Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3vv3-frrq-6486

Опубликовано: 25 авг. 2021
Источник: github
Github: Прошло ревью
CVSS3: 9.8

Описание

Use of Uninitialized Resource in alg_ds

An issue was discovered in the alg_ds crate through 2020-08-25 for Rust. Matrix::new() internally calls Matrix::fill_with() which uses *ptr = value pattern to initialize the buffer. This pattern assumes that there is an initialized struct at the address and drops it, which results in dropping of uninitialized struct.

Пакеты

Наименование

alg_ds

rust
Затронутые версииВерсия исправления

<= 0.3.1

Отсутствует

EPSS

Процентиль: 62%
0.00433
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-665
CWE-908

Связанные уязвимости

CVSS3: 9.8
nvd
больше 4 лет назад

An issue was discovered in the alg_ds crate through 2020-08-25 for Rust. There is a drop of uninitialized memory in Matrix::new().

EPSS

Процентиль: 62%
0.00433
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-665
CWE-908