https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 11:27:53 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2021-24032 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2021-24032 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0969 certfr-2025-avi-0969 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0969 https://cve.radiocsirt.org/vuln/cleanstart-2025-an69250 <p><strong>Affected:</strong> CleanStart: zstd</p> <p>Security vulnerability affects the zstd package. Beginning in v1.</p> <p><strong>Affected:</strong> CleanStart: zstd</p> <p>Security vulnerability affects the zstd package. Beginning in v1.</p> https://cve.radiocsirt.org/vuln/cleanstart-2025-an69250 https://cve.radiocsirt.org/vuln/euvd-2026-23476 EUVD-2026-23476 https://cve.radiocsirt.org/vuln/euvd-2026-23476 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24032 <p>Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created output files with default permissions and restricted those permissions immediately afterwards. Output files could therefore momentarily be readable or writable to unintended parties.</p> <p>Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created output files with default permissions and restricted those permissions immediately afterwards. Output files could therefore momentarily be readable or writable to unintended parties.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-24032 https://cve.radiocsirt.org/vuln/ghsa-ffqj-7pgc-cmj5 <p>Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created output files with default permissions and restricted those permissions immediately afterwards. Output files could therefore momentarily be readable or writable to unintended parties.</p> <p>Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created output files with default permissions and restricted those permissions immediately afterwards. Output files could therefore momentarily be readable or writable to unintended parties.</p> https://cve.radiocsirt.org/vuln/ghsa-ffqj-7pgc-cmj5 https://cve.radiocsirt.org/vuln/gsd-2021-24032 gsd-2021-24032 https://cve.radiocsirt.org/vuln/gsd-2021-24032 https://cve.radiocsirt.org/vuln/msrc_cve-2021-24032 msrc_CVE-2021-24032 https://cve.radiocsirt.org/vuln/msrc_cve-2021-24032 https://cve.radiocsirt.org/vuln/oesa-2021-1094 <p><strong>Affected:</strong> openEuler:20.03-LTS: zstd, openEuler:20.03-LTS-SP1: zstd</p> <p>Zstd is a fast lossless compression algorithm. It&#39;s backed by a very fast entropy stage, provided by Huff0 and FSE library. It&#39;s a real-time compression scenario for zlib levels and has a better compression ratio. Security Fix(es): Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created output files with default permissions and restricted those permissions immediately afterwards. Output files could therefore momentarily be readable or writable to unintended parties.(CVE-2021-24032)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS: zstd, openEuler:20.03-LTS-SP1: zstd</p> <p>Zstd is a fast lossless compression algorithm. It&#39;s backed by a very fast entropy stage, provided by Huff0 and FSE library. It&#39;s a real-time compression scenario for zlib levels and has a better compression ratio. Security Fix(es): Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created output files with default permissions and restricted those permissions immediately afterwards. Output files could therefore momentarily be readable or writable to unintended parties.(CVE-2021-24032)</p> https://cve.radiocsirt.org/vuln/oesa-2021-1094 https://cve.radiocsirt.org/vuln/opensuse-su-2021:0481-1 <p>Security update for zstd</p> <p>Security update for zstd</p> https://cve.radiocsirt.org/vuln/opensuse-su-2021:0481-1 https://cve.radiocsirt.org/vuln/rhsa-2024:3527 <p>lz4: memory corruption due to an integer overflow bug caused by memmove argument zstd: Race condition allows attacker to access world-readable destination file protobuf-java: timeout in parser leads to DoS zstd: mysql: buffer overrun in util.c apache-commons-text: variable interpolation RCE Apache-Commons-BCEL: arbitrary bytecode produced via out-of-bounds writing json-smart: Uncontrolled Resource Consumption vulnerability in json-smart (Resource Exhaustion) guava: insecure temporary directory creation bouncycastle: potential blind LDAP injection attack using a self-signed certificate bc-java: Out of memory while parsing ASN.1 crafted data in org.bouncycastle.openssl.PEMParser class snappy-java: Missing upper bound check on chunk length in snappy-java can lead to Denial of Service (DoS) impact json-path: stack-based buffer overflow in Criteria.parse method io.vertx/vertx-core: memory leak due to the use of Netty FastThreadLocal data structures in Vertx io.vertx:vertx-core: memory leak when a TCP server is configured with TLS and SNI support quarkus-core: Leak of local configuration properties into Quarkus applications commons-compress: Denial of service caused by an infinite loop for a corrupted DUMP file netty-codec-http: Allocation of Resources Without Limits or Throttling</p> <p>lz4: memory corruption due to an integer overflow bug caused by memmove argument zstd: Race condition allows attacker to access world-readable destination file protobuf-java: timeout in parser leads to DoS zstd: mysql: buffer overrun in util.c apache-commons-text: variable interpolation RCE Apache-Commons-BCEL: arbitrary bytecode produced via out-of-bounds writing json-smart: Uncontrolled Resource Consumption vulnerability in json-smart (Resource Exhaustion) guava: insecure temporary directory creation bouncycastle: potential blind LDAP injection attack using a self-signed certificate bc-java: Out of memory while parsing ASN.1 crafted data in org.bouncycastle.openssl.PEMParser class snappy-java: Missing upper bound check on chunk length in snappy-java can lead to Denial of Service (DoS) impact json-path: stack-based buffer overflow in Criteria.parse method io.vertx/vertx-core: memory leak due to the use of Netty FastThreadLocal data structures in Vertx io.vertx:vertx-core: memory leak when a TCP server is configured with TLS and SNI support quarkus-core: Leak of local configuration properties into Quarkus applications commons-compress: Denial of service caused by an infinite loop for a corrupted DUMP file netty-codec-http: Allocation of Resources Without Limits or Throttling</p> https://cve.radiocsirt.org/vuln/rhsa-2024:3527 https://cve.radiocsirt.org/vuln/suse-su-2021:0948-1 <p>Security update for zstd</p> <p>Security update for zstd</p> https://cve.radiocsirt.org/vuln/suse-su-2021:0948-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-24032 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: libzstd, Ubuntu:18.04:LTS: libzstd, Ubuntu:20.04:LTS: libzstd</p> <p>Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created output files with default permissions and restricted those permissions immediately afterwards. Output files could therefore momentarily be readable or writable to unintended parties.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: libzstd, Ubuntu:18.04:LTS: libzstd, Ubuntu:20.04:LTS: libzstd</p> <p>Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created output files with default permissions and restricted those permissions immediately afterwards. Output files could therefore momentarily be readable or writable to unintended parties.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-24032