A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mysql-errmsgUpgrade mysqlUpgrade mecab-ipadicUpgrade mysql-testUpgrade mysql-commonUpgrade mecabUpgrade mysql-develUpgrade mecab-develUpgrade mysql-serverUpgrade mecab-ipadic-EUCJPUpgrade mysql-libs | Feb 29, 2024 | Mar 31, 2023 |
| Amazon Linux Ami 2 | — | Upgrade libzstdUpgrade libzstd-develUpgrade libzstd-staticUpgrade zstd-debuginfoUpgrade zstd | Jul 21, 2023 | Mar 31, 2023 |
| Amazon_linux_2023 | — | Upgrade libzstd-staticUpgrade libzstd-debuginfoUpgrade zstdUpgrade libzstdUpgrade zstd-debugsourceUpgrade zstd-debuginfoUpgrade libzstd-devel | Feb 17, 2025 | Jul 17, 2022 |
| Debian | — | Upgrade libzstd | Jul 30, 2024 | Mar 31, 2023 |
| Freebsd | — | Upgrade mysql-client80Upgrade mysql-server80Upgrade mysql-client57Upgrade mysql-server57Upgrade mysql-connector-c++ | Aug 18, 2023 | Aug 17, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade zstd | Jan 10, 2024 | Mar 31, 2023 |
| Oracle Mysql | — | Upgrade to MySQL version 8.0.34 | Jun 15, 2026 | Mar 31, 2023 |
| Oracle_linux | — | Upgrade mysql-commonUpgrade mysql-serverUpgrade mysql-libsUpgrade mysql-testUpgrade mysql-develUpgrade mysql-errmsgUpgrade mecab-ipadic-EUCJPUpgrade mecab-develUpgrade mecabUpgrade mysqlUpgrade mecab-ipadic | Feb 22, 2024 | Jul 17, 2022 |
| Redhat_linux | — | Upgrade mysql-commonUpgrade mysql-errmsgUpgrade mecab-debugsourceNo solution existsUpgrade mecabUpgrade mysql-server-debuginfoUpgrade mecab-ipadicUpgrade mysql-testUpgrade mysqlUpgrade mysql-debugsourceUpgrade mysql-debuginfoUpgrade mecab-debuginfoUpgrade mysql-libsUpgrade mecab-develUpgrade mysql-serverUpgrade mecab-ipadic-EUCJPUpgrade mysql-devel-debuginfoUpgrade mysql-test-debuginfoUpgrade mysql-develUpgrade mysql-libs-debuginfo | Feb 21, 2024 | Mar 31, 2023 |
| Rocky_linux | — | Upgrade mecab-develUpgrade mysql-libsUpgrade mysql-serverUpgrade mysql-test-debuginfoUpgrade mysql-develUpgrade mysql-server-debuginfoUpgrade mysql-devel-debuginfoUpgrade mecab-ipadic-EUCJPUpgrade mecab-debuginfoUpgrade mecabUpgrade mysql-errmsgUpgrade mysql-commonUpgrade mysql-testUpgrade mecab-debugsourceUpgrade mecab-ipadicUpgrade mysqlUpgrade mysql-debugsourceUpgrade mysql-libs-debuginfoUpgrade mysql-debuginfo | May 8, 2025 | Mar 31, 2023 |
| Suse | — | Upgrade libzstd-develUpgrade libzstd-devel-staticUpgrade libzstd1Upgrade zstdUpgrade libzstd-devel-32bitUpgrade libzstd1-32bit | Mar 30, 2023 | Mar 29, 2023 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Mar 31, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 31, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub