Fluid Attacks Database

Description

Panic on two-block frames in github.com/klauspost/compress

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
go	github.com/klauspost/compress/zstd	>=0 <1.20.2	1.20.2
debian 12	golang-github-klauspost-compress	=1.15.12+ds1-3 \|\| =1.17.0+ds1-1 \|\| =1.17.0+ds1-1~exp1 \|\| =1.17.10+ds1-1 \|\| =1.17.11+ds1-1 \|\| =1.17.2+ds1-1 \|\| =1.17.7+ds1-1 \|\| =1.17.9+ds1-1 \|\| =1.17.9+ds1-1~bpo12+1 \|\| =1.18.0+ds1-1 \|\| =1.18.1+ds1-1 \|\| =1.18.6+ds1-1 \|\| =1.18.6+ds1-2 \|\| =1.19.0+ds1-1 \|\| =1.19.0+ds1-2 \|\| =1.20.0+ds1-1 \|\| =1.20.3+ds1-1	-
debian 13	golang-github-klauspost-compress	=1.18.0+ds1-1 \|\| =1.18.1+ds1-1 \|\| =1.18.6+ds1-1 \|\| =1.18.6+ds1-2 \|\| =1.19.0+ds1-1 \|\| =1.19.0+ds1-2 \|\| =1.20.0+ds1-1 \|\| =1.20.3+ds1-1	-
debian 14	golang-github-klauspost-compress	=1.18.0+ds1-1 \|\| =1.18.1+ds1-1 \|\| =1.18.6+ds1-1 \|\| =1.18.6+ds1-2 \|\| =1.19.0+ds1-1 \|\| =1.19.0+ds1-2 \|\| =1.20.0+ds1-1 \|\| >=0 <1.20.3+ds1-1	1.20.3+ds1-1
rpm rhel10	bootc-image-builder	-	-
rpm rhel9	bootc-image-builder	-	-
rpm rhel8	buildah	-	-
rpm rhel9	buildah	-	-
rpm rhel10	grafana	-	-
rpm rhel8	grafana	-	-

1-10 of 32

Aliases

References

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.