PT-2017-19381 · Unknown · Lz4-Compress

Publicado 2017-04-17 · Atualizado 2017-04-17

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions lz4-compress (affected versions not specified)

Description The lz4-compress crate is no longer maintained by its developers. As an alternative, users can consider lz4-compression, which is a maintained fork of lz4-compress. Another option is lz-fear, although it is compatible with the reference LZ4 implementation in C but not with lz4-compress.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

RUSTSEC-2017-0007

Produtos afetados

Lz4-Compress

Referências · 4

• https://rustsec.org/advisories/RUSTSEC-2017-0007.html · Nota
• https://gitlab.redox-os.org/redox-os/tfs/issues/89 · Nota
• https://osv.dev/vulnerability/RUSTSEC-2017-0007 · Aviso do Fabricante
• https://crates.io/crates/lz4-compress · Nota