Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS1qdjJyLWp4NnEtODlqZ80foA

Use of Uninitialized Resource in bronzedb-protocol.

An issue was discovered in the bronzedb-protocol crate through 2021-01-03 for Rust. ReadKVExt may read from uninitialized memory locations.

Permalink: https://github.com/advisories/GHSA-jv2r-jx6q-89jg
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1qdjJyLWp4NnEtODlqZ80foA
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Critical
Classification: General
Published: almost 3 years ago
Updated: over 1 year ago

CVSS Score: 9.8
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Percentage: 0.00235
EPSS Percentile: 0.62519

Identifiers: GHSA-jv2r-jx6q-89jg, CVE-2021-45682
References:

• https://nvd.nist.gov/vuln/detail/CVE-2021-45682
• https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/bronzedb-protocol/RUSTSEC-2021-0084.md
• https://rustsec.org/advisories/RUSTSEC-2021-0084.html
• https://github.com/Hexilee/BronzeDB/issues/1
• https://github.com/advisories/GHSA-jv2r-jx6q-89jg

Repository: https://github.com/Hexilee/BronzeDB
Blast Radius: 1.0

Affected Packages