OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2026-01-06 19:49:45 +01:00
Code Issues Packages Projects Releases Wiki Activity

RUSTSEC-2017-0006: rmpv: add patched versions

Browse Source 
Patched as of v0.4.2:

https://github.com/RustSec/advisory-db/pull/171#issuecomment-540169499
This commit is contained in:
Tony Arcieri
2019-10-11 09:07:24 -07:00
parent e98f9fd70f
commit cad07fbc25
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
crates/rmpv/RUSTSEC-2017-0006.toml
View File

@@ -10,7 +10,7 @@ buffers without checking whether there is sufficient data available.
This allows an attacker to do denial-of-service attacks by sending small
msgpack messages that allocate gigabytes of memory.
"""
patched_versions = []
patched_versions = [">= 0.4.2"]
url = "https://github.com/3Hren/msgpack-rust/issues/151"
categories = ["denial-of-service"]
keywords = ["memory", "dos", "msgpack", "serialization", "deserialization"]