GitHub Advisoryadvisory · crates.io

GHSA-hpcx-3pw8-g3j2 Free of uninitialized memory in telemetry

CRITICAL Published 2021-08-25 Modified 2022-06-14 Official page ↗
Aliases
CVE-2021-29937
Ecosystem
crates.io
Packages
telemetry
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-908
Reviewed
2021-08-19

Affected packages

• crates.io telemetry: < 0.1.3 → fixed in 0.1.3

Description

An issue was discovered in the telemetry crate through 0.1.2 for Rust. There is a drop of uninitialized memory if a value.clone() call panics within misc::vec_with_size()

Related

Alias · CVE (1)

  • CVE-2021-29937 An issue was discovered in the telemetry crate through 2021-02-17 for Rust. vulnerability

Weakness · CWE (1)

  • CWE-908 Use of Uninitialized Resource weakness

References