OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2026-01-07 04:01:35 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add advisory for uninitialized exposure in uu_od (#836)

Browse Source
This commit is contained in:
Ammar Askar
2021-03-26 09:05:12 -04:00
committed by GitHub
parent cc8f4f0615
commit 6265d0dc36
1 changed files with 22 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
crates/uu_od/RUSTSEC-0000-0000.md Normal file
View File

@@ -0,0 +1,22 @@
```toml
[advisory]
id = "RUSTSEC-0000-0000"
package = "uu_od"
date = "2021-02-17"
url = "https://github.com/uutils/coreutils/issues/1729"
categories = ["memory-exposure"]
[versions]
patched = [">= 0.0.4"]
```
# PartialReader passes uninitialized memory to user-provided Read
Affected versions of this crate passed an uniniitalized buffer to a
user-provided `Read` instance in `PartialReader::read`.
This can result in safe `Read` implementations reading from the uninitialized
buffer leading to undefined behavior.
The flaw was fixed in commit [`39d62c6`](https://github.com/uutils/coreutils/commit/39d62c6c1f809022c903180471c10fde6ecd12d1)
by zero-initializing the passed buffer.