A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-mecabalma-upgrade-mecab-develalma-upgrade-mecab-ipadicalma-upgrade-mecab-ipadic-eucjpalma-upgrade-mysqlalma-upgrade-mysql-commonalma-upgrade-mysql-develalma-upgrade-mysql-errmsgalma-upgrade-mysql-libsalma-upgrade-mysql-serveralma-upgrade-mysql-test | Feb 29, 2024 | Mar 31, 2023 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-libzstdamazon-linux-ami-2-upgrade-libzstd-develamazon-linux-ami-2-upgrade-libzstd-staticamazon-linux-ami-2-upgrade-zstdamazon-linux-ami-2-upgrade-zstd-debuginfo | Jul 21, 2023 | Mar 31, 2023 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-libzstdamazon-linux-2023-upgrade-libzstd-debuginfoamazon-linux-2023-upgrade-libzstd-develamazon-linux-2023-upgrade-libzstd-staticamazon-linux-2023-upgrade-zstdamazon-linux-2023-upgrade-zstd-debuginfoamazon-linux-2023-upgrade-zstd-debugsource | Feb 17, 2025 | Jul 17, 2022 | |
| Debian | debian-upgrade-libzstd | Jul 30, 2024 | Mar 31, 2023 | |
| Freebsd | freebsd-upgrade-package-mysql-connector-c++freebsd-upgrade-package-mysql-client57freebsd-upgrade-package-mysql-server57freebsd-upgrade-package-mysql-client80freebsd-upgrade-package-mysql-server80 | Aug 18, 2023 | Aug 17, 2023 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-zstd | Jan 10, 2024 | Mar 31, 2023 | |
| Oracle Mysql | mysql-upgrade-8_0_34 | Jun 15, 2026 | Mar 31, 2023 | |
| Oracle_linux | — | oracle-linux-upgrade-mecaboracle-linux-upgrade-mecab-develoracle-linux-upgrade-mecab-ipadicoracle-linux-upgrade-mecab-ipadic-eucjporacle-linux-upgrade-mysqloracle-linux-upgrade-mysql-commonoracle-linux-upgrade-mysql-develoracle-linux-upgrade-mysql-errmsgoracle-linux-upgrade-mysql-libsoracle-linux-upgrade-mysql-serveroracle-linux-upgrade-mysql-test | Feb 22, 2024 | Jul 17, 2022 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-mecabredhat-upgrade-mecab-debuginforedhat-upgrade-mecab-debugsourceredhat-upgrade-mecab-develredhat-upgrade-mecab-ipadicredhat-upgrade-mecab-ipadic-eucjpredhat-upgrade-mysqlredhat-upgrade-mysql-commonredhat-upgrade-mysql-debuginforedhat-upgrade-mysql-debugsourceredhat-upgrade-mysql-develredhat-upgrade-mysql-devel-debuginforedhat-upgrade-mysql-errmsgredhat-upgrade-mysql-libsredhat-upgrade-mysql-libs-debuginforedhat-upgrade-mysql-serverredhat-upgrade-mysql-server-debuginforedhat-upgrade-mysql-testredhat-upgrade-mysql-test-debuginfo | Feb 21, 2024 | Mar 31, 2023 | |
| Rocky_linux | rocky-upgrade-mecabrocky-upgrade-mecab-debuginforocky-upgrade-mecab-debugsourcerocky-upgrade-mecab-develrocky-upgrade-mecab-ipadicrocky-upgrade-mecab-ipadic-eucjprocky-upgrade-mysqlrocky-upgrade-mysql-commonrocky-upgrade-mysql-debuginforocky-upgrade-mysql-debugsourcerocky-upgrade-mysql-develrocky-upgrade-mysql-devel-debuginforocky-upgrade-mysql-errmsgrocky-upgrade-mysql-libsrocky-upgrade-mysql-libs-debuginforocky-upgrade-mysql-serverrocky-upgrade-mysql-server-debuginforocky-upgrade-mysql-testrocky-upgrade-mysql-test-debuginfo | May 8, 2025 | Mar 31, 2023 | |
| Suse | — | suse-upgrade-libzstd-develsuse-upgrade-libzstd-devel-32bitsuse-upgrade-libzstd-devel-staticsuse-upgrade-libzstd1suse-upgrade-libzstd1-32bitsuse-upgrade-zstd | Mar 30, 2023 | Mar 29, 2023 |
| Ubuntu | no-fix-ubuntu-package | Jun 26, 2025 | Mar 31, 2023 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Mar 31, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub