GitHub Advisoryadvisory · crates.io

GHSA-m57c-4vvx-gjgq Format string vulnerabilities in pancurses

HIGH Published 2021-08-25 Modified 2021-08-18 Official page ↗

Aliases: CVE-2019-15546
Ecosystem: crates.io
Packages: pancurses
Severity: High
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weaknesses: CWE-134
Reviewed: 2021-08-18

Affected packages

• crates.io pancurses: <= 0.16.1 (no fix yet)

Description

An issue was discovered in the pancurses crate through 0.16.1 for Rust. printw and mvprintw have format string vulnerabilities.

Related

Alias · CVE (1)

CVE-2019-15546 An issue was discovered in the pancurses crate through 0.16.1 for Rust. vulnerability

Weakness · CWE (1)

CWE-134 Use of Externally-Controlled Format String weakness

References