CVE-2019-16882

2019-09-2517:15:10

Google

osv.dev

6.6 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.2%

JSON

An issue was discovered in the string-interner crate before 0.7.1 for Rust. It allows attackers to read from memory locations associated with dangling pointers, because of a cloning flaw.

CPENameOperatorVersion
string-internereq0.6.2
string-internereq0.4.0
string-internereq0.6.3
string-internereq0.6.0
string-internereq0.5.0
string-internereq0.7.0
string-internereq0.3.3
string-internereq0.6.1

Name	Operator	Version
string-interner	eq	0.6.2
string-interner	eq	0.4.0
string-interner	eq	0.6.3
string-interner	eq	0.6.0
string-interner	eq	0.5.0
string-interner	eq	0.7.0
string-interner	eq	0.3.3
string-interner	eq	0.6.1

References

rustsec.org/advisories/RUSTSEC-2019-0023.html