In the standard library in Rust before 1.52.0, there is an optimization for joining strings that can cause uninitialized bytes to be exposed (or the program to crash) if the borrowed string changes after its length is checked.
References
Configurations
History
07 Nov 2023, 03:22
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
27 Apr 2021, 14:37
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:* |
|
References | (MISC) https://github.com/rust-lang/rust/pull/81728#issuecomment-824904190 - Patch, Third Party Advisory | |
References | (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TFUO3URYCO73D2Q4WYJBWAMJWGGVXQO4/ - Mailing List, Third Party Advisory | |
References | (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VZG65GUW6Z2CYOQHF7T3TB5CZKIX6ZJE/ - Mailing List, Third Party Advisory | |
References | (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CZ337CM4GFJLRDFVQCGC7J25V65JXOG5/ - Mailing List, Third Party Advisory |
27 Apr 2021, 04:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
26 Apr 2021, 13:15
Type | Values Removed | Values Added |
---|---|---|
Summary | In the standard library in Rust before 1.52.0, there is an optimization for joining strings that can cause uninitialized bytes to be exposed (or the program to crash) if the borrowed string changes after its length is checked. | |
References |
|
24 Apr 2021, 23:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
20 Apr 2021, 16:53
Type | Values Removed | Values Added |
---|---|---|
References | (MISC) https://github.com/rust-lang/rust/pull/81728#issuecomment-821549174 - Patch, Third Party Advisory | |
References | (MISC) https://github.com/rust-lang/rust/pull/81728 - Patch, Third Party Advisory | |
References | (MISC) https://github.com/rust-lang/rust/issues/80335 - Patch, Third Party Advisory | |
CVSS |
v2 : v3 : |
v2 : 6.4
v3 : 8.2 |
CPE | cpe:2.3:a:rust-lang:rust:*:*:*:*:*:*:*:* | |
CWE | CWE-134 |
19 Apr 2021, 16:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
14 Apr 2021, 07:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2021-04-14 07:15
Updated : 2023-12-10 13:55
NVD link : CVE-2020-36323
Mitre link : CVE-2020-36323
CVE.ORG link : CVE-2020-36323
JSON object : View
Products Affected
fedoraproject
- fedora
rust-lang
- rust
CWE
CWE-134
Use of Externally-Controlled Format String