GHSA-m3ww-7hrp-gw9w

Source

https://github.com/advisories/GHSA-m3ww-7hrp-gw9w

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/08/GHSA-m3ww-7hrp-gw9w/GHSA-m3ww-7hrp-gw9w.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-m3ww-7hrp-gw9w

Aliases

CVE-2020-35877
CVE-2020-35878
GHSA-p2q9-9cq6-h3jw
RUSTSEC-2020-0022

Published

2021-08-25T20:47:41Z

Modified

2023-11-08T04:03:37.072108Z

Severity

9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

Drop of uninitialized memory in Ozone

Details

An issue was discovered in the ozone crate through version 0.1.0 for Rust. Memory safety is violated because of the dropping of uninitialized memory.

Database specific

{
    "nvd_published_at": null,
    "cwe_ids": [
        "CWE-119",
        "CWE-908"
    ],
    "severity": "CRITICAL",
    "github_reviewed": true,
    "github_reviewed_at": "2021-08-19T21:08:59Z"
}

References

Affected packages

crates.io / ozone

Package

Name: ozone; View open source insights on deps.dev
Purl: pkg:cargo/ozone

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Last affected

0.1.0