CVE-2019-11922 — Race Condition in Zstandard
Severity
8.1HIGHNVD
EPSS
0.6%
top 29.60%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJul 25
Latest updateMar 31
Description
A race condition in the one-pass compression functions of Zstandard prior to version 1.3.8 could allow an attacker to write bytes out of bounds if an output buffer smaller than the recommended size was used.
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 2.2 | Impact: 5.9
Affected Packages5 packages
Patches
🔴Vulnerability Details
4📋Vendor Advisories
6Debian▶
CVE-2024-14030: libsereal-encoder-perl - Sereal::Decoder versions from 4.000 through 4.009_002 for Perl embeds a vulnerab...↗2024
Debian▶
CVE-2024-14031: libsereal-encoder-perl - Sereal::Encoder versions from 4.000 through 4.009_002 for Perl embeds a vulnerab...↗2024
Red Hat▶
zstd: race condition in one-pass compression functions that could allow out of bounds write↗2022-09-02