Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2021-26953
HistoryFeb 09, 2021 - 11:15 p.m.

CVE-2021-26953

2021-02-0923:15:13
CWE-908
[email protected]
web.nvd.nist.gov
2
postscript crate
sensitive information
uninitialized memory
read implementation
security issue

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.003

Percentile

70.7%

JSON

An issue was discovered in the postscript crate before 0.14.0 for Rust. It might allow attackers to obtain sensitive information from uninitialized memory locations via a user-provided Read implementation.

Affected configurations

Nvd
Node
postscript_projectpostscriptRange<0.14.0rust

Related

osv 2
prion 1
cvelist 1
github 1
cve 1
rustsec 1
osv
osv
Read on uninitialized buffer in postscript
2021-08-25 20:52:23
`Read` on uninitialized buffer may cause UB (`impl Walue for Vec<u8>`)
2021-01-30 12:00:00
prion
prion
Information disclosure
2021-02-09 23:15:00
cvelist
cvelist
CVE-2021-26953
2021-02-09 22:06:38
github
github
Read on uninitialized buffer in postscript
2021-08-25 20:52:23
cve
cve
CVE-2021-26953
2021-02-09 23:15:13
rustsec
rustsec
`Read` on uninitialized buffer may cause UB (`impl Walue for Vec<u8>`)
2021-01-30 12:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.003

Percentile

70.7%

JSON
Related for NVD:CVE-2021-26953
osv2prion1cvelist1github1cve1rustsec1