CVE-2021-45685

crates.io/columnar CVE-2021-45685: critical 9.8

columnar: Read on uninitialized buffer may cause UB (ColumnarReadExt::read_typed_vec())

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-9mp7-45qh-r8j8
• https://nvd.nist.gov/vuln/detail/CVE-2021-45685
• https://github.com/frankmcsherry/columnar/issues/6
• https://github.com/frankmcsherry/columnar.git
• https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/columnar/RUSTSEC-2021-0087.md
• https://rustsec.org/advisories/RUSTSEC-2021-0087.html

CVE-2021-45685 · published 2022-01-06T22:13:46Z · modified 2023-11-08T04:07:21.739936Z · JSON

crates.io/columnar CVE-2021-45685: high

columnar: `Read` on uninitialized buffer may cause UB (ColumnarReadExt::read_typed_vec())

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-cxcc-q839-2cw9
• https://github.com/frankmcsherry/columnar/issues/6
• https://github.com/frankmcsherry/columnar
• https://rustsec.org/advisories/RUSTSEC-2021-0087.html

CVE-2021-45685 · published 2022-06-16T23:48:53Z · modified 2023-11-08T04:07:21.739936Z · JSON

crates.io/columnar CVE-2021-45685: unknown

columnar: `Read` on uninitialized buffer may cause UB (ColumnarReadExt::read_typed_vec())

Action: Upgrade columnar to 0.1.0 or later.

cargo update -p columnar --precise 0.1.0

Affected

Fixed versions

Sources

• osv: RUSTSEC-2021-0087
• https://crates.io/crates/columnar
• https://rustsec.org/advisories/RUSTSEC-2021-0087.html
• https://github.com/frankmcsherry/columnar/issues/6

CVE-2021-45685 · published 2021-01-07T12:00:00Z · modified 2025-02-01T00:07:11Z · JSON