QwikSec

Security Database

CVE

CWE

Training

CVE-2021-24031

Published: Mar 4, 2021

Modified: Aug 3, 2024

PUBLISHED

Description

In the Zstandard command-line utility prior to v1.4.1, output files were created with default permissions. Correct file permissions (matching the input) would only be set at completion time. Output files could therefore be readable or writable to unintended parties.

Vendor	Product	Versions
Facebook	Zstandard	unaffected `1.4.1 - < unspecified` affected `unspecified - < 1.4.1`

Weaknesses (CWE)

References

https://github.com/facebook/zstd/issues/1630

x_refsource_MISC

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=981404

x_refsource_MISC

https://www.facebook.com/security/advisories/cve-2021-24031

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.