A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mecab-develUpgrade mecab-ipadic-EUCJPUpgrade mysql-serverUpgrade mysql-libsUpgrade mysql-develUpgrade mysql-testUpgrade mysql-errmsgUpgrade mysqlUpgrade mecab-ipadicUpgrade mecabUpgrade mysql-common | Feb 29, 2024 | Mar 31, 2023 |
| Amazon Linux Ami 2 | — | Upgrade zstd-debuginfoUpgrade zstdUpgrade libzstd-staticUpgrade libzstd-develUpgrade libzstd | Jul 21, 2023 | Mar 31, 2023 |
| Amazon_linux_2023 | — | Upgrade zstdUpgrade zstd-debugsourceUpgrade libzstdUpgrade zstd-debuginfoUpgrade libzstd-debuginfoUpgrade libzstd-staticUpgrade libzstd-devel | Feb 17, 2025 | Jul 17, 2022 |
| Debian | — | Upgrade libzstd | Jul 30, 2024 | Mar 31, 2023 |
| Freebsd | — | Upgrade mysql-client57Upgrade mysql-server80Upgrade mysql-client80Upgrade mysql-server57Upgrade mysql-connector-c++ | Aug 18, 2023 | Aug 17, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade zstd | Jan 10, 2024 | Mar 31, 2023 |
| Oracle Mysql | — | Upgrade to MySQL version 8.0.34 | Jun 15, 2026 | Mar 31, 2023 |
| Oracle_linux | — | Upgrade mysqlUpgrade mecab-ipadic-EUCJPUpgrade mysql-errmsgUpgrade mecab-ipadicUpgrade mecab-develUpgrade mysql-develUpgrade mecabUpgrade mysql-serverUpgrade mysql-libsUpgrade mysql-commonUpgrade mysql-test | Feb 22, 2024 | Jul 17, 2022 |
| Redhat_linux | — | Upgrade mysqlUpgrade mysql-server-debuginfoUpgrade mecabUpgrade mysql-commonUpgrade mysql-debugsourceUpgrade mysql-debuginfoUpgrade mysql-errmsgUpgrade mysql-testUpgrade mecab-ipadicUpgrade mecab-debugsourceNo solution existsUpgrade mysql-libsUpgrade mecab-debuginfoUpgrade mysql-develUpgrade mysql-test-debuginfoUpgrade mecab-develUpgrade mysql-serverUpgrade mecab-ipadic-EUCJPUpgrade mysql-devel-debuginfoUpgrade mysql-libs-debuginfo | Feb 21, 2024 | Mar 31, 2023 |
| Rocky_linux | — | Upgrade mysql-debuginfoUpgrade mecab-debugsourceUpgrade mysql-errmsgUpgrade mecabUpgrade mysqlUpgrade mysql-commonUpgrade mysql-libs-debuginfoUpgrade mysql-testUpgrade mysql-debugsourceUpgrade mecab-ipadicUpgrade mecab-debuginfoUpgrade mysql-devel-debuginfoUpgrade mysql-serverUpgrade mysql-libsUpgrade mysql-server-debuginfoUpgrade mecab-ipadic-EUCJPUpgrade mysql-test-debuginfoUpgrade mysql-develUpgrade mecab-devel | May 8, 2025 | Mar 31, 2023 |
| Suse | — | Upgrade libzstd-develUpgrade libzstd-devel-staticUpgrade libzstd-devel-32bitUpgrade zstdUpgrade libzstd1-32bitUpgrade libzstd1 | Mar 30, 2023 | Mar 29, 2023 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Mar 31, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 31, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub