Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS1yNDV4LWdocjItcWp4Y84AArtA

Duplicate Advisory: `#[zeroize(drop)]` doesn't implement `Drop` for `enum`s

Duplicate Advisory

This advisory is a duplicate of GHSA-c5hx-w945-j4pq. This link is preserved to maintain external references.

Original Description

Affected versions of this crate did not implement Drop when #[zeroize(drop)] was used on an enum.

This can result in memory not being zeroed out after dropping it, which is exactly what is intended when adding this attribute.

The flaw was corrected in version 1.2 and #[zeroize(drop)] on enums now properly implements Drop.

Permalink: https://github.com/advisories/GHSA-r45x-ghr2-qjxc
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1yNDV4LWdocjItcWp4Y84AArtA
Source: GitHub Advisory Database
Origin: Unspecified
Severity: High
Classification: General
Published: almost 2 years ago
Updated: over 1 year ago

Widthdrawn: almost 2 years ago

CVSS Score: 7.5
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Identifiers: GHSA-r45x-ghr2-qjxc
References:

• https://github.com/iqlusioninc/crates/issues/876
• https://rustsec.org/advisories/RUSTSEC-2021-0115.html
• https://github.com/advisories/GHSA-r45x-ghr2-qjxc

Repository: https://github.com/iqlusioninc/crates
Blast Radius: 29.4

Affected Packages