« List of all CVEs

CVE-2019-1010299

Published: 7/15/2019 Last updated: 8/5/2024 Reserved: 3/20/2019

The Rust Programming Language Standard Library 1.18.0 and later is affected by: CWE-200: Information Exposure. The impact is: Contents of uninitialized memory could be printed to string or to log file. The component is: Debug trait implementation for std::collections::vec_deque::Iter. The attack vector is: The program needs to invoke debug printing for iterator over an empty VecDeque. The fixed version is: 1.30.0, nightly versions after commit b85e4cc8fadaabd41da5b9645c08c68b8f89908d.

CNA assigner: dwf (7556d962-6fb7-411e-85fa-6cd62f095ba8) Requested by: n/a

Opam packages affected (6)

conf-rust conf-rust-2018 conf-rust-2021 conf-rust-2024 conf-rust-llvm conf-rust-wasm

Products affected (1)

Product Vendor Version
Standard Library The Rust Programming Language < b32aa95843cac6b12c2c014d40fca18aef24a347

References (4)