CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
Percentile
19.6%
The Miniscript (aka rust-miniscript) library for Rust allows stack consumption because it does not properly track tree depth.
Vendor | Product | Version | CPE |
---|---|---|---|
* | miniscript | * | cpe:2.3:a:*:miniscript:*:*:*:*:*:*:*:* |
github.com/advisories/GHSA-rv9v-r4vm-gj8x
github.com/rust-bitcoin/rust-miniscript/commit/5b0f5e3417f027a22b066debf825dbe6644b575b
github.com/rust-bitcoin/rust-miniscript/commit/8f54b5e3fb7129ed9fbed53f1cb9e6e62ea4c151
github.com/rust-bitcoin/rust-miniscript/compare/11.2.0...12.2.0
github.com/rust-bitcoin/rust-miniscript/pull/704
github.com/rust-bitcoin/rust-miniscript/pull/712
github.com/rust-bitcoin/rust-miniscript/pull/712/files
github.com/rust-bitcoin/rust-miniscript/pull/713/files
github.com/rust-bitcoin/rust-miniscript/pull/714/files
github.com/rust-bitcoin/rust-miniscript/pull/715/files
nvd.nist.gov/vuln/detail/CVE-2024-44073