Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7j44-fv4x-79g9

Опубликовано: 25 авг. 2021
Источник: github
Github: Прошло ревью
CVSS3: 7.5

Описание

Improper Input Validation in once_cell

If during the first dereference of Lazy the initialization function panics, subsequent dereferences will execute std::hints::unreachable_unchecked. Applications with panic = "abort" are not affected, as there will be no subsequent dereferences.

Пакеты

Наименование

once_cell

rust
Затронутые версииВерсия исправления

>= 0.2.5, < 1.0.1

1.0.1

EPSS

Процентиль: 55%
0.00328
Низкий

7.5 High

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 6 лет назад

An issue was discovered in the once_cell crate before 1.0.1 for Rust. There is a panic during initialization of Lazy.

CVSS3: 7.5
nvd
больше 6 лет назад

An issue was discovered in the once_cell crate before 1.0.1 for Rust. There is a panic during initialization of Lazy.

CVSS3: 7.5
debian
больше 6 лет назад

An issue was discovered in the once_cell crate before 1.0.1 for Rust. ...

EPSS

Процентиль: 55%
0.00328
Низкий

7.5 High

CVSS3

Дефекты

CWE-20