Описание
An issue was discovered in the bumpalo crate before 3.2.1 for Rust. The realloc feature allows the reading of unknown memory. Attackers can potentially read cryptographic keys.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| rust-bumpalo | fixed | 3.2.1-1 | package |
Примечания
https://rustsec.org/advisories/RUSTSEC-2020-0006.html
https://github.com/fitzgen/bumpalo/issues/69
EPSS
Процентиль: 51%
0.00285
Низкий
Связанные уязвимости
CVSS3: 7.5
ubuntu
около 5 лет назад
An issue was discovered in the bumpalo crate before 3.2.1 for Rust. The realloc feature allows the reading of unknown memory. Attackers can potentially read cryptographic keys.
CVSS3: 7.5
nvd
около 5 лет назад
An issue was discovered in the bumpalo crate before 3.2.1 for Rust. The realloc feature allows the reading of unknown memory. Attackers can potentially read cryptographic keys.
EPSS
Процентиль: 51%
0.00285
Низкий