Mozilla Rust 缓冲区错误漏洞

漏洞信息详情

Rust是Mozilla基金会的一款通用、编译型编程语言。

Rust standard library 1.49.0之前版本存在安全漏洞，该漏洞源于当所提供的闭包出现问题时，它允许创建一个非utf -8 Rust字符串。

目前厂商已发布升级补丁以修复漏洞，详情请关注厂商主页：

https://github.com/rust-lang/rust

来源:MISC

链接:https://github.com/rust-lang/rust/issues/78498

来源:MISC

链接:https://github.com/rust-lang/rust/pull/78499

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/162666/Red-Hat-Security-Advisory-2021-1935-01.html

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.1680

来源:nvd.nist.gov

链接:https://nvd.nist.gov/vuln/detail/CVE-2020-36317

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.1932

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/162947/Red-Hat-Security-Advisory-2021-2243-01.html

来源:vigilance.fr

链接:https://vigilance.fr/vulnerability/Rust-assertion-error-via-String-retain-35480

暂无