2026 | Mar 31, 2023 |
| Oracle_linux | — | Upgrade mysql-testUpgrade mysql-serverUpgrade mysql-commonUpgrade mysql-libsUpgrade mecab-develUpgrade mysql-develUpgrade mecab-ipadicUpgrade mecab-ipadic-EUCJPUpgrade mysql-errmsgUpgrade mysqlUpgrade mecab | Feb 22, 2024 | Jul 17, 2022 |
| Redhat_linux | — | Upgrade mysql-test-debuginfoUpgrade mecab-develUpgrade mysql-serverUpgrade mysql-devel-debuginfoUpgrade mysql-develUpgrade mysql-libsUpgrade mysql-libs-debuginfoUpgrade mecab-debuginfoUpgrade mecab-ipadic-EUCJPUpgrade mysql-errmsgUpgrade mecab-debugsourceUpgrade mysql-commonUpgrade mysql-debuginfoUpgrade mysql-testUpgrade mysqlUpgrade mysql-debugsourceNo solution existsUpgrade mecab-ipadicUpgrade mysql-server-debuginfoUpgrade mecab | Feb 21, 2024 | Mar 31, 2023 |
| Rocky_linux | — | Upgrade mysql-serverUpgrade mysql-libsUpgrade mysql-devel-debuginfoUpgrade mecab-develUpgrade mysql-develUpgrade mecab-ipadic-EUCJPUpgrade mysql-test-debuginfoUpgrade mysql-server-debuginfoUpgrade mysqlUpgrade mysql-debuginfoUpgrade mecab-ipadicUpgrade mysql-debugsourceUpgrade mysql-errmsgUpgrade mecabUpgrade mecab-debuginfoUpgrade mysql-commonUpgrade mysql-libs-debuginfoUpgrade mecab-debugsourceUpgrade mysql-test | May 8, 2025 | Mar 31, 2023 |
| Suse | — | Upgrade libzstd-develUpgrade libzstd-devel-staticUpgrade libzstd1-32bitUpgrade libzstd-devel-32bitUpgrade zstdUpgrade libzstd1 | Mar 30, 2023 | Mar 29, 2023 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Mar 31, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 31, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub