Lucene search

CVE-2020-25575

🗓️ 14 Sep 2020 18:48:15Reported by mitreType

An issue in failure crate for Rust may introduce compatibility hazards and has a type confusion flaw when downcastin

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 25
OSV	RUSTSEC-2020-0036 failure is officially deprecated/unmaintained	2 May 202012:00	–	osv
OSV	RUSTSEC-2019-0036 Type confusion if __private_get_type_id__ is overridden	13 Nov 201912:00	–	osv
OSV	CVE-2019-25010	31 Dec 202010:15	–	osv
OSV	GHSA-JQ66-XH47-J9F3 Type confusion if __private_get_type_id__ is overriden	16 Jun 202223:06	–	osv
OSV	GHSA-R98R-J25Q-RMPR Rust Failure Crate Vulnerable to Type confusion	25 Aug 202120:46	–	osv
OSV	CVE-2020-25575	14 Sep 202019:15	–	osv
Cvelist	CVE-2020-25575	14 Sep 202018:15	–	cvelist
Cvelist	CVE-2019-25010	31 Dec 202008:31	–	cvelist
NVD	CVE-2020-25575	14 Sep 202019:15	–	nvd
NVD	CVE-2019-25010	31 Dec 202010:15	–	nvd

[
  {
    "cpes": [
      "cpe:2.3:a:failure_project:failure:0.1.5:*:*:*:*:rust:*:*"
    ],
    "vendor": "failure_project",
    "product": "failure",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "0.1.5 "
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
github	www.github.com/rust-lang-nursery/failure/issues/336
boats	www.boats.gitlab.io/blog/post/failure-to-fehler/
rustsec	www.rustsec.org/advisories/RUSTSEC-2020-0036.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

14 Sep 2020 18:15Current

6.7Medium risk

Vulners AI Score6.7

EPSS0.00619

SSVC