Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-78750
HistorySep 23, 2021 - 12:00 a.m.

Mozilla Rust Command Injection Vulnerability (CNVD-2021-78750)

2021-09-2300:00:00
China National Vulnerability Database
www.cnvd.org.cn
3

0.002 Low

EPSS

Percentile

59.3%

Rust is a general-purpose, compiled programming language from the Mozilla Foundation.Mozilla Rust versions prior to 0.3.4 are vulnerable to command injection, which stems from the kekbit crate in Rust, for ShmWriter <H>, Send is implemented without H: Send, and an attacker could exploit this vulnerability to cause data contention and undefined behavior.

CPENameOperatorVersion
mozilla rustlt0.3.4

0.002 Low

EPSS

Percentile

59.3%