Описание
The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method which, if overridden, can violate Rust's safety guarantees and cause memory unsafety. If the Error::type_id method is overridden then any type can be safely cast to any other type, causing memory safety vulnerabilities in safe code (e.g., out-of-bounds write or read). Code that does not manually implement Error::type_id is unaffected.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | not-affected | only affected nightly in this version |
| cosmic | not-affected | only affected nightly in this version |
| devel | not-affected | only affected nightly in this version |
| disco | not-affected | only affected nightly in this version |
| esm-apps/bionic | not-affected | only affected nightly in this version |
| esm-apps/xenial | not-affected | only affected nightly in this version |
| esm-infra-legacy/trusty | not-affected | only affected nightly in this version |
| precise/esm | DNE | |
| trusty | ignored | end of standard support |
| trusty/esm | not-affected | only affected nightly in this version |
Показывать по
EPSS
6.8 Medium
CVSS2
8.1 High
CVSS3
Связанные уязвимости
The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method which, if overridden, can violate Rust's safety guarantees and cause memory unsafety. If the `Error::type_id` method is overridden then any type can be safely cast to any other type, causing memory safety vulnerabilities in safe code (e.g., out-of-bounds write or read). Code that does not manually implement Error::type_id is unaffected.
The Rust Programming Language Standard Library 1.34.x before 1.34.2 co ...
The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method which, if overridden, can violate Rust's safety guarantees and cause memory unsafety. If the `Error::type_id` method is overridden then any type can be safely cast to any other type, causing memory safety vulnerabilities in safe code (e.g., out-of-bounds write or read). Code that does not manually implement Error::type_id is unaffected.
Уязвимость метода «Error::type_id» языка программирования Rust, позволяющая нарушителю выполнить произвольный код
EPSS
6.8 Medium
CVSS2
8.1 High
CVSS3