Lucene search

K
redosRedosROS-20240805-02
HistoryAug 05, 2024 - 12:00 a.m.

ROS-20240805-02

2024-08-0500:00:00
redos.red-soft.ru
7
rust programming language
api
windows operating systems
vulnerability
remote attackers
arbitrary code
batch files

CVSS3

10

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

8.2

Confidence

Low

A vulnerability in the implementation of the application program interface of the Rust programming language interpreter for Windows operating systems is related to the introduction or modification of arguments.
Windows operating systems is related to the introduction or modification of arguments. Exploitation of the vulnerability
could allow an attacker acting remotely to execute arbitrary code by having the user call
Batch files with .bat and .cmd extensions

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64rust< 1.79.0-2UNKNOWN

CVSS3

10

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

8.2

Confidence

Low