CVE-2019-12083: High severity rust vulnerability
The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method which, if overridden, can violate Rust's safety guarantees and cause memory unsafety. If the Error::typeid method is overridden then any type can be safely cast to any other type, causing memory safety vulnerabilities in safe code (e.g., out-of-bounds write or read). Code that does not manually implement Error::typeid is unaffected.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-12083?
CVE-2019-12083 is a vulnerability found in the Rust Programming Language Standard Library version 1.34.x before 1.34.2.
What is the severity of CVE-2019-12083?
The severity of CVE-2019-12083 is high with a CVSS score of 8.1.
How does CVE-2019-12083 affect Rust Programming Language?
CVE-2019-12083 can violate Rust's safety guarantees and cause memory unsafety if the `Error::type_id` method in the Rust Programming Language Standard Library is overridden.
Which versions of Rust Programming Language are affected by CVE-2019-12083?
Rust Programming Language version 1.34.x before 1.34.2 is affected by CVE-2019-12083.
How can I fix CVE-2019-12083?
To fix CVE-2019-12083, update Rust Programming Language to version 1.34.2 or newer.