CVE-2021-29939

Опубликовано: 01 апр. 2021

Источник: nvd

CVSS3: 7.3

CVSS2: 7.5

EPSS Низкий

Описание

An issue was discovered in the stackvector crate through 2021-02-19 for Rust. There is an out-of-bounds write in StackVec::extend if size_hint provides certain anomalous data.

Ссылки

https://rustsec.org/advisories/RUSTSEC-2021-0048.html
Exploit
Vendor Advisory
https://rustsec.org/advisories/RUSTSEC-2021-0048.html
Exploit
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:stackvector_project:stackvector:*:*:*:*:*:rust:*:*

Версия до 1.0.9 (исключая)

EPSS

Процентиль: 73%

0.00765

Низкий

7.3 High

CVSS3

7.5 High

CVSS2

Дефекты

CWE-787

Связанные уязвимости

CVE-2021-29939

CVSS3: 7.3

ubuntu

почти 5 лет назад

An issue was discovered in the stackvector crate through 2021-02-19 for Rust. There is an out-of-bounds write in StackVec::extend if size_hint provides certain anomalous data.

CVE-2021-29939

CVSS3: 7.3

debian

почти 5 лет назад

An issue was discovered in the stackvector crate through 2021-02-19 fo ...

GHSA-9frf-r7c7-j2vg

CVSS3: 7.3

github

больше 4 лет назад

Out of bounds write in stackvector

EPSS

Процентиль: 73%

0.00765

Низкий

7.3 High

CVSS3

7.5 High

CVSS2

Дефекты

CWE-787