Information Exposure Vulnerability in Rust Programming Language Standard Library
CVE-2019-1010299

5.3MEDIUM

Key Information:

Vendor

The Rust Programming Language

Status
Standard Library
Vendor
CVE Published:
15 July 2019

What is CVE-2019-1010299?

The Rust Programming Language Standard Library, starting from version 1.18.0, contains a vulnerability in the Debug trait implementation for the std::collections::vec_deque::Iter component. This vulnerability arises when debug printing is invoked on an iterator over an empty VecDeque, potentially exposing the contents of uninitialized memory. This can lead to sensitive data being printed to strings or log files, which is a significant concern for user privacy and system security. The issue has been addressed in version 1.30.0 and in nightly versions following an important code commit.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Standard Library 1.18.0 and later [fixed: 1.30.0, nightly versions after commit b85e4cc8fadaabd41da5b9645c08c68b8f89908d]

References

https://github.com/rust-lang/rust/issues/53566
x_refsource_MISC
https://github.com/rust-lang/rust/pull/53571/commits/b85e...
x_refsource_MISC

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.