PT-2021-18731
CVE-2021-30454
·
تاريخ النشر
2021-01-31
·
تاريخ التحديث
2021-08-25
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
outer cgi crate versions prior to 0.2.1
Description
An issue in the outer cgi crate allows a user-provided
Read instance to receive an uninitialized memory buffer from KeyValueReader. This can cause the Read instance to read uninitialized memory, leading to undefined behavior and miscompilations.Recommendations
For outer cgi crate versions prior to 0.2.1, update to version 0.2.1 or later to fix the issue by ensuring buffers are zero-initialized before being passed to the
Read instance. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾