Known vulnerabilities in libzstd (Debian package)
Vendor:
Debian
Software:
libzstd (Debian package)
Software CPE:
cpe:2.3:o:debian:libzstd_debian_package:*:*:*:*:*:debian_linux:*:*
Website:
https://www.debian.org/
Total vulnerabilities:
2
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
7.7
Breakdown by Severity Chart
1.3.8+dfsg-3+deb10u2
1.3.8+dfsg-3+deb10u1
1.4.5+dfsg-4
1.4.5+dfsg
1.4.5+dfsg-3
1.4.4+dfsg
1.3.8+dfsg
1.1.2
1.4.4+dfsg-3~bpo10+1
1.4.4+dfsg-1
1.4.4+dfsg-2
1.4.4+dfsg-3
1.4.2+dfsg-1
1.4.3+dfsg-1
1.3.8+dfsg-3~bpo9+1
1.3.8+dfsg-3
1.3.8+dfsg-2
1.3.8+dfsg-1
1.3.5+dfsg-2
1.3.3+dfsg-1+riscv64
1.3.4+dfsg-2
1.3.4+dfsg-3
1.3.5+dfsg-1
1.3.4+dfsg-1
1.3.3+dfsg-2
1.3.3+dfsg-1~bpo9+1
1.3.3+dfsg-1
1.3.2+dfsg2-2
1.3.2+dfsg2-1
1.3.2+dfsg1-1
1.3.2+dfsg-1~bpo8+1
1.3.2+dfsg-1
1.3.1+dfsg-2
1.3.1+dfsg-1
1.2.0-1
0.4.5-1
0.4.7-1
0.5.1-1
0.8.0-1
1.0.0-1
1.1.0-1
1.1.1-1
1.1.2-1
Vulnerabilities (2)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU50841 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') |
CWE-362 | Low | 1.3.8+dfsg-3+deb10u2 | 22.02.2021 |
SB2021022221 SB2021022222 |
||
| #VU50676 - Incorrect Default Permissions |
CWE-276 | Low | 1.3.8+dfsg-3+deb10u1 | 14.02.2021 |
SB2021021406 SB2021021407 |