Stack overflow during recursive expression parsing(CVE-2022-31099)

概要

Stack overflow during recursive expression parsing

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

When parsing untrusted rulex expressions, the stack may overflow, possibly
enabling a Denial of Service attack. This happens when parsing an expression
with several hundred levels of nesting, causing the process to abort
immediately.

The flaw was corrected in commits 60aa2dc03a by adding a check to recursion
depth.

出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

影響パッケージ

crates.io rulex

[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"},{"fixed":"0.4.3"}]}]

参照URL

advisory rustsec.org
package crates.io
web github.com