Описание
An issue was discovered in the tremor-script crate before 0.11.6 for Rust. A merge operation may result in a use-after-free.
Ссылки
- https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/tremor-script/RUSTSEC-2021-0111.mdThird Party Advisory
- Third Party Advisory
- https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/tremor-script/RUSTSEC-2021-0111.mdThird Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 0.7.2 (включая) до 0.11.6 (исключая)
cpe:2.3:a:linuxfoundation:tremor-script:*:*:*:*:*:rust:*:*
EPSS
Процентиль: 60%
0.00393
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-416
Связанные уязвимости
EPSS
Процентиль: 60%
0.00393
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-416