PT-2019-16428

CVE-2019-25054

·

Published

2019-06-11

·

Updated

2022-01-06

Description by

CVSS 3.1
6.0
Medium
MetricsAV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions pnet crate versions prior to 0.27.2
Description The issue is caused by an erroneous compiler optimization of the IcmpTransportChannelIterator, leading to a segmentation fault when attempting to dereference an uninitialized descriptor. This results in a segfault due to the dereference of an uninitialized file descriptor.
Recommendations For versions prior to 0.27.2, update to version 0.27.2 or later to resolve the issue. As a temporary workaround, consider disabling the use of the IcmpTransportChannelIterator until a patch is available.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
GHSA-24G6-5RX7-58WJ
GHSA-R6FF-2Q3C-V3PV
RUSTSEC-2019-0037
Found an issue in the description? Have something to add? Feel free to write us 👾