Debian/libzstd: high 8.1
A race condition in the one-pass compression functions of Zstandard prior to version 1.3.8 could allow an attacker to write bytes out of bounds if an output buffer smaller than the recommended size wa
Action: Upgrade libzstd to 1.3.8+dfsg-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.3.8+dfsg-2 | - |
Fixed versions
| 1.3.8+dfsg-2 |
Sources
- osv: DEBIAN-CVE-2019-11922#Debian:13/libzstd
- https://security-tracker.debian.org/tracker/CVE-2019-11922
published · modified · JSON