7.5
High
CVE-2022-4899 A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command…
Description
A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| zstd | Versions not published |
References
- github.com github.com
- security.netapp.com security.netapp.com
- FEDORA-2023-9ccff0b1b7 lists.fedoraproject.org
- FEDORA-2023-492105ed08 lists.fedoraproject.org
- FEDORA-2023-a9283d639f lists.fedoraproject.org
Timeline
- Published
- Last modified