Add std CVE (#869)

This commit is contained in:
Yechan Bae
2021-04-13 17:22:28 -04:00
committed by GitHub
parent ce4db769c2
commit 22b59ea8a3
8 changed files with 128 additions and 0 deletions

View File

@@ -0,0 +1,16 @@
```toml
[advisory]
id = "CVE-2021-28879"
package = "std"
categories = ["memory-corruption"]
date = "2021-02-18"
url = "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28879"
[versions]
patched = [">= 1.52.0"]
unaffected = ["< 1.14.0"]
```
# Zip can cause buffer overflow when a consumed Zip iterator is used again
In the standard library in Rust before 1.52.0, the Zip implementation can report an incorrect size due to an integer overflow. This bug can lead to a buffer overflow when a consumed Zip iterator is used again.