| ID |
CVE-2019-12083
|
| Summary |
The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method which, if overridden, can violate Rust's safety guarantees and cause memory unsafety. If the `Error::type_id` method is overridden then any type can be safely cast to any other type, causing memory safety vulnerabilities in safe code (e.g., out-of-bounds write or read). Code that does not manually implement Error::type_id is unaffected. |
| References |
|
| Vulnerable Configurations |
-
cpe:2.3:a:rust-lang:rust:1.34.0:*:*:*:*:*:*:*
cpe:2.3:a:rust-lang:rust:1.34.0:*:*:*:*:*:*:*
-
cpe:2.3:a:rust-lang:rust:1.34.1:*:*:*:*:*:*:*
cpe:2.3:a:rust-lang:rust:1.34.1:*:*:*:*:*:*:*
-
cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*
-
cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*
-
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
|
| CVSS |
| Base: | 6.8 (as of 03-03-2023 - 20:55) |
| Impact: | |
| Exploitability: | |
|
| CWE |
CWE-787 |
| CAPEC |
|
| Access |
| Vector | Complexity | Authentication |
| NETWORK |
MEDIUM |
NONE |
|
| Impact |
| Confidentiality | Integrity | Availability |
| PARTIAL |
PARTIAL |
PARTIAL |
|
| cvss-vector
via4
|
AV:N/AC:M/Au:N/C:P/I:P/A:P
|
| refmap
via4
|
| fedora | - FEDORA-2019-e39d4910c6
- FEDORA-2019-f76f0e11b3
| | misc | | | suse | - openSUSE-SU-2019:2203
- openSUSE-SU-2019:2244
- openSUSE-SU-2019:2294
|
|
| Last major update |
03-03-2023 - 20:55 |
| Published |
13-05-2019 - 20:29 |
| Last modified |
03-03-2023 - 20:55 |
