CVE-2019-11922

CVE-2019-11922

Name

CVE-2019-11922

Description

A race condition in the one-pass compression functions of Zstandard prior to version 1.3.8 could allow an attacker to write bytes out of bounds if an output buffer smaller than the recommended size was used.

NVD Severity

high

Other trackers

CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia

Mailing lists

oss-security, full-disclosure, bugtraq

Exploits

Exploit DB, Metasploit

Forges

GitHub (code, issues), Aports (code, issues)

Type	URI
Vendor Advisory	https://www.facebook.com/security/advisories/cve-2019-11922
Patch	https://github.com/facebook/zstd/pull/1404/commits/3e5cdf1b6a85843e991d7d10f6a2567c15580da0
SUSE	http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00008.html
SUSE	http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00062.html
UBUNTU	https://usn.ubuntu.com/4108-1/
SUSE	http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00078.html
MISC	https://www.oracle.com/security-alerts/cpuoct2020.html

Type

URI

Vendor Advisory

https://www.facebook.com/security/advisories/cve-2019-11922

Patch

https://github.com/facebook/zstd/pull/1404/commits/3e5cdf1b6a85843e991d7d10f6a2567c15580da0

SUSE

http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00008.html

SUSE

http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00062.html

UBUNTU

https://usn.ubuntu.com/4108-1/