Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2018-1000622 →

DEBIAN-CVE-2018-1000622

The Rust Programming Language rustdoc version Between 0.8 and 1.27.0 contains a CWE-427: Uncontrolled Search Path Element vulnerability in rustdoc plu...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

The Rust Programming Language rustdoc version Between 0.8 and 1.27.0 contains a CWE-427: Uncontrolled Search Path Element vulnerability in rustdoc plugins that can result in local code execution as a different user. This attack appear to be exploitable via using the --plugin flag without the --plugin-path flag. This vulnerability appears to have been fixed in 1.27.1.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 rustc

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.27.1+dfsg1-1~exp1"}]}]

Debian:13 rustc

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.27.1+dfsg1-1~exp1"}]}]

Debian:14 rustc

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.27.1+dfsg1-1~exp1"}]}]

Références

advisory security-tracker.debian.org