Unrated
An issue was discovered in the smallvec crate before 0.6.13 for Rust. It can create an uninitialized value of any type, including a reference type.
CVE-2018-25023
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2018-25023 rust-smallvec Fixed in: 1.1.0-1
- Ubuntu UBUNTU-CVE-2018-25023 rust-smallvec
Original description The description as published by the source.
An issue was discovered in the smallvec crate before 0.6.13 for Rust. It can create an uninitialized value of any type, including a reference type.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory raw.githubusercontent.com
- patch github.com
- report rustsec.org