CVE-2018-25023

概要

参考情報

• servo/rust-smallvec commit e64afc8
• raw.githubusercontent.com/rustsec/advisory-db/main/crates/smallvec/RUSTSEC-2018-0018.md · Third Party Advisory
• rustsec.org/advisories/RUSTSEC-2018-0018.html · Exploit

smallvec のその他の脆弱性

• CVE-2021-25900緊急 9.8An issue was discovered in the smallvec crate before 0.6.14 and 1.x before 1.6.1 for Rust. There is a heap-based buffer overflow in SmallVec…
• CVE-2019-15554緊急 9.8An issue was discovered in the smallvec crate before 0.6.10 for Rust. There is memory corruption for certain grow attempts with less than th…
• CVE-2019-15551緊急 9.8An issue was discovered in the smallvec crate before 0.6.10 for Rust. There is a double free for certain grow attempts with the current capa…
• CVE-2018-20991緊急 9.8An issue was discovered in the smallvec crate before 0.6.3 for Rust. The Iterator implementation mishandles destructors, leading to a double…