Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
1.9
CVSSv2

CVE-2021-24032

Published: 04/03/2021 Updated: 28/04/2021
CVSS v2 Base Score: 1.9 | Impact Score: 2.9 | Exploitability Score: 3.4
CVSS v3 Base Score: 4.7 | Impact Score: 3.6 | Exploitability Score: 1
VMScore: 169
Vector: AV:L/AC:M/Au:N/C:P/I:N/A:N
Subscribe to Zstandard

Vulnerability Summary

Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created output files with default permissions and restricted those permissions immediately afterwards. Output files could therefore momentarily be readable or writable to unintended parties.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

Vendor Advisories

Red Hat: CVE-2021-24032
No description is available for this CVE ...
Arch Linux Issues:
A security issue was found in zstd before version 149 During compression and decompression, files were created with the default umask before tightening the file permissions to 0600 By exploiting this race condition, attackers could read or write files they would otherwise not be allowed to access ...

References

CWE-276https://github.com/facebook/zstd/issues/2491https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=982519https://www.facebook.com/security/advisories/cve-2021-24032https://nvd.nist.govhttps://access.redhat.com/security/cve/cve-2021-24032
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionSSRFbuffer overflowCVE-2023-28952CVE-2023-41822CVE-2024-27956CVE-2023-7028CVE-2024-34447CVE-2024-34460
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook