CVE-2024-14031 in Sereal::Encoder
요약 (영어)
Sereal::Encoder versions from 4.000 through 4.009_002 for Perl is vulnerable to a buffer overwrite flaw in the Zstandard library.
Sereal::Encoder embeds a version of the Zstandard (zstd) library that is vulnerable to CVE-2019-11922. This is a race condition in the one-pass compression functions of Zstandard prior to version 1.3.8 could allow an attacker to write bytes out of bounds if an output buffer smaller than the recommended size was used.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
책임이 있는
CPANSec
예약하다
2026. 03. 29.
공개
2026. 03. 31.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 354369 | YVES Sereal::Encoder Compression 원격 코드 실행 | 1395 | 정의되지 않음 | 정의되지 않음 | CVE-2024-14031 |