OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2025-12-29 07:46:22 +01:00
Code Issues Packages Projects Releases Wiki Activity

arrow DecimalArray advisory (#1058)

Browse Source 
* Create RUSTSEC-0000-0000.md

* `url` instead of `references`

* remove references to writes
This commit is contained in:
Sergey "Shnatsel" Davidoff
2021-09-29 17:58:28 +02:00
committed by GitHub
parent a7d4ec8dd9
commit edfbe64d47
1 changed files with 18 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
crates/arrow/RUSTSEC-0000-0000.md Normal file
View File

@@ -0,0 +1,18 @@
```toml
[advisory]
id = "RUSTSEC-0000-0000"
package = "arrow"
date = "2021-09-14"
url = "https://github.com/apache/arrow-rs/issues/775"
categories = ["memory-exposure"]
keywords = ["buffer-overflow"]
[versions]
patched = []
```
# `DecimalArray` does not perform bound checks on accessing values and offsets
`DecimalArray` performs insufficient bounds checks,
which allows out-of-bounds reads in safe code
if the lenght of the backing buffer is not a multiple of 16.