CVE-2020-36323: High severity rust vulnerability
In the standard library in Rust before 1.52.0, there is an optimization for joining strings that can cause uninitialized bytes to be exposed (or the program to crash) if the borrowed string changes after its length is checked.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is CVE-2020-36323?
CVE-2020-36323 is a vulnerability in the Rust standard library before version 1.52.0 that can cause uninitialized bytes to be exposed or the program to crash if the borrowed string changes after its length is checked.
How does CVE-2020-36323 affect Rust?
CVE-2020-36323 affects Rust versions before 1.52.0 by introducing an optimization for joining strings that can lead to uninitialized bytes being exposed or potentially crashing the program.
What is the severity of CVE-2020-36323?
CVE-2020-36323 has a severity rating of 8.2 (high).
How can I fix CVE-2020-36323?
To fix CVE-2020-36323, update Rust to version 1.52.0 or later.
Are there any references for CVE-2020-36323?
Yes, you can find more information about CVE-2020-36323 at the following references: [GitHub Issue](https://github.com/rust-lang/rust/issues/80335), [Pull Request](https://github.com/rust-lang/rust/pull/81728), [Comment](https://github.com/rust-lang/rust/pull/81728#issuecomment-821549174).