high7.5
CVE-2019-25054
Missing Initialization of Resource in pnet
Impact
An issue was discovered in the pnet crate before 0.27.2 for Rust. There is a segmentation fault (upon attempted dereference of an uninitialized descriptor) because of an erroneous IcmpTransportChannelIterator compiler optimization.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| rust | pnet | < 0.27.2 | 0.27.2 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pnet Project | Pnet | before 0.27.2 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/pnet/RUSTSEC-2019-0037.md
- https://rustsec.org/advisories/RUSTSEC-2019-0037.html
- https://github.com/advisories/GHSA-24g6-5rx7-58wj
- https://nvd.nist.gov/vuln/detail/CVE-2019-25054
- https://github.com/libpnet/libpnet/issues/449