CVE-2021-45687
3 advisories.
crates.io/raw-cpuid CVE-2021-45687: medium, EPSS 1.16%
Optional `Deserialize` implementations lacking validation
Action: Upgrade raw-cpuid to 9.1.1 or later.
cargo update -p raw-cpuid --precise 9.1.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.1.0 | 9.1.1 | - |
Fixed versions
| 9.1.1 |
Sources
- osv: GHSA-jf5h-cf95-w759
- https://github.com/gz/rust-cpuid/issues/43
- https://github.com/gz/rust-cpuid
- https://rustsec.org/advisories/RUSTSEC-2021-0089.html
CVE-2021-45687 · published · modified · JSON
crates.io/raw-cpuid CVE-2021-45687: critical 9.8, EPSS 1.16%
Deserialization of Untrusted Data in rust-cpuid
Action: Upgrade raw-cpuid to 9.1.1 or later.
cargo update -p raw-cpuid --precise 9.1.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.1.0 | 9.1.1 | - |
Fixed versions
| 9.1.1 |
Sources
- osv: GHSA-w428-f65r-h4q2
- https://nvd.nist.gov/vuln/detail/CVE-2021-45687
- https://github.com/gz/rust-cpuid/issues/43
- https://github.com/gz/rust-cpuid
- https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/raw-cpuid/RUSTSEC-2021-0089.md
- https://rustsec.org/advisories/RUSTSEC-2021-0089.html
CVE-2021-45687 · published · modified · JSON
crates.io/raw-cpuid CVE-2021-45687: unknown, EPSS 1.16%
Optional `Deserialize` implementations lacking validation
Action: Upgrade raw-cpuid to 9.1.1 or later.
cargo update -p raw-cpuid --precise 9.1.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.1.1-0 | 9.1.1 | - |
Fixed versions
| 9.1.1 |
Sources
- osv: RUSTSEC-2021-0089
- https://crates.io/crates/raw-cpuid
- https://rustsec.org/advisories/RUSTSEC-2021-0089.html
- https://github.com/gz/rust-cpuid/issues/43
CVE-2021-45687 · published · modified · JSON