Lucene search

Ubuntu.comUB:CVE-2020-25016

HistoryAug 29, 2020 - 12:00 a.m.

CVE-2020-25016

2020-08-2900:00:00

ubuntu.com

safety violation

rgb crate

arbitrary pointer .

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS

0.002

Percentile

61.9%

JSON

A safety violation was discovered in the rgb crate before 0.8.20 for Rust,
leading to (for example) dereferencing of arbitrary pointers or disclosure
of uninitialized memory. This occurs because structs can be treated as
bytes for read and write operations.

Bugs

<http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=969213>

OSVersionArchitecturePackageVersionFilename
ubuntu20.04noarchrust-rgb< anyUNKNOWN
ubuntu22.04noarchrust-rgb< anyUNKNOWN
ubuntu24.04noarchrust-rgb< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	20.04	noarch	rust-rgb	< any	UNKNOWN
ubuntu	22.04	noarch	rust-rgb	< any	UNKNOWN
ubuntu	24.04	noarch	rust-rgb	< any	UNKNOWN

References

github.com/kornelski/rust-rgb/issues/35

launchpad.net/bugs/cve/CVE-2020-25016

nvd.nist.gov/vuln/detail/CVE-2020-25016

rustsec.org/advisories/RUSTSEC-2020-0029.html

security-tracker.debian.org/tracker/CVE-2020-25016

www.cve.org/CVERecord?id=CVE-2020-25016

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS

0.002

Percentile

61.9%

JSON

Related for UB:CVE-2020-25016