crates.io/libflate CVE-2019-15552: critical 9.8, EPSS 2.46%

Use after free in libflate

Action: Upgrade libflate to 0.1.25 or later.

cargo update -p libflate --precise 0.1.25

Affected

Fixed versions

Sources

• osv: GHSA-rpcm-whqc-jfw8
• https://nvd.nist.gov/vuln/detail/CVE-2019-15552
• https://github.com/sile/libflate/issues/35
• https://github.com/sile/libflate/pull/37
• https://github.com/sile/libflate/commit/ffeff7c65deac5a6f886db2a59bcae4e420e4706
• https://github.com/sile/libflate
• https://rustsec.org/advisories/RUSTSEC-2019-0010.html

CVE-2019-15552 · published 2021-08-25T20:44:53Z · modified 2023-11-08T04:01:14.223693Z · JSON