GitHub Advisoryadvisory · crates.io

GHSA-gffv-5hr2-f9gj Flaw in streaming state in orion

HIGH Published 2021-08-25 Modified 2023-06-13 Official page ↗
Aliases
CVE-2018-20999
Ecosystem
crates.io
Packages
orion
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-682
Reviewed
2021-08-19

Affected packages

• crates.io orion: < 0.11.2 → fixed in 0.11.2

Description

Affected versions of this crate did not properly reset a streaming state. Resetting a streaming state, without finalising it first, creates incorrect results. The flaw was corrected by not first checking if the state had already been reset, when calling reset().

Related

Alias · CVE (1)

  • CVE-2018-20999 An issue was discovered in the orion crate before 0.11.2 for Rust. vulnerability

Weakness · CWE (1)

  • CWE-682 Incorrect Calculation weakness

References