CVE-2019-12083
High
Description
The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method which, if overridden, can violate Rust's safety guarantees and cause memory unsafety. If the `Error::type_id` method is overridden then any type can be safely cast to any other type, causing memory safety vulnerabilities in safe code (e.g., out-of-bounds write or read). Code that does not manually implement Error::type_id is unaffected.
SeverityHigh
CVSS8.1
Exploit probability—
Product
Rust
PublishedMay 13, 2019
First seenMay 13, 2019
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rust-lang rust | 1.34.0 ≤ v < 1.34.2 | 1.34.2 |
| fedoraproject fedora | 29, 30 | — |
| opensuse leap | 15.1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.