CVE-2019-1010299
Medium
Description
The Rust Programming Language Standard Library 1.18.0 and later is affected by: CWE-200: Information Exposure. The impact is: Contents of uninitialized memory could be printed to string or to log file. The component is: Debug trait implementation for std::collections::vec_deque::Iter. The attack vector is: The program needs to invoke debug printing for iterator over an empty VecDeque. The fixed version is: 1.30.0, nightly versions after commit b85e4cc8fadaabd41da5b9645c08c68b8f89908d.
SeverityMedium
CVSS5.3
Exploit probability—
Product
Rust
PublishedJul 15, 2019
First seenJul 15, 2019
Weakness typeCWE-200Sensitive information exposure
How to fix
Update
- rust-lang rust1.30.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rust-lang rust | 1.18.0 ≤ v < 1.30.0 | 1.30.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.