Описание
LZ4 vulnerable to Out-of-bounds Write
LZ4 bindings use a deprecated C API that is vulnerable to memory corruption, which could lead to arbitrary code execution if called with untrusted user input.
Пакеты
Наименование
github.com/cloudflare/golz4
go
Затронутые версииВерсия исправления
< 0.0.0-20140711154735-199f5f787806
0.0.0-20140711154735-199f5f787806
Связанные уязвимости
CVSS3: 9.8
redhat
около 3 лет назад
LZ4 bindings use a deprecated C API that is vulnerable to memory corruption, which could lead to arbitrary code execution if called with untrusted user input.
CVSS3: 9.8
nvd
около 3 лет назад
LZ4 bindings use a deprecated C API that is vulnerable to memory corruption, which could lead to arbitrary code execution if called with untrusted user input.