Lucene search

K
osvGoogleOSV:RUSTSEC-2019-0007
HistoryJun 13, 2019 - 12:00 p.m.

Processing of maliciously crafted length fields causes memory allocation SIGABRTs

2019-06-1312:00:00
Google
osv.dev
8

EPSS

0.001

Percentile

42.5%

Affected versions of this crate tried to preallocate a vector for an arbitrary amount of bytes announced by the ASN.1-DER length field without further checks.

This allows an attacker to trigger a SIGABRT by creating length fields that announce more bytes than the allocator can provide.

The flaw was corrected by not preallocating memory.

EPSS

0.001

Percentile

42.5%

Related for OSV:RUSTSEC-2019-0007