OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2025-12-31 16:50:28 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
3c8a9dc31d7ea1dc49d6851aa8a1dfe531ea06bd
advisory-db/crates/stack/RUSTSEC-2020-0042.md
Alexis Mousset 8c05fea5fa Add cvss information from nvd (#1085)
2021-10-19 16:14:35 -06:00

507 B
Raw Blame History 

[advisory]
id = "RUSTSEC-2020-0042"
package = "stack"
aliases = ["CVE-2020-35895"]
cvss = "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
date = "2020-09-24"
url = "https://github.com/arcnmx/stack-rs/issues/4"

[versions]
patched = [">= 0.3.1"]

Missing check in ArrayVec leads to out-of-bounds write.

ArrayVec::insert allows insertion of an element into the array object into the specified index. Due to a missing check on the upperbound of this index, it is possible to write out of bounds.