GHSA-9q5j-jm53-v7vr — Vulnetix

GHSA-9q5j-jm53-v7vr PUBLISHED CVSS 9.300000190734863 CRITICAL

lz4-sys vulnerable to memory corruption via issue in liblz4

Risk Scores

CVSS 4.0

9.300000190734863

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Products

Vendor	Product	Versions
crates.io	lz4-sys	0, 0, 0

Timeline

Sep 1, 2022 CVE Published

References

https://rustsec.org/advisories/RUSTSEC-2022-0051.html url
GitHub Advisory GHSA-9q5j-jm53-v7vr vendor-advisory
https://github.com/lz4/lz4/pull/972 url

Open in Interactive Console →

$ Console Community · 100/wk Open console ›