PT-2021-18731
CVE-2021-30454
·
Published
2021-01-31
·
Updated
2021-08-25
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
outer cgi crate versions prior to 0.2.1
Description
An issue in the outer cgi crate allows a user-provided
Read instance to receive an uninitialized memory buffer from KeyValueReader. This can cause the Read instance to read uninitialized memory, leading to undefined behavior and miscompilations.Recommendations
For outer cgi crate versions prior to 0.2.1, update to version 0.2.1 or later to fix the issue by ensuring buffers are zero-initialized before being passed to the
Read instance. Found an issue in the description? Have something to add? Feel free to write us 👾