crates.io/stack_dst CVE-2021-28034, CVE-2021-28035: critical 9.8, EPSS 1.29%

Drop of uninitialized memory in stack_dst

Action: Upgrade stack_dst to 0.6.1 or later.

cargo update -p stack_dst --precise 0.6.1

Affected

Fixed versions

Sources

• osv: GHSA-45w7-7g63-2m5w
• https://nvd.nist.gov/vuln/detail/CVE-2021-28035
• https://github.com/thepowersgang/stack_dst-rs/issues/5
• https://github.com/thepowersgang/stack_dst-rs/commit/2a4d538
• https://github.com/thepowersgang/stack_dst-rs
• https://rustsec.org/advisories/RUSTSEC-2021-0033.html

CVE-2021-28034, CVE-2021-28035 · published 2021-09-01T18:30:55Z · modified 2023-11-08T04:05:27.911039Z · JSON