What is GHSA-w9vv-q986-vj7x?

GHSA-w9vv-q986-vj7x is a security advisory published by GitHub Security Advisories with High severity. Out of bounds read in uu_od

Which CVE IDs does GHSA-w9vv-q986-vj7x cover?

GHSA-w9vv-q986-vj7x covers the following CVE IDs: CVE-2021-29934. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-w9vv-q986-vj7x?

GHSA-w9vv-q986-vj7x has a CVSS v3 base score of 7.3, published by GitHub Security Advisories.

Which products are affected by GHSA-w9vv-q986-vj7x?

GHSA-w9vv-q986-vj7x affects 1 product, including: rust/uu_od:\u003c 0.0.4.

GHSA-w9vv-q986-vj7xHighCVSS 7.3

Out of bounds read in uu_od

Vendor

GitHub Security Advisories

Published

August 25, 2021

Last Modified

May 22, 2023

🔗 CVE IDs covered (1)

CVE-2021-29934 →

📋 Description

An issue was discovered in PartialReader in the uu_od crate before 0.0.4 for Rust. Attackers can read the contents of uninitialized memory locations via a user-provided Read operation.

🎯 Affected products1

rust/uu_od:< 0.0.4

🔗 References (10)

https://nvd.nist.gov/vuln/detail/CVE-2021-29934
https://github.com/uutils/coreutils/issues/1729
https://rustsec.org/advisories/RUSTSEC-2021-0043.html
https://github.com/uutils/coreutils/pull/1730
https://github.com/uutils/coreutils/pull/1738
https://github.com/uutils/coreutils/pull/1739
https://github.com/uutils/coreutils/commit/39d62c6c1f809022c903180471c10fde6ecd12d1
https://github.com/uutils/coreutils/commit/5935876f38498b0c1f657d031171eb17028def6f
https://github.com/uutils/coreutils/commit/7341a1a033aa5980ac59bc9d4df978b396de4fad
https://github.com/advisories/GHSA-w9vv-q986-vj7x