发布于3月6日3月6日 Members Amazon Linux AMI 2: CVE-2022-4899: Security patch for zstd (ALAS-2023-2140) Severity 8 CVSS (AV:N/AC:L/Au:N/C:N/I:N/A:C) Published 03/31/2023 Created 07/21/2023 Added 07/21/2023 Modified 01/28/2025 Description A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun. Solution(s) amazon-linux-ami-2-upgrade-libzstd amazon-linux-ami-2-upgrade-libzstd-devel amazon-linux-ami-2-upgrade-libzstd-static amazon-linux-ami-2-upgrade-zstd amazon-linux-ami-2-upgrade-zstd-debuginfo References https://attackerkb.com/topics/cve-2022-4899 AL2/ALAS-2023-2140 CVE - 2022-4899
