Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2018-1000810 →
DEBIAN-CVE-2018-1000810
The Rust Programming Language Standard Library version 1.29.0, 1.28.0, 1.27.2, 1.27.1, 127.0, 126.2, 126.1, 126.0 contains a CWE-680: Integer Overflow...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
The Rust Programming Language Standard Library version 1.29.0, 1.28.0, 1.27.2, 1.27.1, 127.0, 126.2, 126.1, 126.0 contains a CWE-680: Integer Overflow to Buffer Overflow vulnerability in standard library that can result in buffer overflow. This attack appear to be exploitable via str::repeat, passed a large number, can overflow an internal buffer. This vulnerability appears to have been fixed in 1.29.1.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
rustc
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.30.0+dfsg1-1"}]}]
Debian:13
rustc
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.30.0+dfsg1-1"}]}]
Debian:14
rustc
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.30.0+dfsg1-1"}]}]
Références
- advisory security-tracker.debian.org