Add advisory for pancurses

This commit is contained in:
Thom Chiovoloni
2019-06-15 13:13:18 -07:00
parent 733c7140d1
commit 7e9fe78ade

View File

@@ -0,0 +1,19 @@
[advisory]
id = "RUSTSEC-0000-0000"
package = "pancurses"
date = "2019-06-15"
title = "Format string vulnerabilities in `pancurses`"
description = """
`pancurses::mvprintw` and `pancurses::printw` passes a pointer from a rust `&str` to C,
allowing hostile input to execute a format string attack, which trivially allows writing
arbitrary data to stack memory.
"""
patched_versions = []
url = "https://github.com/RustSec/advisory-db/issues/106"
affected_functions = ["pancurses::mvprintw", "pancurses::printw"]