RUSTSEC-2020-0033

See a problem?
Source
https://rustsec.org/advisories/RUSTSEC-2020-0033
Import Source
https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2020-0033.json
JSON Data
https://api.osv.dev/v1/vulns/RUSTSEC-2020-0033
Aliases
Published
2020-08-25T12:00:00Z
Modified
2023-11-08T04:03:44.476394Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
Matrix::new() drops uninitialized memory
Details

Matrix::new() internally calls Matrix::fill_with() which uses *ptr = value pattern to initialize the buffer. This pattern assumes that there is an initialized struct at the address and drops it, which results in dropping of uninitialized struct.

References

Affected packages

crates.io / alg_ds

Package

Name
alg_ds
View open source insights on deps.dev
Purl
pkg:cargo/alg_ds

Affected ranges

Type
SEMVER
Events
Introduced
0.0.0-0

Ecosystem specific 

{
    "affected_functions": null,
    "affects": {
        "os": [],
        "functions": [],
        "arch": []
    }
}

Database specific 

{
    "cvss": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
    "informational": null,
    "categories": []
}