发布于3月6日3月6日 Members SUSE: CVE-2022-4899: SUSE Linux Security Advisory Severity 8 CVSS (AV:N/AC:L/Au:N/C:N/I:N/A:C) Published 03/29/2023 Created 03/30/2023 Added 03/30/2023 Modified 01/28/2025 Description A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun. Solution(s) suse-upgrade-libzstd-devel suse-upgrade-libzstd-devel-32bit suse-upgrade-libzstd-devel-static suse-upgrade-libzstd1 suse-upgrade-libzstd1-32bit suse-upgrade-zstd References https://attackerkb.com/topics/cve-2022-4899 CVE - 2022-4899