CVE-2019-1010299
EUVD-2019-203515.07.2019, 18:15
The Rust Programming Language Standard Library 1.18.0 and later is affected by: CWE-200: Information Exposure. The impact is: Contents of uninitialized memory could be printed to string or to log file. The component is: Debug trait implementation for std::collections::vec_deque::Iter. The attack vector is: The program needs to invoke debug printing for iterator over an empty VecDeque. The fixed version is: 1.30.0, nightly versions after commit b85e4cc8fadaabd41da5b9645c08c68b8f89908d.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| rust-lang | rust | 1.18.0 ≤ 𝑥 < 1.30.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
- CWE-200 - Exposure of Sensitive Information to an Unauthorized ActorThe product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
- CWE-908 - Use of Uninitialized ResourceThe software uses or accesses a resource that has not been initialized.