What is GHSA-r6ff-2q3c-v3pv?

GHSA-r6ff-2q3c-v3pv is a security advisory published by GitHub Security Advisories with Medium severity. Compiler optimisation leads to SEGFAULT

Why does GHSA-r6ff-2q3c-v3pv have no CVE ID yet?

GitHub Security Advisories published this advisory directly to customers before NVD assigned a CVE ID. This is the embargo-window disclosure pattern — vendors notify customers on day 0; NVD's public record follows days to weeks later.

What is the CVSS v3 score of GHSA-r6ff-2q3c-v3pv?

GHSA-r6ff-2q3c-v3pv has a CVSS v3 base score of 6.0, published by GitHub Security Advisories.

Which products are affected by GHSA-r6ff-2q3c-v3pv?

GHSA-r6ff-2q3c-v3pv affects 1 product, including: rust/pnet:\u003c 0.27.2.

GHSA-r6ff-2q3c-v3pvMediumCVSS 6.0Disclosed before NVD

Compiler optimisation leads to SEGFAULT

Vendor

GitHub Security Advisories

Published

August 25, 2021

Last Modified

January 11, 2023

📋 Description

Affected versions of the pnet crate were optimized out by compiler, which caused dereference of uninitialized file descriptor which caused segfault.

🎯 Affected products1

rust/pnet:< 0.27.2

🔗 References (4)

https://github.com/libpnet/libpnet/issues/449
https://github.com/libpnet/libpnet/pull/455
https://rustsec.org/advisories/RUSTSEC-2019-0037.html
https://github.com/advisories/GHSA-r6ff-2q3c-v3pv