CVE-2021-38192
2 advisories.
crates.io/prost-types CVE-2021-38192: high 7.5, EPSS 1.10%
Overflow in prost-types
Action: Upgrade prost-types to 0.8.0 or later.
cargo update -p prost-types --precise 0.8.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.8.0 | - |
Fixed versions
| 0.8.0 |
Sources
- osv: GHSA-x4qm-mcjq-v2gf
- https://nvd.nist.gov/vuln/detail/CVE-2021-38192
- https://github.com/tokio-rs/prost/issues/438
- https://github.com/tokio-rs/prost/pull/439
- https://github.com/tokio-rs/prost/commit/59f2a7311dd6540696bfd0145f5281ce495f4385
- https://github.com/tokio-rs/prost/tree/master/prost-types
- https://rustsec.org/advisories/RUSTSEC-2021-0073.html
CVE-2021-38192 · published · modified · JSON
crates.io/prost-types CVE-2021-38192: unknown, EPSS 1.10%
Conversion from `prost_types::Timestamp` to `SystemTime` can cause an overflow and panic
Action: Upgrade prost-types to 0.8.0 or later.
cargo update -p prost-types --precise 0.8.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.0-0 | 0.8.0 | - |
Fixed versions
| 0.8.0 |
Sources
- osv: RUSTSEC-2021-0073
- https://crates.io/crates/prost-types
- https://rustsec.org/advisories/RUSTSEC-2021-0073.html
- https://github.com/tokio-rs/prost/issues/438
CVE-2021-38192 · published · modified · JSON