CVE-2020-35909 - An issue was discovered in the multihash crate before 0.11.3 for Rust

Back Back to CVE browser

HIGH

An issue was discovered in the multihash crate before 0.11.3 for Rust

Published Dec 31, 2020

7.5

HIGH

CVSS 3.1

EPSS 1.39%

Description

An issue was discovered in the multihash crate before 0.11.3 for Rust. The from_slice parsing code can panic via unsanitized data from a network server.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (4)

https://github.com/advisories/GHSA-h7qh-3h6f-w79p
Advisory
https://github.com/multiformats/rust-multihash/pull/72
https://nvd.nist.gov/vuln/detail/CVE-2020-35909
https://rustsec.org/advisories/RUSTSEC-2020-0068.html
x_refsource_MISCPatchThird Party Advisory

Link	Providers	Tags
https://github.com/advisories/GHSA-h7qh-3h6f-w79p		Advisory
https://github.com/multiformats/rust-multihash/pull/72
https://nvd.nist.gov/vuln/detail/CVE-2020-35909
https://rustsec.org/advisories/RUSTSEC-2020-0068.html		x_refsource_MISCPatchThird Party Advisory