GitHub Advisoryadvisory · crates.io
GHSA-vw5m-qw2r-m923 Use of Uninitialized Resource in messagepack-rs.
CRITICAL
Official page ↗
- Aliases
- CVE-2021-45690
- Ecosystem
- crates.io
- Packages
- messagepack-rs
- Severity
- Critical
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-908
- Reviewed
- 2022-01-06
Affected packages
• crates.io messagepack-rs: <= 0.8.1 (no fix yet)
Description
An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserialize_binary may read from uninitialized memory locations.
Related
Alias · CVE (1)
- CVE-2021-45690 An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. vulnerability
Weakness · CWE (1)
- CWE-908 Use of Uninitialized Resource weakness
References
- https://nvd.nist.gov/vuln/detail/CVE-2021-45690 advisory
- https://github.com/otake84/messagepack-rs/issues/2 web
- https://github.com/otake84/messagepack-rs package
- https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/messagepack-rs/RUSTSEC-2021-0092.md web
- https://rustsec.org/advisories/RUSTSEC-2021-0092.html web