CVE-2020-35903 - An issue was discovered in the dync crate before 0.5.0 for Rust

Back Back to CVE browser

MEDIUM

An issue was discovered in the dync crate before 0.5.0 for Rust

Published Dec 31, 2020

5.5

MEDIUM

CVSS 3.1

EPSS 0.38%

Description

An issue was discovered in the dync crate before 0.5.0 for Rust. VecCopy allows misaligned element access because u8 is not always the type in question.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-125

Out-of-bounds Read

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-1852
Advisory
https://github.com/advisories/GHSA-qxjq-v4wf-ppvh
Advisory
https://github.com/elrnv/dync/issues/4
https://nvd.nist.gov/vuln/detail/CVE-2020-35903
https://rustsec.org/advisories/RUSTSEC-2020-0050.html
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-1852		Advisory
https://github.com/advisories/GHSA-qxjq-v4wf-ppvh		Advisory
https://github.com/elrnv/dync/issues/4
https://nvd.nist.gov/vuln/detail/CVE-2020-35903
https://rustsec.org/advisories/RUSTSEC-2020-0050.html		x_refsource_MISCExploitThird Party Advisory