mirror of
https://github.com/OMGeeky/advisory-db.git
synced 2026-01-05 19:20:34 +01:00
58db1ee63a
Files vulnerabilities in the standard library originally reported at: https://groups.google.com/forum/#!forum/rustlang-security-announcements Or otherwise collected at: https://github.com/RustSec/cargo-audit/issues/46 The `rustsec` crate doesn't presently consume these, but I'd like to add support ASAP.
16 lines
566 B
TOML
16 lines
566 B
TOML
[advisory]
|
|
id = "CVE-2018-1000657"
|
|
package = "std"
|
|
date = "2018-08-20"
|
|
title = "Buffer overflow vulnenrability in VecDeque::reserve()"
|
|
description = """
|
|
The `std::collections::vec_deque::VecDeque::reserve()` function contains a
|
|
buffer overflow vulnerability that can potentially result in arbitrary code
|
|
execution.
|
|
"""
|
|
patched_versions = [">= 1.22.0"]
|
|
unaffected_versions = ["< 1.3.0"]
|
|
categories = ["code-execution", "denial-of-service"]
|
|
url = "https://github.com/rust-lang/rust/issues/44800"
|
|
affected_functions = ["std::collections::vec_deque::VecDeque::reserve"]
|