CVE-2019-1010299

The Rust Programming Language Standard Library 1.18.0 and later is affected by: CWE-200: Information Exposure. The impact is: Contents of uninitialized memory could be printed to string or to log file. The component is: Debug trait implementation for std::collections::vecdeque::Iter. The attack...

CVE-2019-1010299: Exposure of Sensitive Information to an Unauthorized Actor

The Rust Programming Language Standard Library 1.18.0 and later is affected by: CWE-200: Information Exposure. The impact is: Contents of uninitialized memory could be printed to string or to log file. The component is: Debug trait implementation for std::collections::vecdeque::Iter. The attack...

CVE-2019-12083

The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method which, if overridden, can violate Rust's safety guarantees and cause memory unsafety. If the Error::typeid method is overridden then any type can be safely cast to any other type, causing memory safet...

PT-2019-5079

Name of the Vulnerable Software and Affected Versions The Rust Programming Language Standard Library versions 1.34.x through 1.34.1 The Rust Programming Language Standard Library version 1.34.0 Description The issue is related to the Error::type id method in the Rust programming language, which c...

CVE-2019-12083: Out-of-bounds Read

The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method which, if overridden, can violate Rust's safety guarantees and cause memory unsafety. If the Error::typeid method is overridden then any type can be safely cast to any other type, causing memory safet...

PT-2019-11551

Name of the Vulnerable Software and Affected Versions: The Rust Programming Language Standard Library versions 1.18.0 through 1.29.0 Description: The issue concerns information exposure, where contents of uninitialized memory could be printed to a string or log file. This occurs in the Debug trai...

CVE-2018-1000810

The Rust Programming Language Standard Library version 1.29.0, 1.28.0, 1.27.2, 1.27.1, 127.0, 126.2, 126.1, 126.0 contains a CWE-680: Integer Overflow to Buffer Overflow vulnerability in standard library that can result in buffer overflow. This attack appear to be exploitable via str::repeat,...

CVE-2018-1000810: Integer Overflow or Wraparound

The Rust Programming Language Standard Library version 1.29.0, 1.28.0, 1.27.2, 1.27.1, 127.0, 126.2, 126.1, 126.0 contains a CWE-680: Integer Overflow to Buffer Overflow vulnerability in standard library that can result in buffer overflow. This attack appear to be exploitable via str::repeat,...

PT-2018-9534

Name of the Vulnerable Software and Affected Versions The Rust Programming Language Standard Library versions 1.27.1 through 1.29.0 The Rust Programming Language Standard Library version 1.27.2 The Rust Programming Language Standard Library version 1.28.0 The Rust Programming Language Standard...