OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2026-01-17 00:56:28 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #127 from Shnatsel/patch-1

Browse Source 
Add advisory for smallvec issue #149
This commit is contained in:
Tony Arcieri
2019-07-19 13:47:20 -07:00
committed by GitHub
parent b8451d4f7f 150700481b
commit 587ac0152c
1 changed files with 17 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
crates/smallvec/RUSTSEC-0000-0000.toml Normal file
View File

@@ -0,0 +1,17 @@
[advisory]
id = "RUSTSEC-0000-0000"
package = "smallvec"
date = "2019-07-19"
title = "Memory corruption in SmallVec::grow()"
description = """
Attempting to call `grow` on a spilled SmallVec with a value less than the current capacity causes corruption of memory allocator data structures.
An attacker that controls the value passed to `grow` may exploit this flaw to obtain memory contents or gain remote code execution.
Credits to @ehuss for discovering, reporting and fixing the bug.
"""
patched_versions = [">= 0.6.10"]
unaffected_versions = ["< 0.6.3"]
url = "https://github.com/servo/rust-smallvec/issues/149"
keywords = ["memory corruption", "arbitrary code execution"]
affected_functions = ["smallvec::SmallVec::grow"]