CVE-2017-1000430 - rust-base64 version <= 0.5.1 is vulnerable to a buffer overflow when calculating the size of a buffer to use when encoding base64 using the 'encode_config_buf' and 'encode_config' functions

Back Back to CVE browser

CRITICAL

rust-base64 version <= 0.5.1 is vulnerable to a buffer overflow when calculating the size of a buffer to use when encoding base64 using the 'encode_config_buf' and 'encode_config' functions

Published Jan 2, 2018

9.8

CRITICAL

CVSS 3.0

EPSS 1.53%

Description

rust-base64 version <= 0.5.1 is vulnerable to a buffer overflow when calculating the size of a buffer to use when encoding base64 using the 'encode_config_buf' and 'encode_config' functions

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-119

Buffer Overflow

References (5)

Link	Providers	Tags
https://github.com/RustSec/advisory-db/blob/master/crates/base64/RUSTSEC-2017-0004.toml		x_refsource_MISCThird Party Advisory
https://github.com/advisories/GHSA-x67x-vg9m-65c3		Advisory
https://github.com/alicemaz/rust-base64/commit/24ead980daf11ba563e4fb2516187a56a71ad319
https://nvd.nist.gov/vuln/detail/CVE-2017-1000430
https://rustsec.org/advisories/RUSTSEC-2017-0004.html