Msrc Cbl2 Zstd 1.5.4-1 On Cbl Mariner 2.0 vulnerabilities

1 known vulnerability affecting msrc/cbl2_zstd_1.5.4-1_on_cbl_mariner_2.0.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2022-4899HIGHCVSS 7.52023-03-14

CVE-2022-4899 [HIGH] CWE-400 A vulnerability was found in zstd v1.4.10 where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun. A vulnerability was found in zstd v1.4.10 where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun. FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits