Vulnerabilities (CVE)

Filtered by vendor Rust-lang Subscribe
Filtered by product Rust
Total 22 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-1010299 1 Rust-lang 1 Rust 2020-09-30 5.0 MEDIUM 5.3 MEDIUM
The Rust Programming Language Standard Library 1.18.0 and later is affected by: CWE-200: Information Exposure. The impact is: Contents of uninitialized memory could be printed to string or to log file. The component is: Debug trait implementation for std::collections::vec_deque::Iter. The attack vector is: The program needs to invoke debug printing for iterator over an empty VecDeque. The fixed version is: 1.30.0, nightly versions after commit b85e4cc8fadaabd41da5b9645c08c68b8f89908d.
CVE-2018-1000657 1 Rust-lang 1 Rust 2018-10-18 4.6 MEDIUM 7.8 HIGH
Rust Programming Language Rust standard library version Commit bfa0e1f58acf1c28d500c34ed258f09ae021893e and later; stable release 1.3.0 and later contains a Buffer Overflow vulnerability in std::collections::vec_deque::VecDeque::reserve() function that can result in Arbitrary code execution, but no proof-of-concept exploit is currently published.. This vulnerability appears to have been fixed in after commit fdfafb510b1a38f727e920dccbeeb638d39a8e60; stable release 1.22.0 and later.