Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Facebook Zstandard 1.4.1, unspecified Clear all filters
TI-2021-06349 CVE-2021-24032 · GHSA-ffqj-7pgc-cmj5

Incorrect default permissions in Meta Zstandard

Priority LOW 22

Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created output files with default permissions and restricted those permissions immediately afterwar…

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00348 Published 2021-03-04 Partial fix · 1.4.9 CWE-277
TI-2021-06348 CVE-2021-24031 · GHSA-5mqj-v3fr-pg3x

Incorrect default permissions in Meta Zstandard

Priority LOW 25

In the Zstandard command-line utility prior to v1.4.1, output files were created with default permissions.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00465 Published 2021-03-04 Partial fix · 1.4.1 CWE-277