Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rpcm-whqc-jfw8

Опубликовано: 25 авг. 2021
Источник: github
Github: Прошло ревью
CVSS3: 9.8

Описание

Use after free in libflate

An issue was discovered in the libflate crate before 0.1.25 for Rust. MultiDecoder::read has a use-after-free, leading to arbitrary code execution.

Пакеты

Наименование

libflate

rust
Затронутые версииВерсия исправления

>= 0.1.14, < 0.1.25

0.1.25

EPSS

Процентиль: 82%
0.01748
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 6 лет назад

An issue was discovered in the libflate crate before 0.1.25 for Rust. MultiDecoder::read has a use-after-free, leading to arbitrary code execution.

CVSS3: 9.8
nvd
больше 6 лет назад

An issue was discovered in the libflate crate before 0.1.25 for Rust. MultiDecoder::read has a use-after-free, leading to arbitrary code execution.

CVSS3: 9.8
debian
больше 6 лет назад

An issue was discovered in the libflate crate before 0.1.25 for Rust. ...

EPSS

Процентиль: 82%
0.01748
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-416