Co-authored-by: 0xd34b33f <0xd34b33f@users.noreply.github.com>
This commit is contained in:
Vladimir
2020-10-01 18:21:28 +03:00
committed by GitHub
parent b136b74460
commit 7c95e1b1a1

View File

@@ -0,0 +1,18 @@
[advisory]
id = "RUSTSEC-0000-0000"
package = "pnet"
date = "2019-06-11"
title = "Compiler optimisation for next_with_timeout in pnet::transport::IcmpTransportChannelIterator flaws to SEGFAULT"
url = "https://github.com/libpnet/libpnet/issues/449"
categories = ["memory-corruption"]
cvss = "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H"
keywords = ["segfault"]
description = """
Affected versions of this crate were optimized out by compiler,
which caused dereference of uninitialized file descriptor which caused segfault.
"""
[affected.functions]
"pnet::transport::IcmpTransportChannelIterator" = ["< 0.26.0"]
[versions]
patched = [">= 0.26.0"] # no patch exists yet