GHSA-jcr6-4frq-9gjj

Suggest an improvement
Source
https://github.com/advisories/GHSA-jcr6-4frq-9gjj
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/09/GHSA-jcr6-4frq-9gjj/GHSA-jcr6-4frq-9gjj.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-jcr6-4frq-9gjj
Aliases
Published
2023-09-11T20:43:31Z
Modified
2024-02-10T16:26:48.693482Z
Summary
Users vulnerable to unaligned read of `*const *const c_char` pointer
Details

Affected versions dereference a potentially unaligned pointer. The pointer is commonly unaligned in practice, resulting in undefined behavior.

In some build modes, this is observable as a panic followed by abort. In other build modes the UB may manifest in some other way, including the possibility of working correctly in some architectures.

The crate is not currently maintained, so a patched version is not available.

Recommended alternatives

  • uzers (an actively maintained fork of the users crate)
  • sysinfo
Database specific
{
    "nvd_published_at": null,
    "cwe_ids": [],
    "severity": "MODERATE",
    "github_reviewed": true,
    "github_reviewed_at": "2023-09-11T20:43:31Z"
}
References

Affected packages

crates.io / users

Package

Affected ranges

Type
SEMVER
Events
Introduced
0Unknown introduced version / All previous versions are affected
Last affected
0.11.0