Vulnerabilites related to The Rust Programming Language - Standard Library
cve-2019-1010299
Vulnerability from cvelistv5
Published
2019-07-15 17:18
Modified
2024-08-05 03:07
Severity ?
EPSS score ?
Summary
The Rust Programming Language Standard Library 1.18.0 and later is affected by: CWE-200: Information Exposure. The impact is: Contents of uninitialized memory could be printed to string or to log file. The component is: Debug trait implementation for std::collections::vec_deque::Iter. The attack vector is: The program needs to invoke debug printing for iterator over an empty VecDeque. The fixed version is: 1.30.0, nightly versions after commit b85e4cc8fadaabd41da5b9645c08c68b8f89908d.
References
▼ | URL | Tags |
---|---|---|
https://github.com/rust-lang/rust/issues/53566 | x_refsource_MISC | |
https://github.com/rust-lang/rust/pull/53571/commits/b85e4cc8fadaabd41da5b9645c08c68b8f89908d | x_refsource_MISC |
Impacted products
Vendor | Product | Version | ||
---|---|---|---|---|
The Rust Programming Language | Standard Library |
Version: 1.18.0 and later [fixed: 1.30.0, nightly versions after commit b85e4cc8fadaabd41da5b9645c08c68b8f89908d] |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-05T03:07:18.461Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_refsource_MISC", "x_transferred", ], url: "https://github.com/rust-lang/rust/issues/53566", }, { tags: [ "x_refsource_MISC", "x_transferred", ], url: "https://github.com/rust-lang/rust/pull/53571/commits/b85e4cc8fadaabd41da5b9645c08c68b8f89908d", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { product: "Standard Library", vendor: "The Rust Programming Language", versions: [ { status: "affected", version: "1.18.0 and later [fixed: 1.30.0, nightly versions after commit b85e4cc8fadaabd41da5b9645c08c68b8f89908d]", }, ], }, ], descriptions: [ { lang: "en", value: "The Rust Programming Language Standard Library 1.18.0 and later is affected by: CWE-200: Information Exposure. The impact is: Contents of uninitialized memory could be printed to string or to log file. The component is: Debug trait implementation for std::collections::vec_deque::Iter. The attack vector is: The program needs to invoke debug printing for iterator over an empty VecDeque. The fixed version is: 1.30.0, nightly versions after commit b85e4cc8fadaabd41da5b9645c08c68b8f89908d.", }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-200", description: "CWE-200: Information Exposure", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2019-07-15T17:18:46", orgId: "7556d962-6fb7-411e-85fa-6cd62f095ba8", shortName: "dwf", }, references: [ { tags: [ "x_refsource_MISC", ], url: "https://github.com/rust-lang/rust/issues/53566", }, { tags: [ "x_refsource_MISC", ], url: "https://github.com/rust-lang/rust/pull/53571/commits/b85e4cc8fadaabd41da5b9645c08c68b8f89908d", }, ], x_legacyV4Record: { CVE_data_meta: { ASSIGNER: "cve-assign@distributedweaknessfiling.org", ID: "CVE-2019-1010299", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "Standard Library", version: { version_data: [ { version_value: "1.18.0 and later [fixed: 1.30.0, nightly versions after commit b85e4cc8fadaabd41da5b9645c08c68b8f89908d]", }, ], }, }, ], }, vendor_name: "The Rust Programming Language", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "The Rust Programming Language Standard Library 1.18.0 and later is affected by: CWE-200: Information Exposure. The impact is: Contents of uninitialized memory could be printed to string or to log file. The component is: Debug trait implementation for std::collections::vec_deque::Iter. The attack vector is: The program needs to invoke debug printing for iterator over an empty VecDeque. The fixed version is: 1.30.0, nightly versions after commit b85e4cc8fadaabd41da5b9645c08c68b8f89908d.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "CWE-200: Information Exposure", }, ], }, ], }, references: { reference_data: [ { name: "https://github.com/rust-lang/rust/issues/53566", refsource: "MISC", url: "https://github.com/rust-lang/rust/issues/53566", }, { name: "https://github.com/rust-lang/rust/pull/53571/commits/b85e4cc8fadaabd41da5b9645c08c68b8f89908d", refsource: "MISC", url: "https://github.com/rust-lang/rust/pull/53571/commits/b85e4cc8fadaabd41da5b9645c08c68b8f89908d", }, ], }, }, }, }, cveMetadata: { assignerOrgId: "7556d962-6fb7-411e-85fa-6cd62f095ba8", assignerShortName: "dwf", cveId: "CVE-2019-1010299", datePublished: "2019-07-15T17:18:46", dateReserved: "2019-03-20T00:00:00", dateUpdated: "2024-08-05T03:07:18.461Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }