CVE-2020-36443
Critical
Description
An issue was discovered in the libp2p-deflate crate before 0.27.1 for Rust. An uninitialized buffer is passed to AsyncRead::poll_read(), which is a user-provided trait function.
SeverityCritical
CVSS9.8
Exploit probability—
ProductLibp2p-deflate
PublishedAug 8, 2021
First seenAug 8, 2021
How to fix
Update
- libp2p libp2p-deflate0.27.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| libp2p libp2p-deflate | v < 0.27.1 | 0.27.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.