buf-ref-reader (0.3.0), buf_redux (>=0.7.0, <=0.8.1) +9 more potentially affected by CVE-2019-15543 via slice-deque (0.1.16)

slice-deque CARGO version 0.1.16 is affected by a known vulnerability. The following packages have a transitive dependency on slice-deque and may be impacted: - buf-ref-reader 0.3.0 - bufredux =0.7.0, =0.1.0, =0.2.0, =0.1.0, =0.12.0, =0.14.0 - reactive-rs 0.1.1 - rtplot 0.2.0 - seqio 0.3.0 -...

PT-2018-15488

Name of the Vulnerable Software and Affected Versions slice-deque crate versions prior to 0.1.16 Description An issue in the slice-deque crate allows memory corruption due to mishandled deque updates. Specifically, when the tail of the deque is in the mirrored memory region before insertion or...