Lucene search
+L

1 matches found

RustSec
RustSec
added 2021/02/12 12:0 p.m.26 views

Incorrect check on buffer length when seeding RNGs

Summary: randcore::le::readu32into and readu64into have incorrect checks on the source buffer length, allowing the destination buffer to be under-filled. Implications: some downstream RNGs, including Hc128Rng but not the more widely used ChaChaRng, allow seeding using the SeedableRng::fromseed...

9.8CVSS2.2AI score0.01228EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder