Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2019-12083 (GCVE-0-2019-12083)
Vulnerability from cvelistv5 – Published: 2019-05-13 19:06 – Updated: 2024-08-04 23:10
VLAI?
EPSS
Summary
The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method which, if overridden, can violate Rust's safety guarantees and cause memory unsafety. If the `Error::type_id` method is overridden then any type can be safely cast to any other type, causing memory safety vulnerabilities in safe code (e.g., out-of-bounds write or read). Code that does not manually implement Error::type_id is unaffected.
Severity ?
No CVSS data available.
CWE
- n/a
Assigner
References
| URL | Tags | ||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T23:10:30.191Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://groups.google.com/forum/#%21topic/rustlang-security-announcements/aZabeCMUv70"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://blog.rust-lang.org/2019/05/13/Security-advisory.html"
},
{
"name": "FEDORA-2019-e39d4910c6",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K6T4BNA5KQYJRIKIGGBOGBMR7TRXPHLR/"
},
{
"name": "FEDORA-2019-f76f0e11b3",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HG47HYH3AQTUMBUMX3S3G5DNAY4CBW6N/"
},
{
"name": "openSUSE-SU-2019:2203",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00076.html"
},
{
"name": "openSUSE-SU-2019:2244",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00006.html"
},
{
"name": "openSUSE-SU-2019:2294",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00031.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method which, if overridden, can violate Rust\u0027s safety guarantees and cause memory unsafety. If the `Error::type_id` method is overridden then any type can be safely cast to any other type, causing memory safety vulnerabilities in safe code (e.g., out-of-bounds write or read). Code that does not manually implement Error::type_id is unaffected."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2019-10-08T18:06:41",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://groups.google.com/forum/#%21topic/rustlang-security-announcements/aZabeCMUv70"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://blog.rust-lang.org/2019/05/13/Security-advisory.html"
},
{
"name": "FEDORA-2019-e39d4910c6",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K6T4BNA5KQYJRIKIGGBOGBMR7TRXPHLR/"
},
{
"name": "FEDORA-2019-f76f0e11b3",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HG47HYH3AQTUMBUMX3S3G5DNAY4CBW6N/"
},
{
"name": "openSUSE-SU-2019:2203",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00076.html"
},
{
"name": "openSUSE-SU-2019:2244",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00006.html"
},
{
"name": "openSUSE-SU-2019:2294",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00031.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2019-12083",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method which, if overridden, can violate Rust\u0027s safety guarantees and cause memory unsafety. If the `Error::type_id` method is overridden then any type can be safely cast to any other type, causing memory safety vulnerabilities in safe code (e.g., out-of-bounds write or read). Code that does not manually implement Error::type_id is unaffected."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://groups.google.com/forum/#!topic/rustlang-security-announcements/aZabeCMUv70",
"refsource": "MISC",
"url": "https://groups.google.com/forum/#!topic/rustlang-security-announcements/aZabeCMUv70"
},
{
"name": "https://blog.rust-lang.org/2019/05/13/Security-advisory.html",
"refsource": "MISC",
"url": "https://blog.rust-lang.org/2019/05/13/Security-advisory.html"
},
{
"name": "FEDORA-2019-e39d4910c6",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/K6T4BNA5KQYJRIKIGGBOGBMR7TRXPHLR/"
},
{
"name": "FEDORA-2019-f76f0e11b3",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HG47HYH3AQTUMBUMX3S3G5DNAY4CBW6N/"
},
{
"name": "openSUSE-SU-2019:2203",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00076.html"
},
{
"name": "openSUSE-SU-2019:2244",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00006.html"
},
{
"name": "openSUSE-SU-2019:2294",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00031.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2019-12083",
"datePublished": "2019-05-13T19:06:01",
"dateReserved": "2019-05-13T00:00:00",
"dateUpdated": "2024-08-04T23:10:30.191Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:rust-lang:rust:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"1.34.0\", \"versionEndExcluding\": \"1.34.2\", \"matchCriteriaId\": \"7EE0C4CA-00FD-4A59-936E-88B6C2A415A2\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D100F7CE-FC64-4CC6-852A-6136D72DA419\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"97A4B8DF-58DA-4AB6-A1F9-331B36409BA3\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B620311B-34A3-48A6-82DF-6F078D7A4493\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method which, if overridden, can violate Rust\u0027s safety guarantees and cause memory unsafety. If the `Error::type_id` method is overridden then any type can be safely cast to any other type, causing memory safety vulnerabilities in safe code (e.g., out-of-bounds write or read). Code that does not manually implement Error::type_id is unaffected.\"}, {\"lang\": \"es\", \"value\": \"Rust Programming Language Standard Library, versiones 1.34.x anteriores a 1.34.2, contiene un m\\u00e9todo estabilizado que, si se anula, puede ignorar las garant\\u00edas de seguridad de Rust y causar inseguridades en la memoria. Si el m\\u00e9todo `Error::type_id` es anulado, entonces cualquier tipo puede ser lanzado con seguridad a cualquier otro tipo, causando vulnerabilidades de seguridad de memoria en c\\u00f3digo seguro (por ejemplo, escritura o lectura fuera de l\\u00edmites). El c\\u00f3digo que no implementa manualmente Error::type_id no se ve afectado.\"}]",
"id": "CVE-2019-12083",
"lastModified": "2024-11-21T04:22:10.460",
"metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"baseScore\": 8.1, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 2.2, \"impactScore\": 5.9}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:M/Au:N/C:P/I:P/A:P\", \"baseScore\": 6.8, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"MEDIUM\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 8.6, \"impactScore\": 6.4, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
"published": "2019-05-13T20:29:02.913",
"references": "[{\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00076.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00006.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00031.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://blog.rust-lang.org/2019/05/13/Security-advisory.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Exploit\", \"Mitigation\", \"Vendor Advisory\"]}, {\"url\": \"https://groups.google.com/forum/#%21topic/rustlang-security-announcements/aZabeCMUv70\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HG47HYH3AQTUMBUMX3S3G5DNAY4CBW6N/\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K6T4BNA5KQYJRIKIGGBOGBMR7TRXPHLR/\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00076.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00006.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00031.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://blog.rust-lang.org/2019/05/13/Security-advisory.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Exploit\", \"Mitigation\", \"Vendor Advisory\"]}, {\"url\": \"https://groups.google.com/forum/#%21topic/rustlang-security-announcements/aZabeCMUv70\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HG47HYH3AQTUMBUMX3S3G5DNAY4CBW6N/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K6T4BNA5KQYJRIKIGGBOGBMR7TRXPHLR/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-125\"}, {\"lang\": \"en\", \"value\": \"CWE-787\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2019-12083\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2019-05-13T20:29:02.913\",\"lastModified\":\"2024-11-21T04:22:10.460\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method which, if overridden, can violate Rust\u0027s safety guarantees and cause memory unsafety. If the `Error::type_id` method is overridden then any type can be safely cast to any other type, causing memory safety vulnerabilities in safe code (e.g., out-of-bounds write or read). Code that does not manually implement Error::type_id is unaffected.\"},{\"lang\":\"es\",\"value\":\"Rust Programming Language Standard Library, versiones 1.34.x anteriores a 1.34.2, contiene un m\u00e9todo estabilizado que, si se anula, puede ignorar las garant\u00edas de seguridad de Rust y causar inseguridades en la memoria. Si el m\u00e9todo `Error::type_id` es anulado, entonces cualquier tipo puede ser lanzado con seguridad a cualquier otro tipo, causando vulnerabilidades de seguridad de memoria en c\u00f3digo seguro (por ejemplo, escritura o lectura fuera de l\u00edmites). El c\u00f3digo que no implementa manualmente Error::type_id no se ve afectado.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":8.1,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.2,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:P/I:P/A:P\",\"baseScore\":6.8,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-125\"},{\"lang\":\"en\",\"value\":\"CWE-787\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rust-lang:rust:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"1.34.0\",\"versionEndExcluding\":\"1.34.2\",\"matchCriteriaId\":\"7EE0C4CA-00FD-4A59-936E-88B6C2A415A2\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D100F7CE-FC64-4CC6-852A-6136D72DA419\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"97A4B8DF-58DA-4AB6-A1F9-331B36409BA3\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B620311B-34A3-48A6-82DF-6F078D7A4493\"}]}]}],\"references\":[{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00076.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00006.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00031.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://blog.rust-lang.org/2019/05/13/Security-advisory.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\",\"Mitigation\",\"Vendor Advisory\"]},{\"url\":\"https://groups.google.com/forum/#%21topic/rustlang-security-announcements/aZabeCMUv70\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HG47HYH3AQTUMBUMX3S3G5DNAY4CBW6N/\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K6T4BNA5KQYJRIKIGGBOGBMR7TRXPHLR/\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00076.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00006.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00031.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://blog.rust-lang.org/2019/05/13/Security-advisory.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Mitigation\",\"Vendor Advisory\"]},{\"url\":\"https://groups.google.com/forum/#%21topic/rustlang-security-announcements/aZabeCMUv70\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HG47HYH3AQTUMBUMX3S3G5DNAY4CBW6N/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K6T4BNA5KQYJRIKIGGBOGBMR7TRXPHLR/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
}
}
OPENSUSE-SU-2019:2203-1
Vulnerability from csaf_opensuse - Published: 2019-09-27 07:40 - Updated: 2019-09-27 07:40Summary
Security update for rust
Notes
Title of the patch
Security update for rust
Description of the patch
This update for rust fixes the following issues:
Rust was updated to version 1.36.0.
Security issues fixed:
- CVE-2019-12083: a standard method can be overridden violating Rust's safety guarantees and causing memory unsafety (bsc#1134978)
- CVE-2018-1000622: rustdoc loads plugins from world writable directory allowing for arbitrary code execution (bsc#1100691)
This update was imported from SUSE:SLE-15:Update.
Patchnames
openSUSE-2019-2203
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for rust",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for rust fixes the following issues:\n\nRust was updated to version 1.36.0.\n\nSecurity issues fixed:\n\n- CVE-2019-12083: a standard method can be overridden violating Rust\u0027s safety guarantees and causing memory unsafety (bsc#1134978)\n- CVE-2018-1000622: rustdoc loads plugins from world writable directory allowing for arbitrary code execution (bsc#1100691)\n\nThis update was imported from SUSE:SLE-15:Update.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-2019-2203",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2019_2203-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2019:2203-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MZOZ25VGM7BURWQNSR2QRJK6ZK2KHN2N/#MZOZ25VGM7BURWQNSR2QRJK6ZK2KHN2N"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2019:2203-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MZOZ25VGM7BURWQNSR2QRJK6ZK2KHN2N/#MZOZ25VGM7BURWQNSR2QRJK6ZK2KHN2N"
},
{
"category": "self",
"summary": "SUSE Bug 1096945",
"url": "https://bugzilla.suse.com/1096945"
},
{
"category": "self",
"summary": "SUSE Bug 1100691",
"url": "https://bugzilla.suse.com/1100691"
},
{
"category": "self",
"summary": "SUSE Bug 1133283",
"url": "https://bugzilla.suse.com/1133283"
},
{
"category": "self",
"summary": "SUSE Bug 1134978",
"url": "https://bugzilla.suse.com/1134978"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1000622 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1000622/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-12083 page",
"url": "https://www.suse.com/security/cve/CVE-2019-12083/"
}
],
"title": "Security update for rust",
"tracking": {
"current_release_date": "2019-09-27T07:40:16Z",
"generator": {
"date": "2019-09-27T07:40:16Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2019:2203-1",
"initial_release_date": "2019-09-27T07:40:16Z",
"revision_history": [
{
"date": "2019-09-27T07:40:16Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "cargo-1.36.0-lp151.5.4.1.i586",
"product": {
"name": "cargo-1.36.0-lp151.5.4.1.i586",
"product_id": "cargo-1.36.0-lp151.5.4.1.i586"
}
},
{
"category": "product_version",
"name": "clippy-1.36.0-lp151.5.4.1.i586",
"product": {
"name": "clippy-1.36.0-lp151.5.4.1.i586",
"product_id": "clippy-1.36.0-lp151.5.4.1.i586"
}
},
{
"category": "product_version",
"name": "rls-1.36.0-lp151.5.4.1.i586",
"product": {
"name": "rls-1.36.0-lp151.5.4.1.i586",
"product_id": "rls-1.36.0-lp151.5.4.1.i586"
}
},
{
"category": "product_version",
"name": "rust-1.36.0-lp151.5.4.1.i586",
"product": {
"name": "rust-1.36.0-lp151.5.4.1.i586",
"product_id": "rust-1.36.0-lp151.5.4.1.i586"
}
},
{
"category": "product_version",
"name": "rust-analysis-1.36.0-lp151.5.4.1.i586",
"product": {
"name": "rust-analysis-1.36.0-lp151.5.4.1.i586",
"product_id": "rust-analysis-1.36.0-lp151.5.4.1.i586"
}
},
{
"category": "product_version",
"name": "rust-doc-1.36.0-lp151.5.4.1.i586",
"product": {
"name": "rust-doc-1.36.0-lp151.5.4.1.i586",
"product_id": "rust-doc-1.36.0-lp151.5.4.1.i586"
}
},
{
"category": "product_version",
"name": "rust-gdb-1.36.0-lp151.5.4.1.i586",
"product": {
"name": "rust-gdb-1.36.0-lp151.5.4.1.i586",
"product_id": "rust-gdb-1.36.0-lp151.5.4.1.i586"
}
},
{
"category": "product_version",
"name": "rust-std-static-1.36.0-lp151.5.4.1.i586",
"product": {
"name": "rust-std-static-1.36.0-lp151.5.4.1.i586",
"product_id": "rust-std-static-1.36.0-lp151.5.4.1.i586"
}
},
{
"category": "product_version",
"name": "rustfmt-1.36.0-lp151.5.4.1.i586",
"product": {
"name": "rustfmt-1.36.0-lp151.5.4.1.i586",
"product_id": "rustfmt-1.36.0-lp151.5.4.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "cargo-doc-1.36.0-lp151.5.4.1.noarch",
"product": {
"name": "cargo-doc-1.36.0-lp151.5.4.1.noarch",
"product_id": "cargo-doc-1.36.0-lp151.5.4.1.noarch"
}
},
{
"category": "product_version",
"name": "rust-src-1.36.0-lp151.5.4.1.noarch",
"product": {
"name": "rust-src-1.36.0-lp151.5.4.1.noarch",
"product_id": "rust-src-1.36.0-lp151.5.4.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "cargo-1.36.0-lp151.5.4.1.x86_64",
"product": {
"name": "cargo-1.36.0-lp151.5.4.1.x86_64",
"product_id": "cargo-1.36.0-lp151.5.4.1.x86_64"
}
},
{
"category": "product_version",
"name": "clippy-1.36.0-lp151.5.4.1.x86_64",
"product": {
"name": "clippy-1.36.0-lp151.5.4.1.x86_64",
"product_id": "clippy-1.36.0-lp151.5.4.1.x86_64"
}
},
{
"category": "product_version",
"name": "rls-1.36.0-lp151.5.4.1.x86_64",
"product": {
"name": "rls-1.36.0-lp151.5.4.1.x86_64",
"product_id": "rls-1.36.0-lp151.5.4.1.x86_64"
}
},
{
"category": "product_version",
"name": "rust-1.36.0-lp151.5.4.1.x86_64",
"product": {
"name": "rust-1.36.0-lp151.5.4.1.x86_64",
"product_id": "rust-1.36.0-lp151.5.4.1.x86_64"
}
},
{
"category": "product_version",
"name": "rust-analysis-1.36.0-lp151.5.4.1.x86_64",
"product": {
"name": "rust-analysis-1.36.0-lp151.5.4.1.x86_64",
"product_id": "rust-analysis-1.36.0-lp151.5.4.1.x86_64"
}
},
{
"category": "product_version",
"name": "rust-cbindgen-0.8.7-lp151.2.2.x86_64",
"product": {
"name": "rust-cbindgen-0.8.7-lp151.2.2.x86_64",
"product_id": "rust-cbindgen-0.8.7-lp151.2.2.x86_64"
}
},
{
"category": "product_version",
"name": "rust-doc-1.36.0-lp151.5.4.1.x86_64",
"product": {
"name": "rust-doc-1.36.0-lp151.5.4.1.x86_64",
"product_id": "rust-doc-1.36.0-lp151.5.4.1.x86_64"
}
},
{
"category": "product_version",
"name": "rust-gdb-1.36.0-lp151.5.4.1.x86_64",
"product": {
"name": "rust-gdb-1.36.0-lp151.5.4.1.x86_64",
"product_id": "rust-gdb-1.36.0-lp151.5.4.1.x86_64"
}
},
{
"category": "product_version",
"name": "rust-std-static-1.36.0-lp151.5.4.1.x86_64",
"product": {
"name": "rust-std-static-1.36.0-lp151.5.4.1.x86_64",
"product_id": "rust-std-static-1.36.0-lp151.5.4.1.x86_64"
}
},
{
"category": "product_version",
"name": "rustfmt-1.36.0-lp151.5.4.1.x86_64",
"product": {
"name": "rustfmt-1.36.0-lp151.5.4.1.x86_64",
"product_id": "rustfmt-1.36.0-lp151.5.4.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 15.1",
"product": {
"name": "openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "cargo-1.36.0-lp151.5.4.1.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:cargo-1.36.0-lp151.5.4.1.i586"
},
"product_reference": "cargo-1.36.0-lp151.5.4.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cargo-1.36.0-lp151.5.4.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:cargo-1.36.0-lp151.5.4.1.x86_64"
},
"product_reference": "cargo-1.36.0-lp151.5.4.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cargo-doc-1.36.0-lp151.5.4.1.noarch as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:cargo-doc-1.36.0-lp151.5.4.1.noarch"
},
"product_reference": "cargo-doc-1.36.0-lp151.5.4.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clippy-1.36.0-lp151.5.4.1.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:clippy-1.36.0-lp151.5.4.1.i586"
},
"product_reference": "clippy-1.36.0-lp151.5.4.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clippy-1.36.0-lp151.5.4.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:clippy-1.36.0-lp151.5.4.1.x86_64"
},
"product_reference": "clippy-1.36.0-lp151.5.4.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rls-1.36.0-lp151.5.4.1.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:rls-1.36.0-lp151.5.4.1.i586"
},
"product_reference": "rls-1.36.0-lp151.5.4.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rls-1.36.0-lp151.5.4.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:rls-1.36.0-lp151.5.4.1.x86_64"
},
"product_reference": "rls-1.36.0-lp151.5.4.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-1.36.0-lp151.5.4.1.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:rust-1.36.0-lp151.5.4.1.i586"
},
"product_reference": "rust-1.36.0-lp151.5.4.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-1.36.0-lp151.5.4.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:rust-1.36.0-lp151.5.4.1.x86_64"
},
"product_reference": "rust-1.36.0-lp151.5.4.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-analysis-1.36.0-lp151.5.4.1.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:rust-analysis-1.36.0-lp151.5.4.1.i586"
},
"product_reference": "rust-analysis-1.36.0-lp151.5.4.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-analysis-1.36.0-lp151.5.4.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:rust-analysis-1.36.0-lp151.5.4.1.x86_64"
},
"product_reference": "rust-analysis-1.36.0-lp151.5.4.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-cbindgen-0.8.7-lp151.2.2.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:rust-cbindgen-0.8.7-lp151.2.2.x86_64"
},
"product_reference": "rust-cbindgen-0.8.7-lp151.2.2.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-doc-1.36.0-lp151.5.4.1.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:rust-doc-1.36.0-lp151.5.4.1.i586"
},
"product_reference": "rust-doc-1.36.0-lp151.5.4.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-doc-1.36.0-lp151.5.4.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:rust-doc-1.36.0-lp151.5.4.1.x86_64"
},
"product_reference": "rust-doc-1.36.0-lp151.5.4.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-gdb-1.36.0-lp151.5.4.1.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:rust-gdb-1.36.0-lp151.5.4.1.i586"
},
"product_reference": "rust-gdb-1.36.0-lp151.5.4.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-gdb-1.36.0-lp151.5.4.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:rust-gdb-1.36.0-lp151.5.4.1.x86_64"
},
"product_reference": "rust-gdb-1.36.0-lp151.5.4.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-src-1.36.0-lp151.5.4.1.noarch as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:rust-src-1.36.0-lp151.5.4.1.noarch"
},
"product_reference": "rust-src-1.36.0-lp151.5.4.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-1.36.0-lp151.5.4.1.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:rust-std-static-1.36.0-lp151.5.4.1.i586"
},
"product_reference": "rust-std-static-1.36.0-lp151.5.4.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-1.36.0-lp151.5.4.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:rust-std-static-1.36.0-lp151.5.4.1.x86_64"
},
"product_reference": "rust-std-static-1.36.0-lp151.5.4.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rustfmt-1.36.0-lp151.5.4.1.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:rustfmt-1.36.0-lp151.5.4.1.i586"
},
"product_reference": "rustfmt-1.36.0-lp151.5.4.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rustfmt-1.36.0-lp151.5.4.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:rustfmt-1.36.0-lp151.5.4.1.x86_64"
},
"product_reference": "rustfmt-1.36.0-lp151.5.4.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-1000622",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1000622"
}
],
"notes": [
{
"category": "general",
"text": "The Rust Programming Language rustdoc version Between 0.8 and 1.27.0 contains a CWE-427: Uncontrolled Search Path Element vulnerability in rustdoc plugins that can result in local code execution as a different user. This attack appear to be exploitable via using the --plugin flag without the --plugin-path flag. This vulnerability appears to have been fixed in 1.27.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.1:cargo-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:cargo-1.36.0-lp151.5.4.1.x86_64",
"openSUSE Leap 15.1:cargo-doc-1.36.0-lp151.5.4.1.noarch",
"openSUSE Leap 15.1:clippy-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:clippy-1.36.0-lp151.5.4.1.x86_64",
"openSUSE Leap 15.1:rls-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:rls-1.36.0-lp151.5.4.1.x86_64",
"openSUSE Leap 15.1:rust-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:rust-1.36.0-lp151.5.4.1.x86_64",
"openSUSE Leap 15.1:rust-analysis-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:rust-analysis-1.36.0-lp151.5.4.1.x86_64",
"openSUSE Leap 15.1:rust-cbindgen-0.8.7-lp151.2.2.x86_64",
"openSUSE Leap 15.1:rust-doc-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:rust-doc-1.36.0-lp151.5.4.1.x86_64",
"openSUSE Leap 15.1:rust-gdb-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:rust-gdb-1.36.0-lp151.5.4.1.x86_64",
"openSUSE Leap 15.1:rust-src-1.36.0-lp151.5.4.1.noarch",
"openSUSE Leap 15.1:rust-std-static-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:rust-std-static-1.36.0-lp151.5.4.1.x86_64",
"openSUSE Leap 15.1:rustfmt-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:rustfmt-1.36.0-lp151.5.4.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1000622",
"url": "https://www.suse.com/security/cve/CVE-2018-1000622"
},
{
"category": "external",
"summary": "SUSE Bug 1100691 for CVE-2018-1000622",
"url": "https://bugzilla.suse.com/1100691"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.1:cargo-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:cargo-1.36.0-lp151.5.4.1.x86_64",
"openSUSE Leap 15.1:cargo-doc-1.36.0-lp151.5.4.1.noarch",
"openSUSE Leap 15.1:clippy-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:clippy-1.36.0-lp151.5.4.1.x86_64",
"openSUSE Leap 15.1:rls-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:rls-1.36.0-lp151.5.4.1.x86_64",
"openSUSE Leap 15.1:rust-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:rust-1.36.0-lp151.5.4.1.x86_64",
"openSUSE Leap 15.1:rust-analysis-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:rust-analysis-1.36.0-lp151.5.4.1.x86_64",
"openSUSE Leap 15.1:rust-cbindgen-0.8.7-lp151.2.2.x86_64",
"openSUSE Leap 15.1:rust-doc-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:rust-doc-1.36.0-lp151.5.4.1.x86_64",
"openSUSE Leap 15.1:rust-gdb-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:rust-gdb-1.36.0-lp151.5.4.1.x86_64",
"openSUSE Leap 15.1:rust-src-1.36.0-lp151.5.4.1.noarch",
"openSUSE Leap 15.1:rust-std-static-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:rust-std-static-1.36.0-lp151.5.4.1.x86_64",
"openSUSE Leap 15.1:rustfmt-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:rustfmt-1.36.0-lp151.5.4.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"openSUSE Leap 15.1:cargo-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:cargo-1.36.0-lp151.5.4.1.x86_64",
"openSUSE Leap 15.1:cargo-doc-1.36.0-lp151.5.4.1.noarch",
"openSUSE Leap 15.1:clippy-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:clippy-1.36.0-lp151.5.4.1.x86_64",
"openSUSE Leap 15.1:rls-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:rls-1.36.0-lp151.5.4.1.x86_64",
"openSUSE Leap 15.1:rust-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:rust-1.36.0-lp151.5.4.1.x86_64",
"openSUSE Leap 15.1:rust-analysis-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:rust-analysis-1.36.0-lp151.5.4.1.x86_64",
"openSUSE Leap 15.1:rust-cbindgen-0.8.7-lp151.2.2.x86_64",
"openSUSE Leap 15.1:rust-doc-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:rust-doc-1.36.0-lp151.5.4.1.x86_64",
"openSUSE Leap 15.1:rust-gdb-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:rust-gdb-1.36.0-lp151.5.4.1.x86_64",
"openSUSE Leap 15.1:rust-src-1.36.0-lp151.5.4.1.noarch",
"openSUSE Leap 15.1:rust-std-static-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:rust-std-static-1.36.0-lp151.5.4.1.x86_64",
"openSUSE Leap 15.1:rustfmt-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:rustfmt-1.36.0-lp151.5.4.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-27T07:40:16Z",
"details": "moderate"
}
],
"title": "CVE-2018-1000622"
},
{
"cve": "CVE-2019-12083",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-12083"
}
],
"notes": [
{
"category": "general",
"text": "The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method which, if overridden, can violate Rust\u0027s safety guarantees and cause memory unsafety. If the `Error::type_id` method is overridden then any type can be safely cast to any other type, causing memory safety vulnerabilities in safe code (e.g., out-of-bounds write or read). Code that does not manually implement Error::type_id is unaffected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.1:cargo-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:cargo-1.36.0-lp151.5.4.1.x86_64",
"openSUSE Leap 15.1:cargo-doc-1.36.0-lp151.5.4.1.noarch",
"openSUSE Leap 15.1:clippy-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:clippy-1.36.0-lp151.5.4.1.x86_64",
"openSUSE Leap 15.1:rls-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:rls-1.36.0-lp151.5.4.1.x86_64",
"openSUSE Leap 15.1:rust-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:rust-1.36.0-lp151.5.4.1.x86_64",
"openSUSE Leap 15.1:rust-analysis-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:rust-analysis-1.36.0-lp151.5.4.1.x86_64",
"openSUSE Leap 15.1:rust-cbindgen-0.8.7-lp151.2.2.x86_64",
"openSUSE Leap 15.1:rust-doc-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:rust-doc-1.36.0-lp151.5.4.1.x86_64",
"openSUSE Leap 15.1:rust-gdb-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:rust-gdb-1.36.0-lp151.5.4.1.x86_64",
"openSUSE Leap 15.1:rust-src-1.36.0-lp151.5.4.1.noarch",
"openSUSE Leap 15.1:rust-std-static-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:rust-std-static-1.36.0-lp151.5.4.1.x86_64",
"openSUSE Leap 15.1:rustfmt-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:rustfmt-1.36.0-lp151.5.4.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-12083",
"url": "https://www.suse.com/security/cve/CVE-2019-12083"
},
{
"category": "external",
"summary": "SUSE Bug 1134978 for CVE-2019-12083",
"url": "https://bugzilla.suse.com/1134978"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.1:cargo-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:cargo-1.36.0-lp151.5.4.1.x86_64",
"openSUSE Leap 15.1:cargo-doc-1.36.0-lp151.5.4.1.noarch",
"openSUSE Leap 15.1:clippy-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:clippy-1.36.0-lp151.5.4.1.x86_64",
"openSUSE Leap 15.1:rls-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:rls-1.36.0-lp151.5.4.1.x86_64",
"openSUSE Leap 15.1:rust-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:rust-1.36.0-lp151.5.4.1.x86_64",
"openSUSE Leap 15.1:rust-analysis-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:rust-analysis-1.36.0-lp151.5.4.1.x86_64",
"openSUSE Leap 15.1:rust-cbindgen-0.8.7-lp151.2.2.x86_64",
"openSUSE Leap 15.1:rust-doc-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:rust-doc-1.36.0-lp151.5.4.1.x86_64",
"openSUSE Leap 15.1:rust-gdb-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:rust-gdb-1.36.0-lp151.5.4.1.x86_64",
"openSUSE Leap 15.1:rust-src-1.36.0-lp151.5.4.1.noarch",
"openSUSE Leap 15.1:rust-std-static-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:rust-std-static-1.36.0-lp151.5.4.1.x86_64",
"openSUSE Leap 15.1:rustfmt-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:rustfmt-1.36.0-lp151.5.4.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.1:cargo-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:cargo-1.36.0-lp151.5.4.1.x86_64",
"openSUSE Leap 15.1:cargo-doc-1.36.0-lp151.5.4.1.noarch",
"openSUSE Leap 15.1:clippy-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:clippy-1.36.0-lp151.5.4.1.x86_64",
"openSUSE Leap 15.1:rls-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:rls-1.36.0-lp151.5.4.1.x86_64",
"openSUSE Leap 15.1:rust-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:rust-1.36.0-lp151.5.4.1.x86_64",
"openSUSE Leap 15.1:rust-analysis-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:rust-analysis-1.36.0-lp151.5.4.1.x86_64",
"openSUSE Leap 15.1:rust-cbindgen-0.8.7-lp151.2.2.x86_64",
"openSUSE Leap 15.1:rust-doc-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:rust-doc-1.36.0-lp151.5.4.1.x86_64",
"openSUSE Leap 15.1:rust-gdb-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:rust-gdb-1.36.0-lp151.5.4.1.x86_64",
"openSUSE Leap 15.1:rust-src-1.36.0-lp151.5.4.1.noarch",
"openSUSE Leap 15.1:rust-std-static-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:rust-std-static-1.36.0-lp151.5.4.1.x86_64",
"openSUSE Leap 15.1:rustfmt-1.36.0-lp151.5.4.1.i586",
"openSUSE Leap 15.1:rustfmt-1.36.0-lp151.5.4.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-27T07:40:16Z",
"details": "important"
}
],
"title": "CVE-2019-12083"
}
]
}
OPENSUSE-SU-2019:2244-1
Vulnerability from csaf_opensuse - Published: 2019-10-03 09:22 - Updated: 2019-10-03 09:22Summary
Security update for rust
Notes
Title of the patch
Security update for rust
Description of the patch
This update for rust fixes the following issues:
Rust was updated to version 1.36.0.
Security issues fixed:
- CVE-2019-12083: a standard method can be overridden violating Rust's safety guarantees and causing memory unsafety (bsc#1134978)
- CVE-2018-1000622: rustdoc loads plugins from world writable directory allowing for arbitrary code execution (bsc#1100691)
This update was imported from the SUSE:SLE-15:Update update project.
Patchnames
openSUSE-2019-2244
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for rust",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for rust fixes the following issues:\n\nRust was updated to version 1.36.0.\n\nSecurity issues fixed:\n\n- CVE-2019-12083: a standard method can be overridden violating Rust\u0027s safety guarantees and causing memory unsafety (bsc#1134978)\n- CVE-2018-1000622: rustdoc loads plugins from world writable directory allowing for arbitrary code execution (bsc#1100691)\n\n\nThis update was imported from the SUSE:SLE-15:Update update project.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-2019-2244",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2019_2244-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2019:2244-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VSDFMUYOGHL27XJBTF3UGFLJVXGMLKDW/#VSDFMUYOGHL27XJBTF3UGFLJVXGMLKDW"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2019:2244-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VSDFMUYOGHL27XJBTF3UGFLJVXGMLKDW/#VSDFMUYOGHL27XJBTF3UGFLJVXGMLKDW"
},
{
"category": "self",
"summary": "SUSE Bug 1096945",
"url": "https://bugzilla.suse.com/1096945"
},
{
"category": "self",
"summary": "SUSE Bug 1100691",
"url": "https://bugzilla.suse.com/1100691"
},
{
"category": "self",
"summary": "SUSE Bug 1133283",
"url": "https://bugzilla.suse.com/1133283"
},
{
"category": "self",
"summary": "SUSE Bug 1134978",
"url": "https://bugzilla.suse.com/1134978"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1000622 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1000622/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-12083 page",
"url": "https://www.suse.com/security/cve/CVE-2019-12083/"
}
],
"title": "Security update for rust",
"tracking": {
"current_release_date": "2019-10-03T09:22:00Z",
"generator": {
"date": "2019-10-03T09:22:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2019:2244-1",
"initial_release_date": "2019-10-03T09:22:00Z",
"revision_history": [
{
"date": "2019-10-03T09:22:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "cargo-1.36.0-lp151.5.4.2.i586",
"product": {
"name": "cargo-1.36.0-lp151.5.4.2.i586",
"product_id": "cargo-1.36.0-lp151.5.4.2.i586"
}
},
{
"category": "product_version",
"name": "clippy-1.36.0-lp151.5.4.2.i586",
"product": {
"name": "clippy-1.36.0-lp151.5.4.2.i586",
"product_id": "clippy-1.36.0-lp151.5.4.2.i586"
}
},
{
"category": "product_version",
"name": "rls-1.36.0-lp151.5.4.2.i586",
"product": {
"name": "rls-1.36.0-lp151.5.4.2.i586",
"product_id": "rls-1.36.0-lp151.5.4.2.i586"
}
},
{
"category": "product_version",
"name": "rust-1.36.0-lp151.5.4.2.i586",
"product": {
"name": "rust-1.36.0-lp151.5.4.2.i586",
"product_id": "rust-1.36.0-lp151.5.4.2.i586"
}
},
{
"category": "product_version",
"name": "rust-analysis-1.36.0-lp151.5.4.2.i586",
"product": {
"name": "rust-analysis-1.36.0-lp151.5.4.2.i586",
"product_id": "rust-analysis-1.36.0-lp151.5.4.2.i586"
}
},
{
"category": "product_version",
"name": "rust-doc-1.36.0-lp151.5.4.2.i586",
"product": {
"name": "rust-doc-1.36.0-lp151.5.4.2.i586",
"product_id": "rust-doc-1.36.0-lp151.5.4.2.i586"
}
},
{
"category": "product_version",
"name": "rust-gdb-1.36.0-lp151.5.4.2.i586",
"product": {
"name": "rust-gdb-1.36.0-lp151.5.4.2.i586",
"product_id": "rust-gdb-1.36.0-lp151.5.4.2.i586"
}
},
{
"category": "product_version",
"name": "rust-std-static-1.36.0-lp151.5.4.2.i586",
"product": {
"name": "rust-std-static-1.36.0-lp151.5.4.2.i586",
"product_id": "rust-std-static-1.36.0-lp151.5.4.2.i586"
}
},
{
"category": "product_version",
"name": "rustfmt-1.36.0-lp151.5.4.2.i586",
"product": {
"name": "rustfmt-1.36.0-lp151.5.4.2.i586",
"product_id": "rustfmt-1.36.0-lp151.5.4.2.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "cargo-doc-1.36.0-lp151.5.4.2.noarch",
"product": {
"name": "cargo-doc-1.36.0-lp151.5.4.2.noarch",
"product_id": "cargo-doc-1.36.0-lp151.5.4.2.noarch"
}
},
{
"category": "product_version",
"name": "rust-src-1.36.0-lp151.5.4.2.noarch",
"product": {
"name": "rust-src-1.36.0-lp151.5.4.2.noarch",
"product_id": "rust-src-1.36.0-lp151.5.4.2.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "cargo-1.36.0-lp151.5.4.2.x86_64",
"product": {
"name": "cargo-1.36.0-lp151.5.4.2.x86_64",
"product_id": "cargo-1.36.0-lp151.5.4.2.x86_64"
}
},
{
"category": "product_version",
"name": "clippy-1.36.0-lp151.5.4.2.x86_64",
"product": {
"name": "clippy-1.36.0-lp151.5.4.2.x86_64",
"product_id": "clippy-1.36.0-lp151.5.4.2.x86_64"
}
},
{
"category": "product_version",
"name": "rls-1.36.0-lp151.5.4.2.x86_64",
"product": {
"name": "rls-1.36.0-lp151.5.4.2.x86_64",
"product_id": "rls-1.36.0-lp151.5.4.2.x86_64"
}
},
{
"category": "product_version",
"name": "rust-1.36.0-lp151.5.4.2.x86_64",
"product": {
"name": "rust-1.36.0-lp151.5.4.2.x86_64",
"product_id": "rust-1.36.0-lp151.5.4.2.x86_64"
}
},
{
"category": "product_version",
"name": "rust-analysis-1.36.0-lp151.5.4.2.x86_64",
"product": {
"name": "rust-analysis-1.36.0-lp151.5.4.2.x86_64",
"product_id": "rust-analysis-1.36.0-lp151.5.4.2.x86_64"
}
},
{
"category": "product_version",
"name": "rust-doc-1.36.0-lp151.5.4.2.x86_64",
"product": {
"name": "rust-doc-1.36.0-lp151.5.4.2.x86_64",
"product_id": "rust-doc-1.36.0-lp151.5.4.2.x86_64"
}
},
{
"category": "product_version",
"name": "rust-gdb-1.36.0-lp151.5.4.2.x86_64",
"product": {
"name": "rust-gdb-1.36.0-lp151.5.4.2.x86_64",
"product_id": "rust-gdb-1.36.0-lp151.5.4.2.x86_64"
}
},
{
"category": "product_version",
"name": "rust-std-static-1.36.0-lp151.5.4.2.x86_64",
"product": {
"name": "rust-std-static-1.36.0-lp151.5.4.2.x86_64",
"product_id": "rust-std-static-1.36.0-lp151.5.4.2.x86_64"
}
},
{
"category": "product_version",
"name": "rustfmt-1.36.0-lp151.5.4.2.x86_64",
"product": {
"name": "rustfmt-1.36.0-lp151.5.4.2.x86_64",
"product_id": "rustfmt-1.36.0-lp151.5.4.2.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 15.1",
"product": {
"name": "openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "cargo-1.36.0-lp151.5.4.2.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:cargo-1.36.0-lp151.5.4.2.i586"
},
"product_reference": "cargo-1.36.0-lp151.5.4.2.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cargo-1.36.0-lp151.5.4.2.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:cargo-1.36.0-lp151.5.4.2.x86_64"
},
"product_reference": "cargo-1.36.0-lp151.5.4.2.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cargo-doc-1.36.0-lp151.5.4.2.noarch as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:cargo-doc-1.36.0-lp151.5.4.2.noarch"
},
"product_reference": "cargo-doc-1.36.0-lp151.5.4.2.noarch",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clippy-1.36.0-lp151.5.4.2.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:clippy-1.36.0-lp151.5.4.2.i586"
},
"product_reference": "clippy-1.36.0-lp151.5.4.2.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clippy-1.36.0-lp151.5.4.2.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:clippy-1.36.0-lp151.5.4.2.x86_64"
},
"product_reference": "clippy-1.36.0-lp151.5.4.2.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rls-1.36.0-lp151.5.4.2.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:rls-1.36.0-lp151.5.4.2.i586"
},
"product_reference": "rls-1.36.0-lp151.5.4.2.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rls-1.36.0-lp151.5.4.2.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:rls-1.36.0-lp151.5.4.2.x86_64"
},
"product_reference": "rls-1.36.0-lp151.5.4.2.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-1.36.0-lp151.5.4.2.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:rust-1.36.0-lp151.5.4.2.i586"
},
"product_reference": "rust-1.36.0-lp151.5.4.2.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-1.36.0-lp151.5.4.2.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:rust-1.36.0-lp151.5.4.2.x86_64"
},
"product_reference": "rust-1.36.0-lp151.5.4.2.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-analysis-1.36.0-lp151.5.4.2.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:rust-analysis-1.36.0-lp151.5.4.2.i586"
},
"product_reference": "rust-analysis-1.36.0-lp151.5.4.2.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-analysis-1.36.0-lp151.5.4.2.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:rust-analysis-1.36.0-lp151.5.4.2.x86_64"
},
"product_reference": "rust-analysis-1.36.0-lp151.5.4.2.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-doc-1.36.0-lp151.5.4.2.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:rust-doc-1.36.0-lp151.5.4.2.i586"
},
"product_reference": "rust-doc-1.36.0-lp151.5.4.2.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-doc-1.36.0-lp151.5.4.2.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:rust-doc-1.36.0-lp151.5.4.2.x86_64"
},
"product_reference": "rust-doc-1.36.0-lp151.5.4.2.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-gdb-1.36.0-lp151.5.4.2.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:rust-gdb-1.36.0-lp151.5.4.2.i586"
},
"product_reference": "rust-gdb-1.36.0-lp151.5.4.2.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-gdb-1.36.0-lp151.5.4.2.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:rust-gdb-1.36.0-lp151.5.4.2.x86_64"
},
"product_reference": "rust-gdb-1.36.0-lp151.5.4.2.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-src-1.36.0-lp151.5.4.2.noarch as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:rust-src-1.36.0-lp151.5.4.2.noarch"
},
"product_reference": "rust-src-1.36.0-lp151.5.4.2.noarch",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-1.36.0-lp151.5.4.2.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:rust-std-static-1.36.0-lp151.5.4.2.i586"
},
"product_reference": "rust-std-static-1.36.0-lp151.5.4.2.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-1.36.0-lp151.5.4.2.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:rust-std-static-1.36.0-lp151.5.4.2.x86_64"
},
"product_reference": "rust-std-static-1.36.0-lp151.5.4.2.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rustfmt-1.36.0-lp151.5.4.2.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:rustfmt-1.36.0-lp151.5.4.2.i586"
},
"product_reference": "rustfmt-1.36.0-lp151.5.4.2.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rustfmt-1.36.0-lp151.5.4.2.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:rustfmt-1.36.0-lp151.5.4.2.x86_64"
},
"product_reference": "rustfmt-1.36.0-lp151.5.4.2.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-1000622",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1000622"
}
],
"notes": [
{
"category": "general",
"text": "The Rust Programming Language rustdoc version Between 0.8 and 1.27.0 contains a CWE-427: Uncontrolled Search Path Element vulnerability in rustdoc plugins that can result in local code execution as a different user. This attack appear to be exploitable via using the --plugin flag without the --plugin-path flag. This vulnerability appears to have been fixed in 1.27.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.1:cargo-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:cargo-1.36.0-lp151.5.4.2.x86_64",
"openSUSE Leap 15.1:cargo-doc-1.36.0-lp151.5.4.2.noarch",
"openSUSE Leap 15.1:clippy-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:clippy-1.36.0-lp151.5.4.2.x86_64",
"openSUSE Leap 15.1:rls-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:rls-1.36.0-lp151.5.4.2.x86_64",
"openSUSE Leap 15.1:rust-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:rust-1.36.0-lp151.5.4.2.x86_64",
"openSUSE Leap 15.1:rust-analysis-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:rust-analysis-1.36.0-lp151.5.4.2.x86_64",
"openSUSE Leap 15.1:rust-doc-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:rust-doc-1.36.0-lp151.5.4.2.x86_64",
"openSUSE Leap 15.1:rust-gdb-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:rust-gdb-1.36.0-lp151.5.4.2.x86_64",
"openSUSE Leap 15.1:rust-src-1.36.0-lp151.5.4.2.noarch",
"openSUSE Leap 15.1:rust-std-static-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:rust-std-static-1.36.0-lp151.5.4.2.x86_64",
"openSUSE Leap 15.1:rustfmt-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:rustfmt-1.36.0-lp151.5.4.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1000622",
"url": "https://www.suse.com/security/cve/CVE-2018-1000622"
},
{
"category": "external",
"summary": "SUSE Bug 1100691 for CVE-2018-1000622",
"url": "https://bugzilla.suse.com/1100691"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.1:cargo-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:cargo-1.36.0-lp151.5.4.2.x86_64",
"openSUSE Leap 15.1:cargo-doc-1.36.0-lp151.5.4.2.noarch",
"openSUSE Leap 15.1:clippy-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:clippy-1.36.0-lp151.5.4.2.x86_64",
"openSUSE Leap 15.1:rls-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:rls-1.36.0-lp151.5.4.2.x86_64",
"openSUSE Leap 15.1:rust-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:rust-1.36.0-lp151.5.4.2.x86_64",
"openSUSE Leap 15.1:rust-analysis-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:rust-analysis-1.36.0-lp151.5.4.2.x86_64",
"openSUSE Leap 15.1:rust-doc-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:rust-doc-1.36.0-lp151.5.4.2.x86_64",
"openSUSE Leap 15.1:rust-gdb-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:rust-gdb-1.36.0-lp151.5.4.2.x86_64",
"openSUSE Leap 15.1:rust-src-1.36.0-lp151.5.4.2.noarch",
"openSUSE Leap 15.1:rust-std-static-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:rust-std-static-1.36.0-lp151.5.4.2.x86_64",
"openSUSE Leap 15.1:rustfmt-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:rustfmt-1.36.0-lp151.5.4.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"openSUSE Leap 15.1:cargo-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:cargo-1.36.0-lp151.5.4.2.x86_64",
"openSUSE Leap 15.1:cargo-doc-1.36.0-lp151.5.4.2.noarch",
"openSUSE Leap 15.1:clippy-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:clippy-1.36.0-lp151.5.4.2.x86_64",
"openSUSE Leap 15.1:rls-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:rls-1.36.0-lp151.5.4.2.x86_64",
"openSUSE Leap 15.1:rust-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:rust-1.36.0-lp151.5.4.2.x86_64",
"openSUSE Leap 15.1:rust-analysis-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:rust-analysis-1.36.0-lp151.5.4.2.x86_64",
"openSUSE Leap 15.1:rust-doc-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:rust-doc-1.36.0-lp151.5.4.2.x86_64",
"openSUSE Leap 15.1:rust-gdb-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:rust-gdb-1.36.0-lp151.5.4.2.x86_64",
"openSUSE Leap 15.1:rust-src-1.36.0-lp151.5.4.2.noarch",
"openSUSE Leap 15.1:rust-std-static-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:rust-std-static-1.36.0-lp151.5.4.2.x86_64",
"openSUSE Leap 15.1:rustfmt-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:rustfmt-1.36.0-lp151.5.4.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-10-03T09:22:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-1000622"
},
{
"cve": "CVE-2019-12083",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-12083"
}
],
"notes": [
{
"category": "general",
"text": "The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method which, if overridden, can violate Rust\u0027s safety guarantees and cause memory unsafety. If the `Error::type_id` method is overridden then any type can be safely cast to any other type, causing memory safety vulnerabilities in safe code (e.g., out-of-bounds write or read). Code that does not manually implement Error::type_id is unaffected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.1:cargo-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:cargo-1.36.0-lp151.5.4.2.x86_64",
"openSUSE Leap 15.1:cargo-doc-1.36.0-lp151.5.4.2.noarch",
"openSUSE Leap 15.1:clippy-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:clippy-1.36.0-lp151.5.4.2.x86_64",
"openSUSE Leap 15.1:rls-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:rls-1.36.0-lp151.5.4.2.x86_64",
"openSUSE Leap 15.1:rust-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:rust-1.36.0-lp151.5.4.2.x86_64",
"openSUSE Leap 15.1:rust-analysis-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:rust-analysis-1.36.0-lp151.5.4.2.x86_64",
"openSUSE Leap 15.1:rust-doc-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:rust-doc-1.36.0-lp151.5.4.2.x86_64",
"openSUSE Leap 15.1:rust-gdb-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:rust-gdb-1.36.0-lp151.5.4.2.x86_64",
"openSUSE Leap 15.1:rust-src-1.36.0-lp151.5.4.2.noarch",
"openSUSE Leap 15.1:rust-std-static-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:rust-std-static-1.36.0-lp151.5.4.2.x86_64",
"openSUSE Leap 15.1:rustfmt-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:rustfmt-1.36.0-lp151.5.4.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-12083",
"url": "https://www.suse.com/security/cve/CVE-2019-12083"
},
{
"category": "external",
"summary": "SUSE Bug 1134978 for CVE-2019-12083",
"url": "https://bugzilla.suse.com/1134978"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.1:cargo-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:cargo-1.36.0-lp151.5.4.2.x86_64",
"openSUSE Leap 15.1:cargo-doc-1.36.0-lp151.5.4.2.noarch",
"openSUSE Leap 15.1:clippy-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:clippy-1.36.0-lp151.5.4.2.x86_64",
"openSUSE Leap 15.1:rls-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:rls-1.36.0-lp151.5.4.2.x86_64",
"openSUSE Leap 15.1:rust-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:rust-1.36.0-lp151.5.4.2.x86_64",
"openSUSE Leap 15.1:rust-analysis-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:rust-analysis-1.36.0-lp151.5.4.2.x86_64",
"openSUSE Leap 15.1:rust-doc-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:rust-doc-1.36.0-lp151.5.4.2.x86_64",
"openSUSE Leap 15.1:rust-gdb-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:rust-gdb-1.36.0-lp151.5.4.2.x86_64",
"openSUSE Leap 15.1:rust-src-1.36.0-lp151.5.4.2.noarch",
"openSUSE Leap 15.1:rust-std-static-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:rust-std-static-1.36.0-lp151.5.4.2.x86_64",
"openSUSE Leap 15.1:rustfmt-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:rustfmt-1.36.0-lp151.5.4.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.1:cargo-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:cargo-1.36.0-lp151.5.4.2.x86_64",
"openSUSE Leap 15.1:cargo-doc-1.36.0-lp151.5.4.2.noarch",
"openSUSE Leap 15.1:clippy-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:clippy-1.36.0-lp151.5.4.2.x86_64",
"openSUSE Leap 15.1:rls-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:rls-1.36.0-lp151.5.4.2.x86_64",
"openSUSE Leap 15.1:rust-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:rust-1.36.0-lp151.5.4.2.x86_64",
"openSUSE Leap 15.1:rust-analysis-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:rust-analysis-1.36.0-lp151.5.4.2.x86_64",
"openSUSE Leap 15.1:rust-doc-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:rust-doc-1.36.0-lp151.5.4.2.x86_64",
"openSUSE Leap 15.1:rust-gdb-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:rust-gdb-1.36.0-lp151.5.4.2.x86_64",
"openSUSE Leap 15.1:rust-src-1.36.0-lp151.5.4.2.noarch",
"openSUSE Leap 15.1:rust-std-static-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:rust-std-static-1.36.0-lp151.5.4.2.x86_64",
"openSUSE Leap 15.1:rustfmt-1.36.0-lp151.5.4.2.i586",
"openSUSE Leap 15.1:rustfmt-1.36.0-lp151.5.4.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-10-03T09:22:00Z",
"details": "important"
}
],
"title": "CVE-2019-12083"
}
]
}
OPENSUSE-SU-2024:11359-1
Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2024-06-15 00:00Summary
cargo-1.54.0-1.2 on GA media
Notes
Title of the patch
cargo-1.54.0-1.2 on GA media
Description of the patch
These are all security issues fixed in the cargo-1.54.0-1.2 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-11359
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "cargo-1.54.0-1.2 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the cargo-1.54.0-1.2 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-11359",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_11359-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1000622 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1000622/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-12083 page",
"url": "https://www.suse.com/security/cve/CVE-2019-12083/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-1967 page",
"url": "https://www.suse.com/security/cve/CVE-2020-1967/"
}
],
"title": "cargo-1.54.0-1.2 on GA media",
"tracking": {
"current_release_date": "2024-06-15T00:00:00Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:11359-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "cargo-1.54.0-1.2.aarch64",
"product": {
"name": "cargo-1.54.0-1.2.aarch64",
"product_id": "cargo-1.54.0-1.2.aarch64"
}
},
{
"category": "product_version",
"name": "rls-1.54.0-1.2.aarch64",
"product": {
"name": "rls-1.54.0-1.2.aarch64",
"product_id": "rls-1.54.0-1.2.aarch64"
}
},
{
"category": "product_version",
"name": "rust-1.54.0-1.2.aarch64",
"product": {
"name": "rust-1.54.0-1.2.aarch64",
"product_id": "rust-1.54.0-1.2.aarch64"
}
},
{
"category": "product_version",
"name": "rust-gdb-1.54.0-1.2.aarch64",
"product": {
"name": "rust-gdb-1.54.0-1.2.aarch64",
"product_id": "rust-gdb-1.54.0-1.2.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "cargo-1.54.0-1.2.ppc64le",
"product": {
"name": "cargo-1.54.0-1.2.ppc64le",
"product_id": "cargo-1.54.0-1.2.ppc64le"
}
},
{
"category": "product_version",
"name": "rls-1.54.0-1.2.ppc64le",
"product": {
"name": "rls-1.54.0-1.2.ppc64le",
"product_id": "rls-1.54.0-1.2.ppc64le"
}
},
{
"category": "product_version",
"name": "rust-1.54.0-1.2.ppc64le",
"product": {
"name": "rust-1.54.0-1.2.ppc64le",
"product_id": "rust-1.54.0-1.2.ppc64le"
}
},
{
"category": "product_version",
"name": "rust-gdb-1.54.0-1.2.ppc64le",
"product": {
"name": "rust-gdb-1.54.0-1.2.ppc64le",
"product_id": "rust-gdb-1.54.0-1.2.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "cargo-1.54.0-1.2.s390x",
"product": {
"name": "cargo-1.54.0-1.2.s390x",
"product_id": "cargo-1.54.0-1.2.s390x"
}
},
{
"category": "product_version",
"name": "rls-1.54.0-1.2.s390x",
"product": {
"name": "rls-1.54.0-1.2.s390x",
"product_id": "rls-1.54.0-1.2.s390x"
}
},
{
"category": "product_version",
"name": "rust-1.54.0-1.2.s390x",
"product": {
"name": "rust-1.54.0-1.2.s390x",
"product_id": "rust-1.54.0-1.2.s390x"
}
},
{
"category": "product_version",
"name": "rust-gdb-1.54.0-1.2.s390x",
"product": {
"name": "rust-gdb-1.54.0-1.2.s390x",
"product_id": "rust-gdb-1.54.0-1.2.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "cargo-1.54.0-1.2.x86_64",
"product": {
"name": "cargo-1.54.0-1.2.x86_64",
"product_id": "cargo-1.54.0-1.2.x86_64"
}
},
{
"category": "product_version",
"name": "rls-1.54.0-1.2.x86_64",
"product": {
"name": "rls-1.54.0-1.2.x86_64",
"product_id": "rls-1.54.0-1.2.x86_64"
}
},
{
"category": "product_version",
"name": "rust-1.54.0-1.2.x86_64",
"product": {
"name": "rust-1.54.0-1.2.x86_64",
"product_id": "rust-1.54.0-1.2.x86_64"
}
},
{
"category": "product_version",
"name": "rust-gdb-1.54.0-1.2.x86_64",
"product": {
"name": "rust-gdb-1.54.0-1.2.x86_64",
"product_id": "rust-gdb-1.54.0-1.2.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "cargo-1.54.0-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cargo-1.54.0-1.2.aarch64"
},
"product_reference": "cargo-1.54.0-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cargo-1.54.0-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cargo-1.54.0-1.2.ppc64le"
},
"product_reference": "cargo-1.54.0-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cargo-1.54.0-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cargo-1.54.0-1.2.s390x"
},
"product_reference": "cargo-1.54.0-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cargo-1.54.0-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cargo-1.54.0-1.2.x86_64"
},
"product_reference": "cargo-1.54.0-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rls-1.54.0-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:rls-1.54.0-1.2.aarch64"
},
"product_reference": "rls-1.54.0-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rls-1.54.0-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:rls-1.54.0-1.2.ppc64le"
},
"product_reference": "rls-1.54.0-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rls-1.54.0-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:rls-1.54.0-1.2.s390x"
},
"product_reference": "rls-1.54.0-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rls-1.54.0-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:rls-1.54.0-1.2.x86_64"
},
"product_reference": "rls-1.54.0-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-1.54.0-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:rust-1.54.0-1.2.aarch64"
},
"product_reference": "rust-1.54.0-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-1.54.0-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:rust-1.54.0-1.2.ppc64le"
},
"product_reference": "rust-1.54.0-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-1.54.0-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:rust-1.54.0-1.2.s390x"
},
"product_reference": "rust-1.54.0-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-1.54.0-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:rust-1.54.0-1.2.x86_64"
},
"product_reference": "rust-1.54.0-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-gdb-1.54.0-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:rust-gdb-1.54.0-1.2.aarch64"
},
"product_reference": "rust-gdb-1.54.0-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-gdb-1.54.0-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:rust-gdb-1.54.0-1.2.ppc64le"
},
"product_reference": "rust-gdb-1.54.0-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-gdb-1.54.0-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:rust-gdb-1.54.0-1.2.s390x"
},
"product_reference": "rust-gdb-1.54.0-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-gdb-1.54.0-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:rust-gdb-1.54.0-1.2.x86_64"
},
"product_reference": "rust-gdb-1.54.0-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-1000622",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1000622"
}
],
"notes": [
{
"category": "general",
"text": "The Rust Programming Language rustdoc version Between 0.8 and 1.27.0 contains a CWE-427: Uncontrolled Search Path Element vulnerability in rustdoc plugins that can result in local code execution as a different user. This attack appear to be exploitable via using the --plugin flag without the --plugin-path flag. This vulnerability appears to have been fixed in 1.27.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cargo-1.54.0-1.2.aarch64",
"openSUSE Tumbleweed:cargo-1.54.0-1.2.ppc64le",
"openSUSE Tumbleweed:cargo-1.54.0-1.2.s390x",
"openSUSE Tumbleweed:cargo-1.54.0-1.2.x86_64",
"openSUSE Tumbleweed:rls-1.54.0-1.2.aarch64",
"openSUSE Tumbleweed:rls-1.54.0-1.2.ppc64le",
"openSUSE Tumbleweed:rls-1.54.0-1.2.s390x",
"openSUSE Tumbleweed:rls-1.54.0-1.2.x86_64",
"openSUSE Tumbleweed:rust-1.54.0-1.2.aarch64",
"openSUSE Tumbleweed:rust-1.54.0-1.2.ppc64le",
"openSUSE Tumbleweed:rust-1.54.0-1.2.s390x",
"openSUSE Tumbleweed:rust-1.54.0-1.2.x86_64",
"openSUSE Tumbleweed:rust-gdb-1.54.0-1.2.aarch64",
"openSUSE Tumbleweed:rust-gdb-1.54.0-1.2.ppc64le",
"openSUSE Tumbleweed:rust-gdb-1.54.0-1.2.s390x",
"openSUSE Tumbleweed:rust-gdb-1.54.0-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1000622",
"url": "https://www.suse.com/security/cve/CVE-2018-1000622"
},
{
"category": "external",
"summary": "SUSE Bug 1100691 for CVE-2018-1000622",
"url": "https://bugzilla.suse.com/1100691"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cargo-1.54.0-1.2.aarch64",
"openSUSE Tumbleweed:cargo-1.54.0-1.2.ppc64le",
"openSUSE Tumbleweed:cargo-1.54.0-1.2.s390x",
"openSUSE Tumbleweed:cargo-1.54.0-1.2.x86_64",
"openSUSE Tumbleweed:rls-1.54.0-1.2.aarch64",
"openSUSE Tumbleweed:rls-1.54.0-1.2.ppc64le",
"openSUSE Tumbleweed:rls-1.54.0-1.2.s390x",
"openSUSE Tumbleweed:rls-1.54.0-1.2.x86_64",
"openSUSE Tumbleweed:rust-1.54.0-1.2.aarch64",
"openSUSE Tumbleweed:rust-1.54.0-1.2.ppc64le",
"openSUSE Tumbleweed:rust-1.54.0-1.2.s390x",
"openSUSE Tumbleweed:rust-1.54.0-1.2.x86_64",
"openSUSE Tumbleweed:rust-gdb-1.54.0-1.2.aarch64",
"openSUSE Tumbleweed:rust-gdb-1.54.0-1.2.ppc64le",
"openSUSE Tumbleweed:rust-gdb-1.54.0-1.2.s390x",
"openSUSE Tumbleweed:rust-gdb-1.54.0-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:cargo-1.54.0-1.2.aarch64",
"openSUSE Tumbleweed:cargo-1.54.0-1.2.ppc64le",
"openSUSE Tumbleweed:cargo-1.54.0-1.2.s390x",
"openSUSE Tumbleweed:cargo-1.54.0-1.2.x86_64",
"openSUSE Tumbleweed:rls-1.54.0-1.2.aarch64",
"openSUSE Tumbleweed:rls-1.54.0-1.2.ppc64le",
"openSUSE Tumbleweed:rls-1.54.0-1.2.s390x",
"openSUSE Tumbleweed:rls-1.54.0-1.2.x86_64",
"openSUSE Tumbleweed:rust-1.54.0-1.2.aarch64",
"openSUSE Tumbleweed:rust-1.54.0-1.2.ppc64le",
"openSUSE Tumbleweed:rust-1.54.0-1.2.s390x",
"openSUSE Tumbleweed:rust-1.54.0-1.2.x86_64",
"openSUSE Tumbleweed:rust-gdb-1.54.0-1.2.aarch64",
"openSUSE Tumbleweed:rust-gdb-1.54.0-1.2.ppc64le",
"openSUSE Tumbleweed:rust-gdb-1.54.0-1.2.s390x",
"openSUSE Tumbleweed:rust-gdb-1.54.0-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-1000622"
},
{
"cve": "CVE-2019-12083",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-12083"
}
],
"notes": [
{
"category": "general",
"text": "The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method which, if overridden, can violate Rust\u0027s safety guarantees and cause memory unsafety. If the `Error::type_id` method is overridden then any type can be safely cast to any other type, causing memory safety vulnerabilities in safe code (e.g., out-of-bounds write or read). Code that does not manually implement Error::type_id is unaffected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cargo-1.54.0-1.2.aarch64",
"openSUSE Tumbleweed:cargo-1.54.0-1.2.ppc64le",
"openSUSE Tumbleweed:cargo-1.54.0-1.2.s390x",
"openSUSE Tumbleweed:cargo-1.54.0-1.2.x86_64",
"openSUSE Tumbleweed:rls-1.54.0-1.2.aarch64",
"openSUSE Tumbleweed:rls-1.54.0-1.2.ppc64le",
"openSUSE Tumbleweed:rls-1.54.0-1.2.s390x",
"openSUSE Tumbleweed:rls-1.54.0-1.2.x86_64",
"openSUSE Tumbleweed:rust-1.54.0-1.2.aarch64",
"openSUSE Tumbleweed:rust-1.54.0-1.2.ppc64le",
"openSUSE Tumbleweed:rust-1.54.0-1.2.s390x",
"openSUSE Tumbleweed:rust-1.54.0-1.2.x86_64",
"openSUSE Tumbleweed:rust-gdb-1.54.0-1.2.aarch64",
"openSUSE Tumbleweed:rust-gdb-1.54.0-1.2.ppc64le",
"openSUSE Tumbleweed:rust-gdb-1.54.0-1.2.s390x",
"openSUSE Tumbleweed:rust-gdb-1.54.0-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-12083",
"url": "https://www.suse.com/security/cve/CVE-2019-12083"
},
{
"category": "external",
"summary": "SUSE Bug 1134978 for CVE-2019-12083",
"url": "https://bugzilla.suse.com/1134978"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cargo-1.54.0-1.2.aarch64",
"openSUSE Tumbleweed:cargo-1.54.0-1.2.ppc64le",
"openSUSE Tumbleweed:cargo-1.54.0-1.2.s390x",
"openSUSE Tumbleweed:cargo-1.54.0-1.2.x86_64",
"openSUSE Tumbleweed:rls-1.54.0-1.2.aarch64",
"openSUSE Tumbleweed:rls-1.54.0-1.2.ppc64le",
"openSUSE Tumbleweed:rls-1.54.0-1.2.s390x",
"openSUSE Tumbleweed:rls-1.54.0-1.2.x86_64",
"openSUSE Tumbleweed:rust-1.54.0-1.2.aarch64",
"openSUSE Tumbleweed:rust-1.54.0-1.2.ppc64le",
"openSUSE Tumbleweed:rust-1.54.0-1.2.s390x",
"openSUSE Tumbleweed:rust-1.54.0-1.2.x86_64",
"openSUSE Tumbleweed:rust-gdb-1.54.0-1.2.aarch64",
"openSUSE Tumbleweed:rust-gdb-1.54.0-1.2.ppc64le",
"openSUSE Tumbleweed:rust-gdb-1.54.0-1.2.s390x",
"openSUSE Tumbleweed:rust-gdb-1.54.0-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:cargo-1.54.0-1.2.aarch64",
"openSUSE Tumbleweed:cargo-1.54.0-1.2.ppc64le",
"openSUSE Tumbleweed:cargo-1.54.0-1.2.s390x",
"openSUSE Tumbleweed:cargo-1.54.0-1.2.x86_64",
"openSUSE Tumbleweed:rls-1.54.0-1.2.aarch64",
"openSUSE Tumbleweed:rls-1.54.0-1.2.ppc64le",
"openSUSE Tumbleweed:rls-1.54.0-1.2.s390x",
"openSUSE Tumbleweed:rls-1.54.0-1.2.x86_64",
"openSUSE Tumbleweed:rust-1.54.0-1.2.aarch64",
"openSUSE Tumbleweed:rust-1.54.0-1.2.ppc64le",
"openSUSE Tumbleweed:rust-1.54.0-1.2.s390x",
"openSUSE Tumbleweed:rust-1.54.0-1.2.x86_64",
"openSUSE Tumbleweed:rust-gdb-1.54.0-1.2.aarch64",
"openSUSE Tumbleweed:rust-gdb-1.54.0-1.2.ppc64le",
"openSUSE Tumbleweed:rust-gdb-1.54.0-1.2.s390x",
"openSUSE Tumbleweed:rust-gdb-1.54.0-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-12083"
},
{
"cve": "CVE-2020-1967",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-1967"
}
],
"notes": [
{
"category": "general",
"text": "Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the \"signature_algorithms_cert\" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. OpenSSL version 1.1.1d, 1.1.1e, and 1.1.1f are affected by this issue. This issue did not affect OpenSSL versions prior to 1.1.1d. Fixed in OpenSSL 1.1.1g (Affected 1.1.1d-1.1.1f).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cargo-1.54.0-1.2.aarch64",
"openSUSE Tumbleweed:cargo-1.54.0-1.2.ppc64le",
"openSUSE Tumbleweed:cargo-1.54.0-1.2.s390x",
"openSUSE Tumbleweed:cargo-1.54.0-1.2.x86_64",
"openSUSE Tumbleweed:rls-1.54.0-1.2.aarch64",
"openSUSE Tumbleweed:rls-1.54.0-1.2.ppc64le",
"openSUSE Tumbleweed:rls-1.54.0-1.2.s390x",
"openSUSE Tumbleweed:rls-1.54.0-1.2.x86_64",
"openSUSE Tumbleweed:rust-1.54.0-1.2.aarch64",
"openSUSE Tumbleweed:rust-1.54.0-1.2.ppc64le",
"openSUSE Tumbleweed:rust-1.54.0-1.2.s390x",
"openSUSE Tumbleweed:rust-1.54.0-1.2.x86_64",
"openSUSE Tumbleweed:rust-gdb-1.54.0-1.2.aarch64",
"openSUSE Tumbleweed:rust-gdb-1.54.0-1.2.ppc64le",
"openSUSE Tumbleweed:rust-gdb-1.54.0-1.2.s390x",
"openSUSE Tumbleweed:rust-gdb-1.54.0-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-1967",
"url": "https://www.suse.com/security/cve/CVE-2020-1967"
},
{
"category": "external",
"summary": "SUSE Bug 1169407 for CVE-2020-1967",
"url": "https://bugzilla.suse.com/1169407"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cargo-1.54.0-1.2.aarch64",
"openSUSE Tumbleweed:cargo-1.54.0-1.2.ppc64le",
"openSUSE Tumbleweed:cargo-1.54.0-1.2.s390x",
"openSUSE Tumbleweed:cargo-1.54.0-1.2.x86_64",
"openSUSE Tumbleweed:rls-1.54.0-1.2.aarch64",
"openSUSE Tumbleweed:rls-1.54.0-1.2.ppc64le",
"openSUSE Tumbleweed:rls-1.54.0-1.2.s390x",
"openSUSE Tumbleweed:rls-1.54.0-1.2.x86_64",
"openSUSE Tumbleweed:rust-1.54.0-1.2.aarch64",
"openSUSE Tumbleweed:rust-1.54.0-1.2.ppc64le",
"openSUSE Tumbleweed:rust-1.54.0-1.2.s390x",
"openSUSE Tumbleweed:rust-1.54.0-1.2.x86_64",
"openSUSE Tumbleweed:rust-gdb-1.54.0-1.2.aarch64",
"openSUSE Tumbleweed:rust-gdb-1.54.0-1.2.ppc64le",
"openSUSE Tumbleweed:rust-gdb-1.54.0-1.2.s390x",
"openSUSE Tumbleweed:rust-gdb-1.54.0-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:cargo-1.54.0-1.2.aarch64",
"openSUSE Tumbleweed:cargo-1.54.0-1.2.ppc64le",
"openSUSE Tumbleweed:cargo-1.54.0-1.2.s390x",
"openSUSE Tumbleweed:cargo-1.54.0-1.2.x86_64",
"openSUSE Tumbleweed:rls-1.54.0-1.2.aarch64",
"openSUSE Tumbleweed:rls-1.54.0-1.2.ppc64le",
"openSUSE Tumbleweed:rls-1.54.0-1.2.s390x",
"openSUSE Tumbleweed:rls-1.54.0-1.2.x86_64",
"openSUSE Tumbleweed:rust-1.54.0-1.2.aarch64",
"openSUSE Tumbleweed:rust-1.54.0-1.2.ppc64le",
"openSUSE Tumbleweed:rust-1.54.0-1.2.s390x",
"openSUSE Tumbleweed:rust-1.54.0-1.2.x86_64",
"openSUSE Tumbleweed:rust-gdb-1.54.0-1.2.aarch64",
"openSUSE Tumbleweed:rust-gdb-1.54.0-1.2.ppc64le",
"openSUSE Tumbleweed:rust-gdb-1.54.0-1.2.s390x",
"openSUSE Tumbleweed:rust-gdb-1.54.0-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-1967"
}
]
}
OPENSUSE-SU-2024:11360-1
Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2024-06-15 00:00Summary
cargo1.53-1.53.0-2.5 on GA media
Notes
Title of the patch
cargo1.53-1.53.0-2.5 on GA media
Description of the patch
These are all security issues fixed in the cargo1.53-1.53.0-2.5 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-11360
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "cargo1.53-1.53.0-2.5 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the cargo1.53-1.53.0-2.5 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-11360",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_11360-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1000622 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1000622/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-12083 page",
"url": "https://www.suse.com/security/cve/CVE-2019-12083/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-1967 page",
"url": "https://www.suse.com/security/cve/CVE-2020-1967/"
}
],
"title": "cargo1.53-1.53.0-2.5 on GA media",
"tracking": {
"current_release_date": "2024-06-15T00:00:00Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:11360-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "cargo1.53-1.53.0-2.5.aarch64",
"product": {
"name": "cargo1.53-1.53.0-2.5.aarch64",
"product_id": "cargo1.53-1.53.0-2.5.aarch64"
}
},
{
"category": "product_version",
"name": "cargo1.53-doc-1.53.0-2.5.aarch64",
"product": {
"name": "cargo1.53-doc-1.53.0-2.5.aarch64",
"product_id": "cargo1.53-doc-1.53.0-2.5.aarch64"
}
},
{
"category": "product_version",
"name": "rls1.53-1.53.0-2.5.aarch64",
"product": {
"name": "rls1.53-1.53.0-2.5.aarch64",
"product_id": "rls1.53-1.53.0-2.5.aarch64"
}
},
{
"category": "product_version",
"name": "rust1.53-1.53.0-2.5.aarch64",
"product": {
"name": "rust1.53-1.53.0-2.5.aarch64",
"product_id": "rust1.53-1.53.0-2.5.aarch64"
}
},
{
"category": "product_version",
"name": "rust1.53-analysis-1.53.0-2.5.aarch64",
"product": {
"name": "rust1.53-analysis-1.53.0-2.5.aarch64",
"product_id": "rust1.53-analysis-1.53.0-2.5.aarch64"
}
},
{
"category": "product_version",
"name": "rust1.53-doc-1.53.0-2.5.aarch64",
"product": {
"name": "rust1.53-doc-1.53.0-2.5.aarch64",
"product_id": "rust1.53-doc-1.53.0-2.5.aarch64"
}
},
{
"category": "product_version",
"name": "rust1.53-gdb-1.53.0-2.5.aarch64",
"product": {
"name": "rust1.53-gdb-1.53.0-2.5.aarch64",
"product_id": "rust1.53-gdb-1.53.0-2.5.aarch64"
}
},
{
"category": "product_version",
"name": "rust1.53-src-1.53.0-2.5.aarch64",
"product": {
"name": "rust1.53-src-1.53.0-2.5.aarch64",
"product_id": "rust1.53-src-1.53.0-2.5.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "cargo1.53-1.53.0-2.5.ppc64le",
"product": {
"name": "cargo1.53-1.53.0-2.5.ppc64le",
"product_id": "cargo1.53-1.53.0-2.5.ppc64le"
}
},
{
"category": "product_version",
"name": "cargo1.53-doc-1.53.0-2.5.ppc64le",
"product": {
"name": "cargo1.53-doc-1.53.0-2.5.ppc64le",
"product_id": "cargo1.53-doc-1.53.0-2.5.ppc64le"
}
},
{
"category": "product_version",
"name": "rls1.53-1.53.0-2.5.ppc64le",
"product": {
"name": "rls1.53-1.53.0-2.5.ppc64le",
"product_id": "rls1.53-1.53.0-2.5.ppc64le"
}
},
{
"category": "product_version",
"name": "rust1.53-1.53.0-2.5.ppc64le",
"product": {
"name": "rust1.53-1.53.0-2.5.ppc64le",
"product_id": "rust1.53-1.53.0-2.5.ppc64le"
}
},
{
"category": "product_version",
"name": "rust1.53-analysis-1.53.0-2.5.ppc64le",
"product": {
"name": "rust1.53-analysis-1.53.0-2.5.ppc64le",
"product_id": "rust1.53-analysis-1.53.0-2.5.ppc64le"
}
},
{
"category": "product_version",
"name": "rust1.53-doc-1.53.0-2.5.ppc64le",
"product": {
"name": "rust1.53-doc-1.53.0-2.5.ppc64le",
"product_id": "rust1.53-doc-1.53.0-2.5.ppc64le"
}
},
{
"category": "product_version",
"name": "rust1.53-gdb-1.53.0-2.5.ppc64le",
"product": {
"name": "rust1.53-gdb-1.53.0-2.5.ppc64le",
"product_id": "rust1.53-gdb-1.53.0-2.5.ppc64le"
}
},
{
"category": "product_version",
"name": "rust1.53-src-1.53.0-2.5.ppc64le",
"product": {
"name": "rust1.53-src-1.53.0-2.5.ppc64le",
"product_id": "rust1.53-src-1.53.0-2.5.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "cargo1.53-1.53.0-2.5.s390x",
"product": {
"name": "cargo1.53-1.53.0-2.5.s390x",
"product_id": "cargo1.53-1.53.0-2.5.s390x"
}
},
{
"category": "product_version",
"name": "cargo1.53-doc-1.53.0-2.5.s390x",
"product": {
"name": "cargo1.53-doc-1.53.0-2.5.s390x",
"product_id": "cargo1.53-doc-1.53.0-2.5.s390x"
}
},
{
"category": "product_version",
"name": "rls1.53-1.53.0-2.5.s390x",
"product": {
"name": "rls1.53-1.53.0-2.5.s390x",
"product_id": "rls1.53-1.53.0-2.5.s390x"
}
},
{
"category": "product_version",
"name": "rust1.53-1.53.0-2.5.s390x",
"product": {
"name": "rust1.53-1.53.0-2.5.s390x",
"product_id": "rust1.53-1.53.0-2.5.s390x"
}
},
{
"category": "product_version",
"name": "rust1.53-analysis-1.53.0-2.5.s390x",
"product": {
"name": "rust1.53-analysis-1.53.0-2.5.s390x",
"product_id": "rust1.53-analysis-1.53.0-2.5.s390x"
}
},
{
"category": "product_version",
"name": "rust1.53-doc-1.53.0-2.5.s390x",
"product": {
"name": "rust1.53-doc-1.53.0-2.5.s390x",
"product_id": "rust1.53-doc-1.53.0-2.5.s390x"
}
},
{
"category": "product_version",
"name": "rust1.53-gdb-1.53.0-2.5.s390x",
"product": {
"name": "rust1.53-gdb-1.53.0-2.5.s390x",
"product_id": "rust1.53-gdb-1.53.0-2.5.s390x"
}
},
{
"category": "product_version",
"name": "rust1.53-src-1.53.0-2.5.s390x",
"product": {
"name": "rust1.53-src-1.53.0-2.5.s390x",
"product_id": "rust1.53-src-1.53.0-2.5.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "cargo1.53-1.53.0-2.5.x86_64",
"product": {
"name": "cargo1.53-1.53.0-2.5.x86_64",
"product_id": "cargo1.53-1.53.0-2.5.x86_64"
}
},
{
"category": "product_version",
"name": "cargo1.53-doc-1.53.0-2.5.x86_64",
"product": {
"name": "cargo1.53-doc-1.53.0-2.5.x86_64",
"product_id": "cargo1.53-doc-1.53.0-2.5.x86_64"
}
},
{
"category": "product_version",
"name": "rls1.53-1.53.0-2.5.x86_64",
"product": {
"name": "rls1.53-1.53.0-2.5.x86_64",
"product_id": "rls1.53-1.53.0-2.5.x86_64"
}
},
{
"category": "product_version",
"name": "rust1.53-1.53.0-2.5.x86_64",
"product": {
"name": "rust1.53-1.53.0-2.5.x86_64",
"product_id": "rust1.53-1.53.0-2.5.x86_64"
}
},
{
"category": "product_version",
"name": "rust1.53-analysis-1.53.0-2.5.x86_64",
"product": {
"name": "rust1.53-analysis-1.53.0-2.5.x86_64",
"product_id": "rust1.53-analysis-1.53.0-2.5.x86_64"
}
},
{
"category": "product_version",
"name": "rust1.53-doc-1.53.0-2.5.x86_64",
"product": {
"name": "rust1.53-doc-1.53.0-2.5.x86_64",
"product_id": "rust1.53-doc-1.53.0-2.5.x86_64"
}
},
{
"category": "product_version",
"name": "rust1.53-gdb-1.53.0-2.5.x86_64",
"product": {
"name": "rust1.53-gdb-1.53.0-2.5.x86_64",
"product_id": "rust1.53-gdb-1.53.0-2.5.x86_64"
}
},
{
"category": "product_version",
"name": "rust1.53-src-1.53.0-2.5.x86_64",
"product": {
"name": "rust1.53-src-1.53.0-2.5.x86_64",
"product_id": "rust1.53-src-1.53.0-2.5.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "cargo1.53-1.53.0-2.5.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cargo1.53-1.53.0-2.5.aarch64"
},
"product_reference": "cargo1.53-1.53.0-2.5.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cargo1.53-1.53.0-2.5.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cargo1.53-1.53.0-2.5.ppc64le"
},
"product_reference": "cargo1.53-1.53.0-2.5.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cargo1.53-1.53.0-2.5.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cargo1.53-1.53.0-2.5.s390x"
},
"product_reference": "cargo1.53-1.53.0-2.5.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cargo1.53-1.53.0-2.5.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cargo1.53-1.53.0-2.5.x86_64"
},
"product_reference": "cargo1.53-1.53.0-2.5.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cargo1.53-doc-1.53.0-2.5.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cargo1.53-doc-1.53.0-2.5.aarch64"
},
"product_reference": "cargo1.53-doc-1.53.0-2.5.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cargo1.53-doc-1.53.0-2.5.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cargo1.53-doc-1.53.0-2.5.ppc64le"
},
"product_reference": "cargo1.53-doc-1.53.0-2.5.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cargo1.53-doc-1.53.0-2.5.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cargo1.53-doc-1.53.0-2.5.s390x"
},
"product_reference": "cargo1.53-doc-1.53.0-2.5.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cargo1.53-doc-1.53.0-2.5.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cargo1.53-doc-1.53.0-2.5.x86_64"
},
"product_reference": "cargo1.53-doc-1.53.0-2.5.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rls1.53-1.53.0-2.5.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:rls1.53-1.53.0-2.5.aarch64"
},
"product_reference": "rls1.53-1.53.0-2.5.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rls1.53-1.53.0-2.5.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:rls1.53-1.53.0-2.5.ppc64le"
},
"product_reference": "rls1.53-1.53.0-2.5.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rls1.53-1.53.0-2.5.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:rls1.53-1.53.0-2.5.s390x"
},
"product_reference": "rls1.53-1.53.0-2.5.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rls1.53-1.53.0-2.5.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:rls1.53-1.53.0-2.5.x86_64"
},
"product_reference": "rls1.53-1.53.0-2.5.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust1.53-1.53.0-2.5.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:rust1.53-1.53.0-2.5.aarch64"
},
"product_reference": "rust1.53-1.53.0-2.5.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust1.53-1.53.0-2.5.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:rust1.53-1.53.0-2.5.ppc64le"
},
"product_reference": "rust1.53-1.53.0-2.5.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust1.53-1.53.0-2.5.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:rust1.53-1.53.0-2.5.s390x"
},
"product_reference": "rust1.53-1.53.0-2.5.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust1.53-1.53.0-2.5.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:rust1.53-1.53.0-2.5.x86_64"
},
"product_reference": "rust1.53-1.53.0-2.5.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust1.53-analysis-1.53.0-2.5.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:rust1.53-analysis-1.53.0-2.5.aarch64"
},
"product_reference": "rust1.53-analysis-1.53.0-2.5.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust1.53-analysis-1.53.0-2.5.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:rust1.53-analysis-1.53.0-2.5.ppc64le"
},
"product_reference": "rust1.53-analysis-1.53.0-2.5.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust1.53-analysis-1.53.0-2.5.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:rust1.53-analysis-1.53.0-2.5.s390x"
},
"product_reference": "rust1.53-analysis-1.53.0-2.5.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust1.53-analysis-1.53.0-2.5.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:rust1.53-analysis-1.53.0-2.5.x86_64"
},
"product_reference": "rust1.53-analysis-1.53.0-2.5.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust1.53-doc-1.53.0-2.5.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:rust1.53-doc-1.53.0-2.5.aarch64"
},
"product_reference": "rust1.53-doc-1.53.0-2.5.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust1.53-doc-1.53.0-2.5.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:rust1.53-doc-1.53.0-2.5.ppc64le"
},
"product_reference": "rust1.53-doc-1.53.0-2.5.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust1.53-doc-1.53.0-2.5.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:rust1.53-doc-1.53.0-2.5.s390x"
},
"product_reference": "rust1.53-doc-1.53.0-2.5.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust1.53-doc-1.53.0-2.5.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:rust1.53-doc-1.53.0-2.5.x86_64"
},
"product_reference": "rust1.53-doc-1.53.0-2.5.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust1.53-gdb-1.53.0-2.5.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:rust1.53-gdb-1.53.0-2.5.aarch64"
},
"product_reference": "rust1.53-gdb-1.53.0-2.5.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust1.53-gdb-1.53.0-2.5.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:rust1.53-gdb-1.53.0-2.5.ppc64le"
},
"product_reference": "rust1.53-gdb-1.53.0-2.5.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust1.53-gdb-1.53.0-2.5.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:rust1.53-gdb-1.53.0-2.5.s390x"
},
"product_reference": "rust1.53-gdb-1.53.0-2.5.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust1.53-gdb-1.53.0-2.5.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:rust1.53-gdb-1.53.0-2.5.x86_64"
},
"product_reference": "rust1.53-gdb-1.53.0-2.5.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust1.53-src-1.53.0-2.5.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:rust1.53-src-1.53.0-2.5.aarch64"
},
"product_reference": "rust1.53-src-1.53.0-2.5.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust1.53-src-1.53.0-2.5.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:rust1.53-src-1.53.0-2.5.ppc64le"
},
"product_reference": "rust1.53-src-1.53.0-2.5.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust1.53-src-1.53.0-2.5.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:rust1.53-src-1.53.0-2.5.s390x"
},
"product_reference": "rust1.53-src-1.53.0-2.5.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust1.53-src-1.53.0-2.5.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:rust1.53-src-1.53.0-2.5.x86_64"
},
"product_reference": "rust1.53-src-1.53.0-2.5.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-1000622",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1000622"
}
],
"notes": [
{
"category": "general",
"text": "The Rust Programming Language rustdoc version Between 0.8 and 1.27.0 contains a CWE-427: Uncontrolled Search Path Element vulnerability in rustdoc plugins that can result in local code execution as a different user. This attack appear to be exploitable via using the --plugin flag without the --plugin-path flag. This vulnerability appears to have been fixed in 1.27.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cargo1.53-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:cargo1.53-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:cargo1.53-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:cargo1.53-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:cargo1.53-doc-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:cargo1.53-doc-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:cargo1.53-doc-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:cargo1.53-doc-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rls1.53-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rls1.53-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rls1.53-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rls1.53-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rust1.53-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rust1.53-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rust1.53-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rust1.53-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rust1.53-analysis-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rust1.53-analysis-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rust1.53-analysis-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rust1.53-analysis-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rust1.53-doc-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rust1.53-doc-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rust1.53-doc-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rust1.53-doc-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rust1.53-gdb-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rust1.53-gdb-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rust1.53-gdb-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rust1.53-gdb-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rust1.53-src-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rust1.53-src-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rust1.53-src-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rust1.53-src-1.53.0-2.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1000622",
"url": "https://www.suse.com/security/cve/CVE-2018-1000622"
},
{
"category": "external",
"summary": "SUSE Bug 1100691 for CVE-2018-1000622",
"url": "https://bugzilla.suse.com/1100691"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cargo1.53-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:cargo1.53-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:cargo1.53-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:cargo1.53-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:cargo1.53-doc-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:cargo1.53-doc-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:cargo1.53-doc-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:cargo1.53-doc-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rls1.53-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rls1.53-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rls1.53-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rls1.53-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rust1.53-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rust1.53-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rust1.53-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rust1.53-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rust1.53-analysis-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rust1.53-analysis-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rust1.53-analysis-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rust1.53-analysis-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rust1.53-doc-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rust1.53-doc-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rust1.53-doc-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rust1.53-doc-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rust1.53-gdb-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rust1.53-gdb-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rust1.53-gdb-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rust1.53-gdb-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rust1.53-src-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rust1.53-src-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rust1.53-src-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rust1.53-src-1.53.0-2.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:cargo1.53-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:cargo1.53-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:cargo1.53-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:cargo1.53-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:cargo1.53-doc-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:cargo1.53-doc-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:cargo1.53-doc-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:cargo1.53-doc-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rls1.53-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rls1.53-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rls1.53-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rls1.53-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rust1.53-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rust1.53-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rust1.53-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rust1.53-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rust1.53-analysis-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rust1.53-analysis-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rust1.53-analysis-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rust1.53-analysis-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rust1.53-doc-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rust1.53-doc-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rust1.53-doc-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rust1.53-doc-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rust1.53-gdb-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rust1.53-gdb-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rust1.53-gdb-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rust1.53-gdb-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rust1.53-src-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rust1.53-src-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rust1.53-src-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rust1.53-src-1.53.0-2.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-1000622"
},
{
"cve": "CVE-2019-12083",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-12083"
}
],
"notes": [
{
"category": "general",
"text": "The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method which, if overridden, can violate Rust\u0027s safety guarantees and cause memory unsafety. If the `Error::type_id` method is overridden then any type can be safely cast to any other type, causing memory safety vulnerabilities in safe code (e.g., out-of-bounds write or read). Code that does not manually implement Error::type_id is unaffected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cargo1.53-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:cargo1.53-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:cargo1.53-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:cargo1.53-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:cargo1.53-doc-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:cargo1.53-doc-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:cargo1.53-doc-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:cargo1.53-doc-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rls1.53-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rls1.53-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rls1.53-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rls1.53-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rust1.53-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rust1.53-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rust1.53-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rust1.53-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rust1.53-analysis-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rust1.53-analysis-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rust1.53-analysis-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rust1.53-analysis-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rust1.53-doc-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rust1.53-doc-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rust1.53-doc-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rust1.53-doc-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rust1.53-gdb-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rust1.53-gdb-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rust1.53-gdb-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rust1.53-gdb-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rust1.53-src-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rust1.53-src-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rust1.53-src-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rust1.53-src-1.53.0-2.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-12083",
"url": "https://www.suse.com/security/cve/CVE-2019-12083"
},
{
"category": "external",
"summary": "SUSE Bug 1134978 for CVE-2019-12083",
"url": "https://bugzilla.suse.com/1134978"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cargo1.53-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:cargo1.53-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:cargo1.53-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:cargo1.53-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:cargo1.53-doc-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:cargo1.53-doc-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:cargo1.53-doc-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:cargo1.53-doc-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rls1.53-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rls1.53-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rls1.53-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rls1.53-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rust1.53-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rust1.53-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rust1.53-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rust1.53-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rust1.53-analysis-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rust1.53-analysis-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rust1.53-analysis-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rust1.53-analysis-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rust1.53-doc-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rust1.53-doc-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rust1.53-doc-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rust1.53-doc-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rust1.53-gdb-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rust1.53-gdb-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rust1.53-gdb-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rust1.53-gdb-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rust1.53-src-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rust1.53-src-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rust1.53-src-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rust1.53-src-1.53.0-2.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:cargo1.53-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:cargo1.53-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:cargo1.53-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:cargo1.53-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:cargo1.53-doc-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:cargo1.53-doc-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:cargo1.53-doc-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:cargo1.53-doc-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rls1.53-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rls1.53-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rls1.53-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rls1.53-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rust1.53-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rust1.53-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rust1.53-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rust1.53-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rust1.53-analysis-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rust1.53-analysis-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rust1.53-analysis-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rust1.53-analysis-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rust1.53-doc-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rust1.53-doc-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rust1.53-doc-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rust1.53-doc-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rust1.53-gdb-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rust1.53-gdb-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rust1.53-gdb-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rust1.53-gdb-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rust1.53-src-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rust1.53-src-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rust1.53-src-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rust1.53-src-1.53.0-2.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-12083"
},
{
"cve": "CVE-2020-1967",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-1967"
}
],
"notes": [
{
"category": "general",
"text": "Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the \"signature_algorithms_cert\" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. OpenSSL version 1.1.1d, 1.1.1e, and 1.1.1f are affected by this issue. This issue did not affect OpenSSL versions prior to 1.1.1d. Fixed in OpenSSL 1.1.1g (Affected 1.1.1d-1.1.1f).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cargo1.53-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:cargo1.53-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:cargo1.53-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:cargo1.53-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:cargo1.53-doc-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:cargo1.53-doc-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:cargo1.53-doc-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:cargo1.53-doc-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rls1.53-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rls1.53-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rls1.53-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rls1.53-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rust1.53-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rust1.53-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rust1.53-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rust1.53-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rust1.53-analysis-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rust1.53-analysis-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rust1.53-analysis-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rust1.53-analysis-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rust1.53-doc-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rust1.53-doc-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rust1.53-doc-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rust1.53-doc-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rust1.53-gdb-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rust1.53-gdb-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rust1.53-gdb-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rust1.53-gdb-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rust1.53-src-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rust1.53-src-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rust1.53-src-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rust1.53-src-1.53.0-2.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-1967",
"url": "https://www.suse.com/security/cve/CVE-2020-1967"
},
{
"category": "external",
"summary": "SUSE Bug 1169407 for CVE-2020-1967",
"url": "https://bugzilla.suse.com/1169407"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cargo1.53-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:cargo1.53-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:cargo1.53-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:cargo1.53-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:cargo1.53-doc-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:cargo1.53-doc-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:cargo1.53-doc-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:cargo1.53-doc-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rls1.53-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rls1.53-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rls1.53-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rls1.53-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rust1.53-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rust1.53-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rust1.53-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rust1.53-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rust1.53-analysis-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rust1.53-analysis-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rust1.53-analysis-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rust1.53-analysis-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rust1.53-doc-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rust1.53-doc-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rust1.53-doc-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rust1.53-doc-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rust1.53-gdb-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rust1.53-gdb-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rust1.53-gdb-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rust1.53-gdb-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rust1.53-src-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rust1.53-src-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rust1.53-src-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rust1.53-src-1.53.0-2.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:cargo1.53-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:cargo1.53-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:cargo1.53-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:cargo1.53-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:cargo1.53-doc-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:cargo1.53-doc-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:cargo1.53-doc-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:cargo1.53-doc-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rls1.53-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rls1.53-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rls1.53-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rls1.53-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rust1.53-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rust1.53-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rust1.53-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rust1.53-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rust1.53-analysis-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rust1.53-analysis-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rust1.53-analysis-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rust1.53-analysis-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rust1.53-doc-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rust1.53-doc-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rust1.53-doc-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rust1.53-doc-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rust1.53-gdb-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rust1.53-gdb-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rust1.53-gdb-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rust1.53-gdb-1.53.0-2.5.x86_64",
"openSUSE Tumbleweed:rust1.53-src-1.53.0-2.5.aarch64",
"openSUSE Tumbleweed:rust1.53-src-1.53.0-2.5.ppc64le",
"openSUSE Tumbleweed:rust1.53-src-1.53.0-2.5.s390x",
"openSUSE Tumbleweed:rust1.53-src-1.53.0-2.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-1967"
}
]
}
OPENSUSE-SU-2019:2294-1
Vulnerability from csaf_opensuse - Published: 2019-10-08 12:19 - Updated: 2019-10-08 12:19Summary
Security update for rust
Notes
Title of the patch
Security update for rust
Description of the patch
This update for rust fixes the following issues:
Rust was updated to version 1.36.0.
Security issues fixed:
- CVE-2019-12083: a standard method can be overridden violating Rust's safety guarantees and causing memory unsafety (bsc#1134978)
- CVE-2018-1000622: rustdoc loads plugins from world writable directory allowing for arbitrary code execution (bsc#1100691)
This update was imported from the SUSE:SLE-15:Update update project.
Patchnames
openSUSE-2019-2294
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for rust",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for rust fixes the following issues:\n\nRust was updated to version 1.36.0.\n\nSecurity issues fixed:\n\n- CVE-2019-12083: a standard method can be overridden violating Rust\u0027s safety guarantees and causing memory unsafety (bsc#1134978)\n- CVE-2018-1000622: rustdoc loads plugins from world writable directory allowing for arbitrary code execution (bsc#1100691)\n\n\nThis update was imported from the SUSE:SLE-15:Update update project.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-2019-2294",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2019_2294-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2019:2294-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/THHMWZRJWFDVITSZZRA3U6YLX2IZ53LA/#THHMWZRJWFDVITSZZRA3U6YLX2IZ53LA"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2019:2294-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/THHMWZRJWFDVITSZZRA3U6YLX2IZ53LA/#THHMWZRJWFDVITSZZRA3U6YLX2IZ53LA"
},
{
"category": "self",
"summary": "SUSE Bug 1096945",
"url": "https://bugzilla.suse.com/1096945"
},
{
"category": "self",
"summary": "SUSE Bug 1100691",
"url": "https://bugzilla.suse.com/1100691"
},
{
"category": "self",
"summary": "SUSE Bug 1133283",
"url": "https://bugzilla.suse.com/1133283"
},
{
"category": "self",
"summary": "SUSE Bug 1134978",
"url": "https://bugzilla.suse.com/1134978"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1000622 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1000622/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-12083 page",
"url": "https://www.suse.com/security/cve/CVE-2019-12083/"
}
],
"title": "Security update for rust",
"tracking": {
"current_release_date": "2019-10-08T12:19:04Z",
"generator": {
"date": "2019-10-08T12:19:04Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2019:2294-1",
"initial_release_date": "2019-10-08T12:19:04Z",
"revision_history": [
{
"date": "2019-10-08T12:19:04Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "cargo-1.36.0-lp151.5.8.1.i586",
"product": {
"name": "cargo-1.36.0-lp151.5.8.1.i586",
"product_id": "cargo-1.36.0-lp151.5.8.1.i586"
}
},
{
"category": "product_version",
"name": "clippy-1.36.0-lp151.5.8.1.i586",
"product": {
"name": "clippy-1.36.0-lp151.5.8.1.i586",
"product_id": "clippy-1.36.0-lp151.5.8.1.i586"
}
},
{
"category": "product_version",
"name": "rls-1.36.0-lp151.5.8.1.i586",
"product": {
"name": "rls-1.36.0-lp151.5.8.1.i586",
"product_id": "rls-1.36.0-lp151.5.8.1.i586"
}
},
{
"category": "product_version",
"name": "rust-1.36.0-lp151.5.8.1.i586",
"product": {
"name": "rust-1.36.0-lp151.5.8.1.i586",
"product_id": "rust-1.36.0-lp151.5.8.1.i586"
}
},
{
"category": "product_version",
"name": "rust-analysis-1.36.0-lp151.5.8.1.i586",
"product": {
"name": "rust-analysis-1.36.0-lp151.5.8.1.i586",
"product_id": "rust-analysis-1.36.0-lp151.5.8.1.i586"
}
},
{
"category": "product_version",
"name": "rust-doc-1.36.0-lp151.5.8.1.i586",
"product": {
"name": "rust-doc-1.36.0-lp151.5.8.1.i586",
"product_id": "rust-doc-1.36.0-lp151.5.8.1.i586"
}
},
{
"category": "product_version",
"name": "rust-gdb-1.36.0-lp151.5.8.1.i586",
"product": {
"name": "rust-gdb-1.36.0-lp151.5.8.1.i586",
"product_id": "rust-gdb-1.36.0-lp151.5.8.1.i586"
}
},
{
"category": "product_version",
"name": "rust-std-static-1.36.0-lp151.5.8.1.i586",
"product": {
"name": "rust-std-static-1.36.0-lp151.5.8.1.i586",
"product_id": "rust-std-static-1.36.0-lp151.5.8.1.i586"
}
},
{
"category": "product_version",
"name": "rustfmt-1.36.0-lp151.5.8.1.i586",
"product": {
"name": "rustfmt-1.36.0-lp151.5.8.1.i586",
"product_id": "rustfmt-1.36.0-lp151.5.8.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "cargo-doc-1.36.0-lp151.5.8.1.noarch",
"product": {
"name": "cargo-doc-1.36.0-lp151.5.8.1.noarch",
"product_id": "cargo-doc-1.36.0-lp151.5.8.1.noarch"
}
},
{
"category": "product_version",
"name": "rust-src-1.36.0-lp151.5.8.1.noarch",
"product": {
"name": "rust-src-1.36.0-lp151.5.8.1.noarch",
"product_id": "rust-src-1.36.0-lp151.5.8.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "cargo-1.36.0-lp151.5.8.1.x86_64",
"product": {
"name": "cargo-1.36.0-lp151.5.8.1.x86_64",
"product_id": "cargo-1.36.0-lp151.5.8.1.x86_64"
}
},
{
"category": "product_version",
"name": "clippy-1.36.0-lp151.5.8.1.x86_64",
"product": {
"name": "clippy-1.36.0-lp151.5.8.1.x86_64",
"product_id": "clippy-1.36.0-lp151.5.8.1.x86_64"
}
},
{
"category": "product_version",
"name": "rls-1.36.0-lp151.5.8.1.x86_64",
"product": {
"name": "rls-1.36.0-lp151.5.8.1.x86_64",
"product_id": "rls-1.36.0-lp151.5.8.1.x86_64"
}
},
{
"category": "product_version",
"name": "rust-1.36.0-lp151.5.8.1.x86_64",
"product": {
"name": "rust-1.36.0-lp151.5.8.1.x86_64",
"product_id": "rust-1.36.0-lp151.5.8.1.x86_64"
}
},
{
"category": "product_version",
"name": "rust-analysis-1.36.0-lp151.5.8.1.x86_64",
"product": {
"name": "rust-analysis-1.36.0-lp151.5.8.1.x86_64",
"product_id": "rust-analysis-1.36.0-lp151.5.8.1.x86_64"
}
},
{
"category": "product_version",
"name": "rust-cbindgen-0.8.7-lp151.5.2.x86_64",
"product": {
"name": "rust-cbindgen-0.8.7-lp151.5.2.x86_64",
"product_id": "rust-cbindgen-0.8.7-lp151.5.2.x86_64"
}
},
{
"category": "product_version",
"name": "rust-doc-1.36.0-lp151.5.8.1.x86_64",
"product": {
"name": "rust-doc-1.36.0-lp151.5.8.1.x86_64",
"product_id": "rust-doc-1.36.0-lp151.5.8.1.x86_64"
}
},
{
"category": "product_version",
"name": "rust-gdb-1.36.0-lp151.5.8.1.x86_64",
"product": {
"name": "rust-gdb-1.36.0-lp151.5.8.1.x86_64",
"product_id": "rust-gdb-1.36.0-lp151.5.8.1.x86_64"
}
},
{
"category": "product_version",
"name": "rust-std-static-1.36.0-lp151.5.8.1.x86_64",
"product": {
"name": "rust-std-static-1.36.0-lp151.5.8.1.x86_64",
"product_id": "rust-std-static-1.36.0-lp151.5.8.1.x86_64"
}
},
{
"category": "product_version",
"name": "rustfmt-1.36.0-lp151.5.8.1.x86_64",
"product": {
"name": "rustfmt-1.36.0-lp151.5.8.1.x86_64",
"product_id": "rustfmt-1.36.0-lp151.5.8.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 15.1",
"product": {
"name": "openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "cargo-1.36.0-lp151.5.8.1.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:cargo-1.36.0-lp151.5.8.1.i586"
},
"product_reference": "cargo-1.36.0-lp151.5.8.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cargo-1.36.0-lp151.5.8.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:cargo-1.36.0-lp151.5.8.1.x86_64"
},
"product_reference": "cargo-1.36.0-lp151.5.8.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cargo-doc-1.36.0-lp151.5.8.1.noarch as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:cargo-doc-1.36.0-lp151.5.8.1.noarch"
},
"product_reference": "cargo-doc-1.36.0-lp151.5.8.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clippy-1.36.0-lp151.5.8.1.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:clippy-1.36.0-lp151.5.8.1.i586"
},
"product_reference": "clippy-1.36.0-lp151.5.8.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clippy-1.36.0-lp151.5.8.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:clippy-1.36.0-lp151.5.8.1.x86_64"
},
"product_reference": "clippy-1.36.0-lp151.5.8.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rls-1.36.0-lp151.5.8.1.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:rls-1.36.0-lp151.5.8.1.i586"
},
"product_reference": "rls-1.36.0-lp151.5.8.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rls-1.36.0-lp151.5.8.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:rls-1.36.0-lp151.5.8.1.x86_64"
},
"product_reference": "rls-1.36.0-lp151.5.8.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-1.36.0-lp151.5.8.1.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:rust-1.36.0-lp151.5.8.1.i586"
},
"product_reference": "rust-1.36.0-lp151.5.8.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-1.36.0-lp151.5.8.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:rust-1.36.0-lp151.5.8.1.x86_64"
},
"product_reference": "rust-1.36.0-lp151.5.8.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-analysis-1.36.0-lp151.5.8.1.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:rust-analysis-1.36.0-lp151.5.8.1.i586"
},
"product_reference": "rust-analysis-1.36.0-lp151.5.8.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-analysis-1.36.0-lp151.5.8.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:rust-analysis-1.36.0-lp151.5.8.1.x86_64"
},
"product_reference": "rust-analysis-1.36.0-lp151.5.8.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-cbindgen-0.8.7-lp151.5.2.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:rust-cbindgen-0.8.7-lp151.5.2.x86_64"
},
"product_reference": "rust-cbindgen-0.8.7-lp151.5.2.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-doc-1.36.0-lp151.5.8.1.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:rust-doc-1.36.0-lp151.5.8.1.i586"
},
"product_reference": "rust-doc-1.36.0-lp151.5.8.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-doc-1.36.0-lp151.5.8.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:rust-doc-1.36.0-lp151.5.8.1.x86_64"
},
"product_reference": "rust-doc-1.36.0-lp151.5.8.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-gdb-1.36.0-lp151.5.8.1.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:rust-gdb-1.36.0-lp151.5.8.1.i586"
},
"product_reference": "rust-gdb-1.36.0-lp151.5.8.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-gdb-1.36.0-lp151.5.8.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:rust-gdb-1.36.0-lp151.5.8.1.x86_64"
},
"product_reference": "rust-gdb-1.36.0-lp151.5.8.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-src-1.36.0-lp151.5.8.1.noarch as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:rust-src-1.36.0-lp151.5.8.1.noarch"
},
"product_reference": "rust-src-1.36.0-lp151.5.8.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-1.36.0-lp151.5.8.1.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:rust-std-static-1.36.0-lp151.5.8.1.i586"
},
"product_reference": "rust-std-static-1.36.0-lp151.5.8.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-1.36.0-lp151.5.8.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:rust-std-static-1.36.0-lp151.5.8.1.x86_64"
},
"product_reference": "rust-std-static-1.36.0-lp151.5.8.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rustfmt-1.36.0-lp151.5.8.1.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:rustfmt-1.36.0-lp151.5.8.1.i586"
},
"product_reference": "rustfmt-1.36.0-lp151.5.8.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rustfmt-1.36.0-lp151.5.8.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:rustfmt-1.36.0-lp151.5.8.1.x86_64"
},
"product_reference": "rustfmt-1.36.0-lp151.5.8.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-1000622",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1000622"
}
],
"notes": [
{
"category": "general",
"text": "The Rust Programming Language rustdoc version Between 0.8 and 1.27.0 contains a CWE-427: Uncontrolled Search Path Element vulnerability in rustdoc plugins that can result in local code execution as a different user. This attack appear to be exploitable via using the --plugin flag without the --plugin-path flag. This vulnerability appears to have been fixed in 1.27.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.1:cargo-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:cargo-1.36.0-lp151.5.8.1.x86_64",
"openSUSE Leap 15.1:cargo-doc-1.36.0-lp151.5.8.1.noarch",
"openSUSE Leap 15.1:clippy-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:clippy-1.36.0-lp151.5.8.1.x86_64",
"openSUSE Leap 15.1:rls-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:rls-1.36.0-lp151.5.8.1.x86_64",
"openSUSE Leap 15.1:rust-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:rust-1.36.0-lp151.5.8.1.x86_64",
"openSUSE Leap 15.1:rust-analysis-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:rust-analysis-1.36.0-lp151.5.8.1.x86_64",
"openSUSE Leap 15.1:rust-cbindgen-0.8.7-lp151.5.2.x86_64",
"openSUSE Leap 15.1:rust-doc-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:rust-doc-1.36.0-lp151.5.8.1.x86_64",
"openSUSE Leap 15.1:rust-gdb-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:rust-gdb-1.36.0-lp151.5.8.1.x86_64",
"openSUSE Leap 15.1:rust-src-1.36.0-lp151.5.8.1.noarch",
"openSUSE Leap 15.1:rust-std-static-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:rust-std-static-1.36.0-lp151.5.8.1.x86_64",
"openSUSE Leap 15.1:rustfmt-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:rustfmt-1.36.0-lp151.5.8.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1000622",
"url": "https://www.suse.com/security/cve/CVE-2018-1000622"
},
{
"category": "external",
"summary": "SUSE Bug 1100691 for CVE-2018-1000622",
"url": "https://bugzilla.suse.com/1100691"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.1:cargo-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:cargo-1.36.0-lp151.5.8.1.x86_64",
"openSUSE Leap 15.1:cargo-doc-1.36.0-lp151.5.8.1.noarch",
"openSUSE Leap 15.1:clippy-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:clippy-1.36.0-lp151.5.8.1.x86_64",
"openSUSE Leap 15.1:rls-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:rls-1.36.0-lp151.5.8.1.x86_64",
"openSUSE Leap 15.1:rust-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:rust-1.36.0-lp151.5.8.1.x86_64",
"openSUSE Leap 15.1:rust-analysis-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:rust-analysis-1.36.0-lp151.5.8.1.x86_64",
"openSUSE Leap 15.1:rust-cbindgen-0.8.7-lp151.5.2.x86_64",
"openSUSE Leap 15.1:rust-doc-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:rust-doc-1.36.0-lp151.5.8.1.x86_64",
"openSUSE Leap 15.1:rust-gdb-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:rust-gdb-1.36.0-lp151.5.8.1.x86_64",
"openSUSE Leap 15.1:rust-src-1.36.0-lp151.5.8.1.noarch",
"openSUSE Leap 15.1:rust-std-static-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:rust-std-static-1.36.0-lp151.5.8.1.x86_64",
"openSUSE Leap 15.1:rustfmt-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:rustfmt-1.36.0-lp151.5.8.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"openSUSE Leap 15.1:cargo-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:cargo-1.36.0-lp151.5.8.1.x86_64",
"openSUSE Leap 15.1:cargo-doc-1.36.0-lp151.5.8.1.noarch",
"openSUSE Leap 15.1:clippy-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:clippy-1.36.0-lp151.5.8.1.x86_64",
"openSUSE Leap 15.1:rls-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:rls-1.36.0-lp151.5.8.1.x86_64",
"openSUSE Leap 15.1:rust-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:rust-1.36.0-lp151.5.8.1.x86_64",
"openSUSE Leap 15.1:rust-analysis-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:rust-analysis-1.36.0-lp151.5.8.1.x86_64",
"openSUSE Leap 15.1:rust-cbindgen-0.8.7-lp151.5.2.x86_64",
"openSUSE Leap 15.1:rust-doc-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:rust-doc-1.36.0-lp151.5.8.1.x86_64",
"openSUSE Leap 15.1:rust-gdb-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:rust-gdb-1.36.0-lp151.5.8.1.x86_64",
"openSUSE Leap 15.1:rust-src-1.36.0-lp151.5.8.1.noarch",
"openSUSE Leap 15.1:rust-std-static-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:rust-std-static-1.36.0-lp151.5.8.1.x86_64",
"openSUSE Leap 15.1:rustfmt-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:rustfmt-1.36.0-lp151.5.8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-10-08T12:19:04Z",
"details": "moderate"
}
],
"title": "CVE-2018-1000622"
},
{
"cve": "CVE-2019-12083",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-12083"
}
],
"notes": [
{
"category": "general",
"text": "The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method which, if overridden, can violate Rust\u0027s safety guarantees and cause memory unsafety. If the `Error::type_id` method is overridden then any type can be safely cast to any other type, causing memory safety vulnerabilities in safe code (e.g., out-of-bounds write or read). Code that does not manually implement Error::type_id is unaffected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.1:cargo-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:cargo-1.36.0-lp151.5.8.1.x86_64",
"openSUSE Leap 15.1:cargo-doc-1.36.0-lp151.5.8.1.noarch",
"openSUSE Leap 15.1:clippy-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:clippy-1.36.0-lp151.5.8.1.x86_64",
"openSUSE Leap 15.1:rls-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:rls-1.36.0-lp151.5.8.1.x86_64",
"openSUSE Leap 15.1:rust-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:rust-1.36.0-lp151.5.8.1.x86_64",
"openSUSE Leap 15.1:rust-analysis-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:rust-analysis-1.36.0-lp151.5.8.1.x86_64",
"openSUSE Leap 15.1:rust-cbindgen-0.8.7-lp151.5.2.x86_64",
"openSUSE Leap 15.1:rust-doc-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:rust-doc-1.36.0-lp151.5.8.1.x86_64",
"openSUSE Leap 15.1:rust-gdb-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:rust-gdb-1.36.0-lp151.5.8.1.x86_64",
"openSUSE Leap 15.1:rust-src-1.36.0-lp151.5.8.1.noarch",
"openSUSE Leap 15.1:rust-std-static-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:rust-std-static-1.36.0-lp151.5.8.1.x86_64",
"openSUSE Leap 15.1:rustfmt-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:rustfmt-1.36.0-lp151.5.8.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-12083",
"url": "https://www.suse.com/security/cve/CVE-2019-12083"
},
{
"category": "external",
"summary": "SUSE Bug 1134978 for CVE-2019-12083",
"url": "https://bugzilla.suse.com/1134978"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.1:cargo-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:cargo-1.36.0-lp151.5.8.1.x86_64",
"openSUSE Leap 15.1:cargo-doc-1.36.0-lp151.5.8.1.noarch",
"openSUSE Leap 15.1:clippy-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:clippy-1.36.0-lp151.5.8.1.x86_64",
"openSUSE Leap 15.1:rls-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:rls-1.36.0-lp151.5.8.1.x86_64",
"openSUSE Leap 15.1:rust-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:rust-1.36.0-lp151.5.8.1.x86_64",
"openSUSE Leap 15.1:rust-analysis-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:rust-analysis-1.36.0-lp151.5.8.1.x86_64",
"openSUSE Leap 15.1:rust-cbindgen-0.8.7-lp151.5.2.x86_64",
"openSUSE Leap 15.1:rust-doc-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:rust-doc-1.36.0-lp151.5.8.1.x86_64",
"openSUSE Leap 15.1:rust-gdb-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:rust-gdb-1.36.0-lp151.5.8.1.x86_64",
"openSUSE Leap 15.1:rust-src-1.36.0-lp151.5.8.1.noarch",
"openSUSE Leap 15.1:rust-std-static-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:rust-std-static-1.36.0-lp151.5.8.1.x86_64",
"openSUSE Leap 15.1:rustfmt-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:rustfmt-1.36.0-lp151.5.8.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.1:cargo-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:cargo-1.36.0-lp151.5.8.1.x86_64",
"openSUSE Leap 15.1:cargo-doc-1.36.0-lp151.5.8.1.noarch",
"openSUSE Leap 15.1:clippy-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:clippy-1.36.0-lp151.5.8.1.x86_64",
"openSUSE Leap 15.1:rls-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:rls-1.36.0-lp151.5.8.1.x86_64",
"openSUSE Leap 15.1:rust-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:rust-1.36.0-lp151.5.8.1.x86_64",
"openSUSE Leap 15.1:rust-analysis-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:rust-analysis-1.36.0-lp151.5.8.1.x86_64",
"openSUSE Leap 15.1:rust-cbindgen-0.8.7-lp151.5.2.x86_64",
"openSUSE Leap 15.1:rust-doc-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:rust-doc-1.36.0-lp151.5.8.1.x86_64",
"openSUSE Leap 15.1:rust-gdb-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:rust-gdb-1.36.0-lp151.5.8.1.x86_64",
"openSUSE Leap 15.1:rust-src-1.36.0-lp151.5.8.1.noarch",
"openSUSE Leap 15.1:rust-std-static-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:rust-std-static-1.36.0-lp151.5.8.1.x86_64",
"openSUSE Leap 15.1:rustfmt-1.36.0-lp151.5.8.1.i586",
"openSUSE Leap 15.1:rustfmt-1.36.0-lp151.5.8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-10-08T12:19:04Z",
"details": "important"
}
],
"title": "CVE-2019-12083"
}
]
}
GHSA-VC89-VPX6-FMPM
Vulnerability from github – Published: 2022-05-24 16:45 – Updated: 2023-03-03 21:30
VLAI?
Details
The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method which, if overridden, can violate Rust's safety guarantees and cause memory unsafety. If the Error::type_id method is overridden then any type can be safely cast to any other type, causing memory safety vulnerabilities in safe code (e.g., out-of-bounds write or read). Code that does not manually implement Error::type_id is unaffected.
Severity ?
8.1 (High)
{
"affected": [],
"aliases": [
"CVE-2019-12083"
],
"database_specific": {
"cwe_ids": [
"CWE-125"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2019-05-13T20:29:00Z",
"severity": "HIGH"
},
"details": "The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method which, if overridden, can violate Rust\u0027s safety guarantees and cause memory unsafety. If the `Error::type_id` method is overridden then any type can be safely cast to any other type, causing memory safety vulnerabilities in safe code (e.g., out-of-bounds write or read). Code that does not manually implement Error::type_id is unaffected.",
"id": "GHSA-vc89-vpx6-fmpm",
"modified": "2023-03-03T21:30:18Z",
"published": "2022-05-24T16:45:33Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-12083"
},
{
"type": "WEB",
"url": "https://blog.rust-lang.org/2019/05/13/Security-advisory.html"
},
{
"type": "WEB",
"url": "https://groups.google.com/forum/#!topic/rustlang-security-announcements/aZabeCMUv70"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HG47HYH3AQTUMBUMX3S3G5DNAY4CBW6N"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/K6T4BNA5KQYJRIKIGGBOGBMR7TRXPHLR"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00076.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00006.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00031.html"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
]
}
GSD-2019-12083
Vulnerability from gsd - Updated: 2023-12-13 01:23Details
The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method which, if overridden, can violate Rust's safety guarantees and cause memory unsafety. If the `Error::type_id` method is overridden then any type can be safely cast to any other type, causing memory safety vulnerabilities in safe code (e.g., out-of-bounds write or read). Code that does not manually implement Error::type_id is unaffected.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2019-12083",
"description": "The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method which, if overridden, can violate Rust\u0027s safety guarantees and cause memory unsafety. If the `Error::type_id` method is overridden then any type can be safely cast to any other type, causing memory safety vulnerabilities in safe code (e.g., out-of-bounds write or read). Code that does not manually implement Error::type_id is unaffected.",
"id": "GSD-2019-12083",
"references": [
"https://www.suse.com/security/cve/CVE-2019-12083.html"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2019-12083"
],
"details": "The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method which, if overridden, can violate Rust\u0027s safety guarantees and cause memory unsafety. If the `Error::type_id` method is overridden then any type can be safely cast to any other type, causing memory safety vulnerabilities in safe code (e.g., out-of-bounds write or read). Code that does not manually implement Error::type_id is unaffected.",
"id": "GSD-2019-12083",
"modified": "2023-12-13T01:23:43.850272Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2019-12083",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method which, if overridden, can violate Rust\u0027s safety guarantees and cause memory unsafety. If the `Error::type_id` method is overridden then any type can be safely cast to any other type, causing memory safety vulnerabilities in safe code (e.g., out-of-bounds write or read). Code that does not manually implement Error::type_id is unaffected."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://groups.google.com/forum/#!topic/rustlang-security-announcements/aZabeCMUv70",
"refsource": "MISC",
"url": "https://groups.google.com/forum/#!topic/rustlang-security-announcements/aZabeCMUv70"
},
{
"name": "https://blog.rust-lang.org/2019/05/13/Security-advisory.html",
"refsource": "MISC",
"url": "https://blog.rust-lang.org/2019/05/13/Security-advisory.html"
},
{
"name": "FEDORA-2019-e39d4910c6",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/K6T4BNA5KQYJRIKIGGBOGBMR7TRXPHLR/"
},
{
"name": "FEDORA-2019-f76f0e11b3",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HG47HYH3AQTUMBUMX3S3G5DNAY4CBW6N/"
},
{
"name": "openSUSE-SU-2019:2203",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00076.html"
},
{
"name": "openSUSE-SU-2019:2244",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00006.html"
},
{
"name": "openSUSE-SU-2019:2294",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00031.html"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:rust-lang:rust:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.34.2",
"versionStartIncluding": "1.34.0",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2019-12083"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method which, if overridden, can violate Rust\u0027s safety guarantees and cause memory unsafety. If the `Error::type_id` method is overridden then any type can be safely cast to any other type, causing memory safety vulnerabilities in safe code (e.g., out-of-bounds write or read). Code that does not manually implement Error::type_id is unaffected."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-125"
},
{
"lang": "en",
"value": "CWE-787"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://groups.google.com/forum/#!topic/rustlang-security-announcements/aZabeCMUv70",
"refsource": "MISC",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://groups.google.com/forum/#!topic/rustlang-security-announcements/aZabeCMUv70"
},
{
"name": "https://blog.rust-lang.org/2019/05/13/Security-advisory.html",
"refsource": "MISC",
"tags": [
"Exploit",
"Mitigation",
"Vendor Advisory"
],
"url": "https://blog.rust-lang.org/2019/05/13/Security-advisory.html"
},
{
"name": "FEDORA-2019-e39d4910c6",
"refsource": "FEDORA",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/K6T4BNA5KQYJRIKIGGBOGBMR7TRXPHLR/"
},
{
"name": "FEDORA-2019-f76f0e11b3",
"refsource": "FEDORA",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HG47HYH3AQTUMBUMX3S3G5DNAY4CBW6N/"
},
{
"name": "openSUSE-SU-2019:2203",
"refsource": "SUSE",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00076.html"
},
{
"name": "openSUSE-SU-2019:2244",
"refsource": "SUSE",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00006.html"
},
{
"name": "openSUSE-SU-2019:2294",
"refsource": "SUSE",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00031.html"
}
]
}
},
"impact": {
"baseMetricV2": {
"acInsufInfo": false,
"cvssV2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"userInteractionRequired": false
},
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 2.2,
"impactScore": 5.9
}
},
"lastModifiedDate": "2023-03-03T20:55Z",
"publishedDate": "2019-05-13T20:29Z"
}
}
}
SUSE-SU-2019:2439-1
Vulnerability from csaf_suse - Published: 2019-09-23 15:14 - Updated: 2019-09-23 15:14Summary
Security update for rust
Notes
Title of the patch
Security update for rust
Description of the patch
This update for rust fixes the following issues:
Rust was updated to version 1.36.0.
Security issues fixed:
- CVE-2019-12083: a standard method can be overridden violating Rust's safety guarantees and causing memory unsafety (bsc#1134978)
- CVE-2018-1000622: rustdoc loads plugins from world writable directory allowing for arbitrary code execution (bsc#1100691)
Patchnames
SUSE-2019-2439,SUSE-SLE-Module-Development-Tools-15-2019-2439,SUSE-SLE-Module-Development-Tools-OBS-15-2019-2439
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for rust",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for rust fixes the following issues:\n\nRust was updated to version 1.36.0.\n\nSecurity issues fixed:\n\n- CVE-2019-12083: a standard method can be overridden violating Rust\u0027s safety guarantees and causing memory unsafety (bsc#1134978)\n- CVE-2018-1000622: rustdoc loads plugins from world writable directory allowing for arbitrary code execution (bsc#1100691)\n\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2019-2439,SUSE-SLE-Module-Development-Tools-15-2019-2439,SUSE-SLE-Module-Development-Tools-OBS-15-2019-2439",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_2439-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2019:2439-1",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-20192439-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2019:2439-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2019-September/005956.html"
},
{
"category": "self",
"summary": "SUSE Bug 1096945",
"url": "https://bugzilla.suse.com/1096945"
},
{
"category": "self",
"summary": "SUSE Bug 1100691",
"url": "https://bugzilla.suse.com/1100691"
},
{
"category": "self",
"summary": "SUSE Bug 1133283",
"url": "https://bugzilla.suse.com/1133283"
},
{
"category": "self",
"summary": "SUSE Bug 1134978",
"url": "https://bugzilla.suse.com/1134978"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1000622 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1000622/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-12083 page",
"url": "https://www.suse.com/security/cve/CVE-2019-12083/"
}
],
"title": "Security update for rust",
"tracking": {
"current_release_date": "2019-09-23T15:14:47Z",
"generator": {
"date": "2019-09-23T15:14:47Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2019:2439-1",
"initial_release_date": "2019-09-23T15:14:47Z",
"revision_history": [
{
"date": "2019-09-23T15:14:47Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "cargo-1.36.0-3.21.1.aarch64",
"product": {
"name": "cargo-1.36.0-3.21.1.aarch64",
"product_id": "cargo-1.36.0-3.21.1.aarch64"
}
},
{
"category": "product_version",
"name": "clippy-1.36.0-3.21.1.aarch64",
"product": {
"name": "clippy-1.36.0-3.21.1.aarch64",
"product_id": "clippy-1.36.0-3.21.1.aarch64"
}
},
{
"category": "product_version",
"name": "rls-1.36.0-3.21.1.aarch64",
"product": {
"name": "rls-1.36.0-3.21.1.aarch64",
"product_id": "rls-1.36.0-3.21.1.aarch64"
}
},
{
"category": "product_version",
"name": "rust-1.36.0-3.21.1.aarch64",
"product": {
"name": "rust-1.36.0-3.21.1.aarch64",
"product_id": "rust-1.36.0-3.21.1.aarch64"
}
},
{
"category": "product_version",
"name": "rust-analysis-1.36.0-3.21.1.aarch64",
"product": {
"name": "rust-analysis-1.36.0-3.21.1.aarch64",
"product_id": "rust-analysis-1.36.0-3.21.1.aarch64"
}
},
{
"category": "product_version",
"name": "rust-cbindgen-0.8.7-1.3.6.aarch64",
"product": {
"name": "rust-cbindgen-0.8.7-1.3.6.aarch64",
"product_id": "rust-cbindgen-0.8.7-1.3.6.aarch64"
}
},
{
"category": "product_version",
"name": "rust-doc-1.36.0-3.21.1.aarch64",
"product": {
"name": "rust-doc-1.36.0-3.21.1.aarch64",
"product_id": "rust-doc-1.36.0-3.21.1.aarch64"
}
},
{
"category": "product_version",
"name": "rust-gdb-1.36.0-3.21.1.aarch64",
"product": {
"name": "rust-gdb-1.36.0-3.21.1.aarch64",
"product_id": "rust-gdb-1.36.0-3.21.1.aarch64"
}
},
{
"category": "product_version",
"name": "rust-std-static-1.36.0-3.21.1.aarch64",
"product": {
"name": "rust-std-static-1.36.0-3.21.1.aarch64",
"product_id": "rust-std-static-1.36.0-3.21.1.aarch64"
}
},
{
"category": "product_version",
"name": "rustfmt-1.36.0-3.21.1.aarch64",
"product": {
"name": "rustfmt-1.36.0-3.21.1.aarch64",
"product_id": "rustfmt-1.36.0-3.21.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "rust-cbindgen-0.8.7-1.3.6.i586",
"product": {
"name": "rust-cbindgen-0.8.7-1.3.6.i586",
"product_id": "rust-cbindgen-0.8.7-1.3.6.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "cargo-doc-1.36.0-3.21.1.noarch",
"product": {
"name": "cargo-doc-1.36.0-3.21.1.noarch",
"product_id": "cargo-doc-1.36.0-3.21.1.noarch"
}
},
{
"category": "product_version",
"name": "rust-src-1.36.0-3.21.1.noarch",
"product": {
"name": "rust-src-1.36.0-3.21.1.noarch",
"product_id": "rust-src-1.36.0-3.21.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "cargo-1.36.0-3.21.1.ppc64le",
"product": {
"name": "cargo-1.36.0-3.21.1.ppc64le",
"product_id": "cargo-1.36.0-3.21.1.ppc64le"
}
},
{
"category": "product_version",
"name": "clippy-1.36.0-3.21.1.ppc64le",
"product": {
"name": "clippy-1.36.0-3.21.1.ppc64le",
"product_id": "clippy-1.36.0-3.21.1.ppc64le"
}
},
{
"category": "product_version",
"name": "rls-1.36.0-3.21.1.ppc64le",
"product": {
"name": "rls-1.36.0-3.21.1.ppc64le",
"product_id": "rls-1.36.0-3.21.1.ppc64le"
}
},
{
"category": "product_version",
"name": "rust-1.36.0-3.21.1.ppc64le",
"product": {
"name": "rust-1.36.0-3.21.1.ppc64le",
"product_id": "rust-1.36.0-3.21.1.ppc64le"
}
},
{
"category": "product_version",
"name": "rust-analysis-1.36.0-3.21.1.ppc64le",
"product": {
"name": "rust-analysis-1.36.0-3.21.1.ppc64le",
"product_id": "rust-analysis-1.36.0-3.21.1.ppc64le"
}
},
{
"category": "product_version",
"name": "rust-cbindgen-0.8.7-1.3.6.ppc64le",
"product": {
"name": "rust-cbindgen-0.8.7-1.3.6.ppc64le",
"product_id": "rust-cbindgen-0.8.7-1.3.6.ppc64le"
}
},
{
"category": "product_version",
"name": "rust-doc-1.36.0-3.21.1.ppc64le",
"product": {
"name": "rust-doc-1.36.0-3.21.1.ppc64le",
"product_id": "rust-doc-1.36.0-3.21.1.ppc64le"
}
},
{
"category": "product_version",
"name": "rust-gdb-1.36.0-3.21.1.ppc64le",
"product": {
"name": "rust-gdb-1.36.0-3.21.1.ppc64le",
"product_id": "rust-gdb-1.36.0-3.21.1.ppc64le"
}
},
{
"category": "product_version",
"name": "rust-std-static-1.36.0-3.21.1.ppc64le",
"product": {
"name": "rust-std-static-1.36.0-3.21.1.ppc64le",
"product_id": "rust-std-static-1.36.0-3.21.1.ppc64le"
}
},
{
"category": "product_version",
"name": "rustfmt-1.36.0-3.21.1.ppc64le",
"product": {
"name": "rustfmt-1.36.0-3.21.1.ppc64le",
"product_id": "rustfmt-1.36.0-3.21.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "cargo-1.36.0-3.21.1.s390x",
"product": {
"name": "cargo-1.36.0-3.21.1.s390x",
"product_id": "cargo-1.36.0-3.21.1.s390x"
}
},
{
"category": "product_version",
"name": "clippy-1.36.0-3.21.1.s390x",
"product": {
"name": "clippy-1.36.0-3.21.1.s390x",
"product_id": "clippy-1.36.0-3.21.1.s390x"
}
},
{
"category": "product_version",
"name": "rls-1.36.0-3.21.1.s390x",
"product": {
"name": "rls-1.36.0-3.21.1.s390x",
"product_id": "rls-1.36.0-3.21.1.s390x"
}
},
{
"category": "product_version",
"name": "rust-1.36.0-3.21.1.s390x",
"product": {
"name": "rust-1.36.0-3.21.1.s390x",
"product_id": "rust-1.36.0-3.21.1.s390x"
}
},
{
"category": "product_version",
"name": "rust-analysis-1.36.0-3.21.1.s390x",
"product": {
"name": "rust-analysis-1.36.0-3.21.1.s390x",
"product_id": "rust-analysis-1.36.0-3.21.1.s390x"
}
},
{
"category": "product_version",
"name": "rust-cbindgen-0.8.7-1.3.6.s390x",
"product": {
"name": "rust-cbindgen-0.8.7-1.3.6.s390x",
"product_id": "rust-cbindgen-0.8.7-1.3.6.s390x"
}
},
{
"category": "product_version",
"name": "rust-doc-1.36.0-3.21.1.s390x",
"product": {
"name": "rust-doc-1.36.0-3.21.1.s390x",
"product_id": "rust-doc-1.36.0-3.21.1.s390x"
}
},
{
"category": "product_version",
"name": "rust-gdb-1.36.0-3.21.1.s390x",
"product": {
"name": "rust-gdb-1.36.0-3.21.1.s390x",
"product_id": "rust-gdb-1.36.0-3.21.1.s390x"
}
},
{
"category": "product_version",
"name": "rust-std-static-1.36.0-3.21.1.s390x",
"product": {
"name": "rust-std-static-1.36.0-3.21.1.s390x",
"product_id": "rust-std-static-1.36.0-3.21.1.s390x"
}
},
{
"category": "product_version",
"name": "rustfmt-1.36.0-3.21.1.s390x",
"product": {
"name": "rustfmt-1.36.0-3.21.1.s390x",
"product_id": "rustfmt-1.36.0-3.21.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "cargo-1.36.0-3.21.1.x86_64",
"product": {
"name": "cargo-1.36.0-3.21.1.x86_64",
"product_id": "cargo-1.36.0-3.21.1.x86_64"
}
},
{
"category": "product_version",
"name": "clippy-1.36.0-3.21.1.x86_64",
"product": {
"name": "clippy-1.36.0-3.21.1.x86_64",
"product_id": "clippy-1.36.0-3.21.1.x86_64"
}
},
{
"category": "product_version",
"name": "rls-1.36.0-3.21.1.x86_64",
"product": {
"name": "rls-1.36.0-3.21.1.x86_64",
"product_id": "rls-1.36.0-3.21.1.x86_64"
}
},
{
"category": "product_version",
"name": "rust-1.36.0-3.21.1.x86_64",
"product": {
"name": "rust-1.36.0-3.21.1.x86_64",
"product_id": "rust-1.36.0-3.21.1.x86_64"
}
},
{
"category": "product_version",
"name": "rust-analysis-1.36.0-3.21.1.x86_64",
"product": {
"name": "rust-analysis-1.36.0-3.21.1.x86_64",
"product_id": "rust-analysis-1.36.0-3.21.1.x86_64"
}
},
{
"category": "product_version",
"name": "rust-cbindgen-0.8.7-1.3.6.x86_64",
"product": {
"name": "rust-cbindgen-0.8.7-1.3.6.x86_64",
"product_id": "rust-cbindgen-0.8.7-1.3.6.x86_64"
}
},
{
"category": "product_version",
"name": "rust-doc-1.36.0-3.21.1.x86_64",
"product": {
"name": "rust-doc-1.36.0-3.21.1.x86_64",
"product_id": "rust-doc-1.36.0-3.21.1.x86_64"
}
},
{
"category": "product_version",
"name": "rust-gdb-1.36.0-3.21.1.x86_64",
"product": {
"name": "rust-gdb-1.36.0-3.21.1.x86_64",
"product_id": "rust-gdb-1.36.0-3.21.1.x86_64"
}
},
{
"category": "product_version",
"name": "rust-std-static-1.36.0-3.21.1.x86_64",
"product": {
"name": "rust-std-static-1.36.0-3.21.1.x86_64",
"product_id": "rust-std-static-1.36.0-3.21.1.x86_64"
}
},
{
"category": "product_version",
"name": "rustfmt-1.36.0-3.21.1.x86_64",
"product": {
"name": "rustfmt-1.36.0-3.21.1.x86_64",
"product_id": "rustfmt-1.36.0-3.21.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Development Tools 15",
"product": {
"name": "SUSE Linux Enterprise Module for Development Tools 15",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-development-tools:15"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "cargo-1.36.0-3.21.1.aarch64 as component of SUSE Linux Enterprise Module for Development Tools 15",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15:cargo-1.36.0-3.21.1.aarch64"
},
"product_reference": "cargo-1.36.0-3.21.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cargo-1.36.0-3.21.1.ppc64le as component of SUSE Linux Enterprise Module for Development Tools 15",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15:cargo-1.36.0-3.21.1.ppc64le"
},
"product_reference": "cargo-1.36.0-3.21.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cargo-1.36.0-3.21.1.s390x as component of SUSE Linux Enterprise Module for Development Tools 15",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15:cargo-1.36.0-3.21.1.s390x"
},
"product_reference": "cargo-1.36.0-3.21.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cargo-1.36.0-3.21.1.x86_64 as component of SUSE Linux Enterprise Module for Development Tools 15",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15:cargo-1.36.0-3.21.1.x86_64"
},
"product_reference": "cargo-1.36.0-3.21.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clippy-1.36.0-3.21.1.aarch64 as component of SUSE Linux Enterprise Module for Development Tools 15",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15:clippy-1.36.0-3.21.1.aarch64"
},
"product_reference": "clippy-1.36.0-3.21.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clippy-1.36.0-3.21.1.ppc64le as component of SUSE Linux Enterprise Module for Development Tools 15",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15:clippy-1.36.0-3.21.1.ppc64le"
},
"product_reference": "clippy-1.36.0-3.21.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clippy-1.36.0-3.21.1.s390x as component of SUSE Linux Enterprise Module for Development Tools 15",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15:clippy-1.36.0-3.21.1.s390x"
},
"product_reference": "clippy-1.36.0-3.21.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clippy-1.36.0-3.21.1.x86_64 as component of SUSE Linux Enterprise Module for Development Tools 15",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15:clippy-1.36.0-3.21.1.x86_64"
},
"product_reference": "clippy-1.36.0-3.21.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rls-1.36.0-3.21.1.aarch64 as component of SUSE Linux Enterprise Module for Development Tools 15",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15:rls-1.36.0-3.21.1.aarch64"
},
"product_reference": "rls-1.36.0-3.21.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rls-1.36.0-3.21.1.ppc64le as component of SUSE Linux Enterprise Module for Development Tools 15",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15:rls-1.36.0-3.21.1.ppc64le"
},
"product_reference": "rls-1.36.0-3.21.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rls-1.36.0-3.21.1.s390x as component of SUSE Linux Enterprise Module for Development Tools 15",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15:rls-1.36.0-3.21.1.s390x"
},
"product_reference": "rls-1.36.0-3.21.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rls-1.36.0-3.21.1.x86_64 as component of SUSE Linux Enterprise Module for Development Tools 15",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15:rls-1.36.0-3.21.1.x86_64"
},
"product_reference": "rls-1.36.0-3.21.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-1.36.0-3.21.1.aarch64 as component of SUSE Linux Enterprise Module for Development Tools 15",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15:rust-1.36.0-3.21.1.aarch64"
},
"product_reference": "rust-1.36.0-3.21.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-1.36.0-3.21.1.ppc64le as component of SUSE Linux Enterprise Module for Development Tools 15",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15:rust-1.36.0-3.21.1.ppc64le"
},
"product_reference": "rust-1.36.0-3.21.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-1.36.0-3.21.1.s390x as component of SUSE Linux Enterprise Module for Development Tools 15",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15:rust-1.36.0-3.21.1.s390x"
},
"product_reference": "rust-1.36.0-3.21.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-1.36.0-3.21.1.x86_64 as component of SUSE Linux Enterprise Module for Development Tools 15",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15:rust-1.36.0-3.21.1.x86_64"
},
"product_reference": "rust-1.36.0-3.21.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-analysis-1.36.0-3.21.1.aarch64 as component of SUSE Linux Enterprise Module for Development Tools 15",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15:rust-analysis-1.36.0-3.21.1.aarch64"
},
"product_reference": "rust-analysis-1.36.0-3.21.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-analysis-1.36.0-3.21.1.ppc64le as component of SUSE Linux Enterprise Module for Development Tools 15",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15:rust-analysis-1.36.0-3.21.1.ppc64le"
},
"product_reference": "rust-analysis-1.36.0-3.21.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-analysis-1.36.0-3.21.1.s390x as component of SUSE Linux Enterprise Module for Development Tools 15",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15:rust-analysis-1.36.0-3.21.1.s390x"
},
"product_reference": "rust-analysis-1.36.0-3.21.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-analysis-1.36.0-3.21.1.x86_64 as component of SUSE Linux Enterprise Module for Development Tools 15",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15:rust-analysis-1.36.0-3.21.1.x86_64"
},
"product_reference": "rust-analysis-1.36.0-3.21.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-gdb-1.36.0-3.21.1.aarch64 as component of SUSE Linux Enterprise Module for Development Tools 15",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15:rust-gdb-1.36.0-3.21.1.aarch64"
},
"product_reference": "rust-gdb-1.36.0-3.21.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-gdb-1.36.0-3.21.1.ppc64le as component of SUSE Linux Enterprise Module for Development Tools 15",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15:rust-gdb-1.36.0-3.21.1.ppc64le"
},
"product_reference": "rust-gdb-1.36.0-3.21.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-gdb-1.36.0-3.21.1.s390x as component of SUSE Linux Enterprise Module for Development Tools 15",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15:rust-gdb-1.36.0-3.21.1.s390x"
},
"product_reference": "rust-gdb-1.36.0-3.21.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-gdb-1.36.0-3.21.1.x86_64 as component of SUSE Linux Enterprise Module for Development Tools 15",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15:rust-gdb-1.36.0-3.21.1.x86_64"
},
"product_reference": "rust-gdb-1.36.0-3.21.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-src-1.36.0-3.21.1.noarch as component of SUSE Linux Enterprise Module for Development Tools 15",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15:rust-src-1.36.0-3.21.1.noarch"
},
"product_reference": "rust-src-1.36.0-3.21.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-1.36.0-3.21.1.aarch64 as component of SUSE Linux Enterprise Module for Development Tools 15",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15:rust-std-static-1.36.0-3.21.1.aarch64"
},
"product_reference": "rust-std-static-1.36.0-3.21.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-1.36.0-3.21.1.ppc64le as component of SUSE Linux Enterprise Module for Development Tools 15",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15:rust-std-static-1.36.0-3.21.1.ppc64le"
},
"product_reference": "rust-std-static-1.36.0-3.21.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-1.36.0-3.21.1.s390x as component of SUSE Linux Enterprise Module for Development Tools 15",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15:rust-std-static-1.36.0-3.21.1.s390x"
},
"product_reference": "rust-std-static-1.36.0-3.21.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-1.36.0-3.21.1.x86_64 as component of SUSE Linux Enterprise Module for Development Tools 15",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15:rust-std-static-1.36.0-3.21.1.x86_64"
},
"product_reference": "rust-std-static-1.36.0-3.21.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rustfmt-1.36.0-3.21.1.aarch64 as component of SUSE Linux Enterprise Module for Development Tools 15",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15:rustfmt-1.36.0-3.21.1.aarch64"
},
"product_reference": "rustfmt-1.36.0-3.21.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rustfmt-1.36.0-3.21.1.ppc64le as component of SUSE Linux Enterprise Module for Development Tools 15",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15:rustfmt-1.36.0-3.21.1.ppc64le"
},
"product_reference": "rustfmt-1.36.0-3.21.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rustfmt-1.36.0-3.21.1.s390x as component of SUSE Linux Enterprise Module for Development Tools 15",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15:rustfmt-1.36.0-3.21.1.s390x"
},
"product_reference": "rustfmt-1.36.0-3.21.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rustfmt-1.36.0-3.21.1.x86_64 as component of SUSE Linux Enterprise Module for Development Tools 15",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15:rustfmt-1.36.0-3.21.1.x86_64"
},
"product_reference": "rustfmt-1.36.0-3.21.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-1000622",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1000622"
}
],
"notes": [
{
"category": "general",
"text": "The Rust Programming Language rustdoc version Between 0.8 and 1.27.0 contains a CWE-427: Uncontrolled Search Path Element vulnerability in rustdoc plugins that can result in local code execution as a different user. This attack appear to be exploitable via using the --plugin flag without the --plugin-path flag. This vulnerability appears to have been fixed in 1.27.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Development Tools 15:cargo-1.36.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:cargo-1.36.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:cargo-1.36.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:cargo-1.36.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:clippy-1.36.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:clippy-1.36.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:clippy-1.36.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:clippy-1.36.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:rls-1.36.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:rls-1.36.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:rls-1.36.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:rls-1.36.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:rust-1.36.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:rust-1.36.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:rust-1.36.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:rust-1.36.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:rust-analysis-1.36.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:rust-analysis-1.36.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:rust-analysis-1.36.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:rust-analysis-1.36.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:rust-gdb-1.36.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:rust-gdb-1.36.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:rust-gdb-1.36.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:rust-gdb-1.36.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:rust-src-1.36.0-3.21.1.noarch",
"SUSE Linux Enterprise Module for Development Tools 15:rust-std-static-1.36.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:rust-std-static-1.36.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:rust-std-static-1.36.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:rust-std-static-1.36.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:rustfmt-1.36.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:rustfmt-1.36.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:rustfmt-1.36.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:rustfmt-1.36.0-3.21.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1000622",
"url": "https://www.suse.com/security/cve/CVE-2018-1000622"
},
{
"category": "external",
"summary": "SUSE Bug 1100691 for CVE-2018-1000622",
"url": "https://bugzilla.suse.com/1100691"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Development Tools 15:cargo-1.36.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:cargo-1.36.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:cargo-1.36.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:cargo-1.36.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:clippy-1.36.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:clippy-1.36.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:clippy-1.36.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:clippy-1.36.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:rls-1.36.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:rls-1.36.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:rls-1.36.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:rls-1.36.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:rust-1.36.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:rust-1.36.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:rust-1.36.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:rust-1.36.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:rust-analysis-1.36.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:rust-analysis-1.36.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:rust-analysis-1.36.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:rust-analysis-1.36.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:rust-gdb-1.36.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:rust-gdb-1.36.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:rust-gdb-1.36.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:rust-gdb-1.36.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:rust-src-1.36.0-3.21.1.noarch",
"SUSE Linux Enterprise Module for Development Tools 15:rust-std-static-1.36.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:rust-std-static-1.36.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:rust-std-static-1.36.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:rust-std-static-1.36.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:rustfmt-1.36.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:rustfmt-1.36.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:rustfmt-1.36.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:rustfmt-1.36.0-3.21.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Development Tools 15:cargo-1.36.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:cargo-1.36.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:cargo-1.36.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:cargo-1.36.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:clippy-1.36.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:clippy-1.36.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:clippy-1.36.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:clippy-1.36.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:rls-1.36.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:rls-1.36.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:rls-1.36.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:rls-1.36.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:rust-1.36.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:rust-1.36.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:rust-1.36.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:rust-1.36.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:rust-analysis-1.36.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:rust-analysis-1.36.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:rust-analysis-1.36.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:rust-analysis-1.36.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:rust-gdb-1.36.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:rust-gdb-1.36.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:rust-gdb-1.36.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:rust-gdb-1.36.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:rust-src-1.36.0-3.21.1.noarch",
"SUSE Linux Enterprise Module for Development Tools 15:rust-std-static-1.36.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:rust-std-static-1.36.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:rust-std-static-1.36.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:rust-std-static-1.36.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:rustfmt-1.36.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:rustfmt-1.36.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:rustfmt-1.36.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:rustfmt-1.36.0-3.21.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-23T15:14:47Z",
"details": "moderate"
}
],
"title": "CVE-2018-1000622"
},
{
"cve": "CVE-2019-12083",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-12083"
}
],
"notes": [
{
"category": "general",
"text": "The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method which, if overridden, can violate Rust\u0027s safety guarantees and cause memory unsafety. If the `Error::type_id` method is overridden then any type can be safely cast to any other type, causing memory safety vulnerabilities in safe code (e.g., out-of-bounds write or read). Code that does not manually implement Error::type_id is unaffected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Development Tools 15:cargo-1.36.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:cargo-1.36.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:cargo-1.36.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:cargo-1.36.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:clippy-1.36.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:clippy-1.36.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:clippy-1.36.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:clippy-1.36.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:rls-1.36.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:rls-1.36.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:rls-1.36.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:rls-1.36.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:rust-1.36.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:rust-1.36.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:rust-1.36.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:rust-1.36.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:rust-analysis-1.36.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:rust-analysis-1.36.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:rust-analysis-1.36.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:rust-analysis-1.36.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:rust-gdb-1.36.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:rust-gdb-1.36.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:rust-gdb-1.36.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:rust-gdb-1.36.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:rust-src-1.36.0-3.21.1.noarch",
"SUSE Linux Enterprise Module for Development Tools 15:rust-std-static-1.36.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:rust-std-static-1.36.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:rust-std-static-1.36.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:rust-std-static-1.36.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:rustfmt-1.36.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:rustfmt-1.36.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:rustfmt-1.36.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:rustfmt-1.36.0-3.21.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-12083",
"url": "https://www.suse.com/security/cve/CVE-2019-12083"
},
{
"category": "external",
"summary": "SUSE Bug 1134978 for CVE-2019-12083",
"url": "https://bugzilla.suse.com/1134978"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Development Tools 15:cargo-1.36.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:cargo-1.36.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:cargo-1.36.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:cargo-1.36.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:clippy-1.36.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:clippy-1.36.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:clippy-1.36.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:clippy-1.36.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:rls-1.36.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:rls-1.36.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:rls-1.36.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:rls-1.36.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:rust-1.36.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:rust-1.36.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:rust-1.36.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:rust-1.36.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:rust-analysis-1.36.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:rust-analysis-1.36.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:rust-analysis-1.36.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:rust-analysis-1.36.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:rust-gdb-1.36.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:rust-gdb-1.36.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:rust-gdb-1.36.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:rust-gdb-1.36.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:rust-src-1.36.0-3.21.1.noarch",
"SUSE Linux Enterprise Module for Development Tools 15:rust-std-static-1.36.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:rust-std-static-1.36.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:rust-std-static-1.36.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:rust-std-static-1.36.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:rustfmt-1.36.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:rustfmt-1.36.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:rustfmt-1.36.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:rustfmt-1.36.0-3.21.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Development Tools 15:cargo-1.36.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:cargo-1.36.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:cargo-1.36.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:cargo-1.36.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:clippy-1.36.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:clippy-1.36.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:clippy-1.36.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:clippy-1.36.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:rls-1.36.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:rls-1.36.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:rls-1.36.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:rls-1.36.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:rust-1.36.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:rust-1.36.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:rust-1.36.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:rust-1.36.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:rust-analysis-1.36.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:rust-analysis-1.36.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:rust-analysis-1.36.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:rust-analysis-1.36.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:rust-gdb-1.36.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:rust-gdb-1.36.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:rust-gdb-1.36.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:rust-gdb-1.36.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:rust-src-1.36.0-3.21.1.noarch",
"SUSE Linux Enterprise Module for Development Tools 15:rust-std-static-1.36.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:rust-std-static-1.36.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:rust-std-static-1.36.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:rust-std-static-1.36.0-3.21.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:rustfmt-1.36.0-3.21.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:rustfmt-1.36.0-3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:rustfmt-1.36.0-3.21.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:rustfmt-1.36.0-3.21.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-23T15:14:47Z",
"details": "important"
}
],
"title": "CVE-2019-12083"
}
]
}
SUSE-SU-2019:2755-1
Vulnerability from csaf_suse - Published: 2019-10-23 13:24 - Updated: 2019-10-23 13:24Summary
Security update for rust
Notes
Title of the patch
Security update for rust
Description of the patch
This update for rust fixes the following issues:
Rust was updated to version 1.36.0.
Security issues fixed:
- CVE-2019-12083: a standard method can be overridden violating Rust's safety guarantees and causing memory unsafety (bsc#1134978)
- CVE-2018-1000622: rustdoc loads plugins from world writable directory allowing for arbitrary code execution (bsc#1100691)
Patchnames
SUSE-2019-2755,SUSE-SLE-Module-Development-Tools-15-SP1-2019-2755,SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2019-2755
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for rust",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for rust fixes the following issues:\n\nRust was updated to version 1.36.0.\n\nSecurity issues fixed:\n\n- CVE-2019-12083: a standard method can be overridden violating Rust\u0027s safety guarantees and causing memory unsafety (bsc#1134978)\n- CVE-2018-1000622: rustdoc loads plugins from world writable directory allowing for arbitrary code execution (bsc#1100691)\n\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2019-2755,SUSE-SLE-Module-Development-Tools-15-SP1-2019-2755,SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2019-2755",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_2755-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2019:2755-1",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-20192755-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2019:2755-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2019-October/006048.html"
},
{
"category": "self",
"summary": "SUSE Bug 1096945",
"url": "https://bugzilla.suse.com/1096945"
},
{
"category": "self",
"summary": "SUSE Bug 1100691",
"url": "https://bugzilla.suse.com/1100691"
},
{
"category": "self",
"summary": "SUSE Bug 1133283",
"url": "https://bugzilla.suse.com/1133283"
},
{
"category": "self",
"summary": "SUSE Bug 1134978",
"url": "https://bugzilla.suse.com/1134978"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1000622 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1000622/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-12083 page",
"url": "https://www.suse.com/security/cve/CVE-2019-12083/"
}
],
"title": "Security update for rust",
"tracking": {
"current_release_date": "2019-10-23T13:24:35Z",
"generator": {
"date": "2019-10-23T13:24:35Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2019:2755-1",
"initial_release_date": "2019-10-23T13:24:35Z",
"revision_history": [
{
"date": "2019-10-23T13:24:35Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "cargo-1.36.0-4.1.aarch64",
"product": {
"name": "cargo-1.36.0-4.1.aarch64",
"product_id": "cargo-1.36.0-4.1.aarch64"
}
},
{
"category": "product_version",
"name": "clippy-1.36.0-4.1.aarch64",
"product": {
"name": "clippy-1.36.0-4.1.aarch64",
"product_id": "clippy-1.36.0-4.1.aarch64"
}
},
{
"category": "product_version",
"name": "rls-1.36.0-4.1.aarch64",
"product": {
"name": "rls-1.36.0-4.1.aarch64",
"product_id": "rls-1.36.0-4.1.aarch64"
}
},
{
"category": "product_version",
"name": "rust-1.36.0-4.1.aarch64",
"product": {
"name": "rust-1.36.0-4.1.aarch64",
"product_id": "rust-1.36.0-4.1.aarch64"
}
},
{
"category": "product_version",
"name": "rust-analysis-1.36.0-4.1.aarch64",
"product": {
"name": "rust-analysis-1.36.0-4.1.aarch64",
"product_id": "rust-analysis-1.36.0-4.1.aarch64"
}
},
{
"category": "product_version",
"name": "rust-doc-1.36.0-4.1.aarch64",
"product": {
"name": "rust-doc-1.36.0-4.1.aarch64",
"product_id": "rust-doc-1.36.0-4.1.aarch64"
}
},
{
"category": "product_version",
"name": "rust-gdb-1.36.0-4.1.aarch64",
"product": {
"name": "rust-gdb-1.36.0-4.1.aarch64",
"product_id": "rust-gdb-1.36.0-4.1.aarch64"
}
},
{
"category": "product_version",
"name": "rust-std-static-1.36.0-4.1.aarch64",
"product": {
"name": "rust-std-static-1.36.0-4.1.aarch64",
"product_id": "rust-std-static-1.36.0-4.1.aarch64"
}
},
{
"category": "product_version",
"name": "rustfmt-1.36.0-4.1.aarch64",
"product": {
"name": "rustfmt-1.36.0-4.1.aarch64",
"product_id": "rustfmt-1.36.0-4.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "cargo-1.36.0-4.1.i586",
"product": {
"name": "cargo-1.36.0-4.1.i586",
"product_id": "cargo-1.36.0-4.1.i586"
}
},
{
"category": "product_version",
"name": "clippy-1.36.0-4.1.i586",
"product": {
"name": "clippy-1.36.0-4.1.i586",
"product_id": "clippy-1.36.0-4.1.i586"
}
},
{
"category": "product_version",
"name": "rls-1.36.0-4.1.i586",
"product": {
"name": "rls-1.36.0-4.1.i586",
"product_id": "rls-1.36.0-4.1.i586"
}
},
{
"category": "product_version",
"name": "rust-1.36.0-4.1.i586",
"product": {
"name": "rust-1.36.0-4.1.i586",
"product_id": "rust-1.36.0-4.1.i586"
}
},
{
"category": "product_version",
"name": "rust-analysis-1.36.0-4.1.i586",
"product": {
"name": "rust-analysis-1.36.0-4.1.i586",
"product_id": "rust-analysis-1.36.0-4.1.i586"
}
},
{
"category": "product_version",
"name": "rust-doc-1.36.0-4.1.i586",
"product": {
"name": "rust-doc-1.36.0-4.1.i586",
"product_id": "rust-doc-1.36.0-4.1.i586"
}
},
{
"category": "product_version",
"name": "rust-gdb-1.36.0-4.1.i586",
"product": {
"name": "rust-gdb-1.36.0-4.1.i586",
"product_id": "rust-gdb-1.36.0-4.1.i586"
}
},
{
"category": "product_version",
"name": "rust-std-static-1.36.0-4.1.i586",
"product": {
"name": "rust-std-static-1.36.0-4.1.i586",
"product_id": "rust-std-static-1.36.0-4.1.i586"
}
},
{
"category": "product_version",
"name": "rustfmt-1.36.0-4.1.i586",
"product": {
"name": "rustfmt-1.36.0-4.1.i586",
"product_id": "rustfmt-1.36.0-4.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "cargo-doc-1.36.0-4.1.noarch",
"product": {
"name": "cargo-doc-1.36.0-4.1.noarch",
"product_id": "cargo-doc-1.36.0-4.1.noarch"
}
},
{
"category": "product_version",
"name": "rust-src-1.36.0-4.1.noarch",
"product": {
"name": "rust-src-1.36.0-4.1.noarch",
"product_id": "rust-src-1.36.0-4.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "cargo-1.36.0-4.1.ppc64le",
"product": {
"name": "cargo-1.36.0-4.1.ppc64le",
"product_id": "cargo-1.36.0-4.1.ppc64le"
}
},
{
"category": "product_version",
"name": "clippy-1.36.0-4.1.ppc64le",
"product": {
"name": "clippy-1.36.0-4.1.ppc64le",
"product_id": "clippy-1.36.0-4.1.ppc64le"
}
},
{
"category": "product_version",
"name": "rls-1.36.0-4.1.ppc64le",
"product": {
"name": "rls-1.36.0-4.1.ppc64le",
"product_id": "rls-1.36.0-4.1.ppc64le"
}
},
{
"category": "product_version",
"name": "rust-1.36.0-4.1.ppc64le",
"product": {
"name": "rust-1.36.0-4.1.ppc64le",
"product_id": "rust-1.36.0-4.1.ppc64le"
}
},
{
"category": "product_version",
"name": "rust-analysis-1.36.0-4.1.ppc64le",
"product": {
"name": "rust-analysis-1.36.0-4.1.ppc64le",
"product_id": "rust-analysis-1.36.0-4.1.ppc64le"
}
},
{
"category": "product_version",
"name": "rust-doc-1.36.0-4.1.ppc64le",
"product": {
"name": "rust-doc-1.36.0-4.1.ppc64le",
"product_id": "rust-doc-1.36.0-4.1.ppc64le"
}
},
{
"category": "product_version",
"name": "rust-gdb-1.36.0-4.1.ppc64le",
"product": {
"name": "rust-gdb-1.36.0-4.1.ppc64le",
"product_id": "rust-gdb-1.36.0-4.1.ppc64le"
}
},
{
"category": "product_version",
"name": "rust-std-static-1.36.0-4.1.ppc64le",
"product": {
"name": "rust-std-static-1.36.0-4.1.ppc64le",
"product_id": "rust-std-static-1.36.0-4.1.ppc64le"
}
},
{
"category": "product_version",
"name": "rustfmt-1.36.0-4.1.ppc64le",
"product": {
"name": "rustfmt-1.36.0-4.1.ppc64le",
"product_id": "rustfmt-1.36.0-4.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "cargo-1.36.0-4.1.s390x",
"product": {
"name": "cargo-1.36.0-4.1.s390x",
"product_id": "cargo-1.36.0-4.1.s390x"
}
},
{
"category": "product_version",
"name": "clippy-1.36.0-4.1.s390x",
"product": {
"name": "clippy-1.36.0-4.1.s390x",
"product_id": "clippy-1.36.0-4.1.s390x"
}
},
{
"category": "product_version",
"name": "rls-1.36.0-4.1.s390x",
"product": {
"name": "rls-1.36.0-4.1.s390x",
"product_id": "rls-1.36.0-4.1.s390x"
}
},
{
"category": "product_version",
"name": "rust-1.36.0-4.1.s390x",
"product": {
"name": "rust-1.36.0-4.1.s390x",
"product_id": "rust-1.36.0-4.1.s390x"
}
},
{
"category": "product_version",
"name": "rust-analysis-1.36.0-4.1.s390x",
"product": {
"name": "rust-analysis-1.36.0-4.1.s390x",
"product_id": "rust-analysis-1.36.0-4.1.s390x"
}
},
{
"category": "product_version",
"name": "rust-doc-1.36.0-4.1.s390x",
"product": {
"name": "rust-doc-1.36.0-4.1.s390x",
"product_id": "rust-doc-1.36.0-4.1.s390x"
}
},
{
"category": "product_version",
"name": "rust-gdb-1.36.0-4.1.s390x",
"product": {
"name": "rust-gdb-1.36.0-4.1.s390x",
"product_id": "rust-gdb-1.36.0-4.1.s390x"
}
},
{
"category": "product_version",
"name": "rust-std-static-1.36.0-4.1.s390x",
"product": {
"name": "rust-std-static-1.36.0-4.1.s390x",
"product_id": "rust-std-static-1.36.0-4.1.s390x"
}
},
{
"category": "product_version",
"name": "rustfmt-1.36.0-4.1.s390x",
"product": {
"name": "rustfmt-1.36.0-4.1.s390x",
"product_id": "rustfmt-1.36.0-4.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "cargo-1.36.0-4.1.x86_64",
"product": {
"name": "cargo-1.36.0-4.1.x86_64",
"product_id": "cargo-1.36.0-4.1.x86_64"
}
},
{
"category": "product_version",
"name": "clippy-1.36.0-4.1.x86_64",
"product": {
"name": "clippy-1.36.0-4.1.x86_64",
"product_id": "clippy-1.36.0-4.1.x86_64"
}
},
{
"category": "product_version",
"name": "rls-1.36.0-4.1.x86_64",
"product": {
"name": "rls-1.36.0-4.1.x86_64",
"product_id": "rls-1.36.0-4.1.x86_64"
}
},
{
"category": "product_version",
"name": "rust-1.36.0-4.1.x86_64",
"product": {
"name": "rust-1.36.0-4.1.x86_64",
"product_id": "rust-1.36.0-4.1.x86_64"
}
},
{
"category": "product_version",
"name": "rust-analysis-1.36.0-4.1.x86_64",
"product": {
"name": "rust-analysis-1.36.0-4.1.x86_64",
"product_id": "rust-analysis-1.36.0-4.1.x86_64"
}
},
{
"category": "product_version",
"name": "rust-doc-1.36.0-4.1.x86_64",
"product": {
"name": "rust-doc-1.36.0-4.1.x86_64",
"product_id": "rust-doc-1.36.0-4.1.x86_64"
}
},
{
"category": "product_version",
"name": "rust-gdb-1.36.0-4.1.x86_64",
"product": {
"name": "rust-gdb-1.36.0-4.1.x86_64",
"product_id": "rust-gdb-1.36.0-4.1.x86_64"
}
},
{
"category": "product_version",
"name": "rust-std-static-1.36.0-4.1.x86_64",
"product": {
"name": "rust-std-static-1.36.0-4.1.x86_64",
"product_id": "rust-std-static-1.36.0-4.1.x86_64"
}
},
{
"category": "product_version",
"name": "rustfmt-1.36.0-4.1.x86_64",
"product": {
"name": "rustfmt-1.36.0-4.1.x86_64",
"product_id": "rustfmt-1.36.0-4.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Development Tools 15 SP1",
"product": {
"name": "SUSE Linux Enterprise Module for Development Tools 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-development-tools:15:sp1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "cargo-1.36.0-4.1.aarch64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP1:cargo-1.36.0-4.1.aarch64"
},
"product_reference": "cargo-1.36.0-4.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cargo-1.36.0-4.1.ppc64le as component of SUSE Linux Enterprise Module for Development Tools 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP1:cargo-1.36.0-4.1.ppc64le"
},
"product_reference": "cargo-1.36.0-4.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cargo-1.36.0-4.1.s390x as component of SUSE Linux Enterprise Module for Development Tools 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP1:cargo-1.36.0-4.1.s390x"
},
"product_reference": "cargo-1.36.0-4.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cargo-1.36.0-4.1.x86_64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP1:cargo-1.36.0-4.1.x86_64"
},
"product_reference": "cargo-1.36.0-4.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clippy-1.36.0-4.1.aarch64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP1:clippy-1.36.0-4.1.aarch64"
},
"product_reference": "clippy-1.36.0-4.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clippy-1.36.0-4.1.ppc64le as component of SUSE Linux Enterprise Module for Development Tools 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP1:clippy-1.36.0-4.1.ppc64le"
},
"product_reference": "clippy-1.36.0-4.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clippy-1.36.0-4.1.s390x as component of SUSE Linux Enterprise Module for Development Tools 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP1:clippy-1.36.0-4.1.s390x"
},
"product_reference": "clippy-1.36.0-4.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clippy-1.36.0-4.1.x86_64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP1:clippy-1.36.0-4.1.x86_64"
},
"product_reference": "clippy-1.36.0-4.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rls-1.36.0-4.1.aarch64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP1:rls-1.36.0-4.1.aarch64"
},
"product_reference": "rls-1.36.0-4.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rls-1.36.0-4.1.ppc64le as component of SUSE Linux Enterprise Module for Development Tools 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP1:rls-1.36.0-4.1.ppc64le"
},
"product_reference": "rls-1.36.0-4.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rls-1.36.0-4.1.s390x as component of SUSE Linux Enterprise Module for Development Tools 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP1:rls-1.36.0-4.1.s390x"
},
"product_reference": "rls-1.36.0-4.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rls-1.36.0-4.1.x86_64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP1:rls-1.36.0-4.1.x86_64"
},
"product_reference": "rls-1.36.0-4.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-1.36.0-4.1.aarch64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-1.36.0-4.1.aarch64"
},
"product_reference": "rust-1.36.0-4.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-1.36.0-4.1.ppc64le as component of SUSE Linux Enterprise Module for Development Tools 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-1.36.0-4.1.ppc64le"
},
"product_reference": "rust-1.36.0-4.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-1.36.0-4.1.s390x as component of SUSE Linux Enterprise Module for Development Tools 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-1.36.0-4.1.s390x"
},
"product_reference": "rust-1.36.0-4.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-1.36.0-4.1.x86_64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-1.36.0-4.1.x86_64"
},
"product_reference": "rust-1.36.0-4.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-analysis-1.36.0-4.1.aarch64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-analysis-1.36.0-4.1.aarch64"
},
"product_reference": "rust-analysis-1.36.0-4.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-analysis-1.36.0-4.1.ppc64le as component of SUSE Linux Enterprise Module for Development Tools 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-analysis-1.36.0-4.1.ppc64le"
},
"product_reference": "rust-analysis-1.36.0-4.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-analysis-1.36.0-4.1.s390x as component of SUSE Linux Enterprise Module for Development Tools 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-analysis-1.36.0-4.1.s390x"
},
"product_reference": "rust-analysis-1.36.0-4.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-analysis-1.36.0-4.1.x86_64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-analysis-1.36.0-4.1.x86_64"
},
"product_reference": "rust-analysis-1.36.0-4.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-src-1.36.0-4.1.noarch as component of SUSE Linux Enterprise Module for Development Tools 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-src-1.36.0-4.1.noarch"
},
"product_reference": "rust-src-1.36.0-4.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-1.36.0-4.1.aarch64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-std-static-1.36.0-4.1.aarch64"
},
"product_reference": "rust-std-static-1.36.0-4.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-1.36.0-4.1.ppc64le as component of SUSE Linux Enterprise Module for Development Tools 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-std-static-1.36.0-4.1.ppc64le"
},
"product_reference": "rust-std-static-1.36.0-4.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-1.36.0-4.1.s390x as component of SUSE Linux Enterprise Module for Development Tools 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-std-static-1.36.0-4.1.s390x"
},
"product_reference": "rust-std-static-1.36.0-4.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-1.36.0-4.1.x86_64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-std-static-1.36.0-4.1.x86_64"
},
"product_reference": "rust-std-static-1.36.0-4.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rustfmt-1.36.0-4.1.aarch64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP1:rustfmt-1.36.0-4.1.aarch64"
},
"product_reference": "rustfmt-1.36.0-4.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rustfmt-1.36.0-4.1.ppc64le as component of SUSE Linux Enterprise Module for Development Tools 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP1:rustfmt-1.36.0-4.1.ppc64le"
},
"product_reference": "rustfmt-1.36.0-4.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rustfmt-1.36.0-4.1.s390x as component of SUSE Linux Enterprise Module for Development Tools 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP1:rustfmt-1.36.0-4.1.s390x"
},
"product_reference": "rustfmt-1.36.0-4.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rustfmt-1.36.0-4.1.x86_64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP1:rustfmt-1.36.0-4.1.x86_64"
},
"product_reference": "rustfmt-1.36.0-4.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-1000622",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1000622"
}
],
"notes": [
{
"category": "general",
"text": "The Rust Programming Language rustdoc version Between 0.8 and 1.27.0 contains a CWE-427: Uncontrolled Search Path Element vulnerability in rustdoc plugins that can result in local code execution as a different user. This attack appear to be exploitable via using the --plugin flag without the --plugin-path flag. This vulnerability appears to have been fixed in 1.27.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Development Tools 15 SP1:cargo-1.36.0-4.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:cargo-1.36.0-4.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:cargo-1.36.0-4.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:cargo-1.36.0-4.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:clippy-1.36.0-4.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:clippy-1.36.0-4.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:clippy-1.36.0-4.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:clippy-1.36.0-4.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rls-1.36.0-4.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rls-1.36.0-4.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rls-1.36.0-4.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rls-1.36.0-4.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-1.36.0-4.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-1.36.0-4.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-1.36.0-4.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-1.36.0-4.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-analysis-1.36.0-4.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-analysis-1.36.0-4.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-analysis-1.36.0-4.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-analysis-1.36.0-4.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-src-1.36.0-4.1.noarch",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-std-static-1.36.0-4.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-std-static-1.36.0-4.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-std-static-1.36.0-4.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-std-static-1.36.0-4.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rustfmt-1.36.0-4.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rustfmt-1.36.0-4.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rustfmt-1.36.0-4.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rustfmt-1.36.0-4.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1000622",
"url": "https://www.suse.com/security/cve/CVE-2018-1000622"
},
{
"category": "external",
"summary": "SUSE Bug 1100691 for CVE-2018-1000622",
"url": "https://bugzilla.suse.com/1100691"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Development Tools 15 SP1:cargo-1.36.0-4.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:cargo-1.36.0-4.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:cargo-1.36.0-4.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:cargo-1.36.0-4.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:clippy-1.36.0-4.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:clippy-1.36.0-4.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:clippy-1.36.0-4.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:clippy-1.36.0-4.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rls-1.36.0-4.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rls-1.36.0-4.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rls-1.36.0-4.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rls-1.36.0-4.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-1.36.0-4.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-1.36.0-4.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-1.36.0-4.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-1.36.0-4.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-analysis-1.36.0-4.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-analysis-1.36.0-4.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-analysis-1.36.0-4.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-analysis-1.36.0-4.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-src-1.36.0-4.1.noarch",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-std-static-1.36.0-4.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-std-static-1.36.0-4.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-std-static-1.36.0-4.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-std-static-1.36.0-4.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rustfmt-1.36.0-4.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rustfmt-1.36.0-4.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rustfmt-1.36.0-4.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rustfmt-1.36.0-4.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Development Tools 15 SP1:cargo-1.36.0-4.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:cargo-1.36.0-4.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:cargo-1.36.0-4.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:cargo-1.36.0-4.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:clippy-1.36.0-4.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:clippy-1.36.0-4.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:clippy-1.36.0-4.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:clippy-1.36.0-4.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rls-1.36.0-4.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rls-1.36.0-4.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rls-1.36.0-4.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rls-1.36.0-4.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-1.36.0-4.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-1.36.0-4.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-1.36.0-4.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-1.36.0-4.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-analysis-1.36.0-4.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-analysis-1.36.0-4.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-analysis-1.36.0-4.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-analysis-1.36.0-4.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-src-1.36.0-4.1.noarch",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-std-static-1.36.0-4.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-std-static-1.36.0-4.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-std-static-1.36.0-4.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-std-static-1.36.0-4.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rustfmt-1.36.0-4.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rustfmt-1.36.0-4.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rustfmt-1.36.0-4.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rustfmt-1.36.0-4.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-10-23T13:24:35Z",
"details": "moderate"
}
],
"title": "CVE-2018-1000622"
},
{
"cve": "CVE-2019-12083",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-12083"
}
],
"notes": [
{
"category": "general",
"text": "The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method which, if overridden, can violate Rust\u0027s safety guarantees and cause memory unsafety. If the `Error::type_id` method is overridden then any type can be safely cast to any other type, causing memory safety vulnerabilities in safe code (e.g., out-of-bounds write or read). Code that does not manually implement Error::type_id is unaffected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Development Tools 15 SP1:cargo-1.36.0-4.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:cargo-1.36.0-4.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:cargo-1.36.0-4.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:cargo-1.36.0-4.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:clippy-1.36.0-4.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:clippy-1.36.0-4.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:clippy-1.36.0-4.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:clippy-1.36.0-4.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rls-1.36.0-4.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rls-1.36.0-4.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rls-1.36.0-4.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rls-1.36.0-4.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-1.36.0-4.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-1.36.0-4.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-1.36.0-4.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-1.36.0-4.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-analysis-1.36.0-4.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-analysis-1.36.0-4.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-analysis-1.36.0-4.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-analysis-1.36.0-4.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-src-1.36.0-4.1.noarch",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-std-static-1.36.0-4.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-std-static-1.36.0-4.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-std-static-1.36.0-4.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-std-static-1.36.0-4.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rustfmt-1.36.0-4.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rustfmt-1.36.0-4.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rustfmt-1.36.0-4.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rustfmt-1.36.0-4.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-12083",
"url": "https://www.suse.com/security/cve/CVE-2019-12083"
},
{
"category": "external",
"summary": "SUSE Bug 1134978 for CVE-2019-12083",
"url": "https://bugzilla.suse.com/1134978"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Development Tools 15 SP1:cargo-1.36.0-4.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:cargo-1.36.0-4.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:cargo-1.36.0-4.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:cargo-1.36.0-4.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:clippy-1.36.0-4.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:clippy-1.36.0-4.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:clippy-1.36.0-4.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:clippy-1.36.0-4.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rls-1.36.0-4.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rls-1.36.0-4.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rls-1.36.0-4.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rls-1.36.0-4.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-1.36.0-4.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-1.36.0-4.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-1.36.0-4.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-1.36.0-4.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-analysis-1.36.0-4.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-analysis-1.36.0-4.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-analysis-1.36.0-4.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-analysis-1.36.0-4.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-src-1.36.0-4.1.noarch",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-std-static-1.36.0-4.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-std-static-1.36.0-4.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-std-static-1.36.0-4.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-std-static-1.36.0-4.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rustfmt-1.36.0-4.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rustfmt-1.36.0-4.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rustfmt-1.36.0-4.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rustfmt-1.36.0-4.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Development Tools 15 SP1:cargo-1.36.0-4.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:cargo-1.36.0-4.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:cargo-1.36.0-4.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:cargo-1.36.0-4.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:clippy-1.36.0-4.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:clippy-1.36.0-4.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:clippy-1.36.0-4.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:clippy-1.36.0-4.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rls-1.36.0-4.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rls-1.36.0-4.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rls-1.36.0-4.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rls-1.36.0-4.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-1.36.0-4.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-1.36.0-4.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-1.36.0-4.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-1.36.0-4.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-analysis-1.36.0-4.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-analysis-1.36.0-4.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-analysis-1.36.0-4.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-analysis-1.36.0-4.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-src-1.36.0-4.1.noarch",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-std-static-1.36.0-4.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-std-static-1.36.0-4.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-std-static-1.36.0-4.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rust-std-static-1.36.0-4.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rustfmt-1.36.0-4.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rustfmt-1.36.0-4.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rustfmt-1.36.0-4.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:rustfmt-1.36.0-4.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-10-23T13:24:35Z",
"details": "important"
}
],
"title": "CVE-2019-12083"
}
]
}
FKIE_CVE-2019-12083
Vulnerability from fkie_nvd - Published: 2019-05-13 20:29 - Updated: 2024-11-21 04:22
Severity ?
Summary
The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method which, if overridden, can violate Rust's safety guarantees and cause memory unsafety. If the `Error::type_id` method is overridden then any type can be safely cast to any other type, causing memory safety vulnerabilities in safe code (e.g., out-of-bounds write or read). Code that does not manually implement Error::type_id is unaffected.
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| rust-lang | rust | * | |
| fedoraproject | fedora | 29 | |
| fedoraproject | fedora | 30 | |
| opensuse | leap | 15.1 |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:rust-lang:rust:*:*:*:*:*:*:*:*",
"matchCriteriaId": "7EE0C4CA-00FD-4A59-936E-88B6C2A415A2",
"versionEndExcluding": "1.34.2",
"versionStartIncluding": "1.34.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*",
"matchCriteriaId": "D100F7CE-FC64-4CC6-852A-6136D72DA419",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*",
"matchCriteriaId": "97A4B8DF-58DA-4AB6-A1F9-331B36409BA3",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",
"matchCriteriaId": "B620311B-34A3-48A6-82DF-6F078D7A4493",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method which, if overridden, can violate Rust\u0027s safety guarantees and cause memory unsafety. If the `Error::type_id` method is overridden then any type can be safely cast to any other type, causing memory safety vulnerabilities in safe code (e.g., out-of-bounds write or read). Code that does not manually implement Error::type_id is unaffected."
},
{
"lang": "es",
"value": "Rust Programming Language Standard Library, versiones 1.34.x anteriores a 1.34.2, contiene un m\u00e9todo estabilizado que, si se anula, puede ignorar las garant\u00edas de seguridad de Rust y causar inseguridades en la memoria. Si el m\u00e9todo `Error::type_id` es anulado, entonces cualquier tipo puede ser lanzado con seguridad a cualquier otro tipo, causando vulnerabilidades de seguridad de memoria en c\u00f3digo seguro (por ejemplo, escritura o lectura fuera de l\u00edmites). El c\u00f3digo que no implementa manualmente Error::type_id no se ve afectado."
}
],
"id": "CVE-2019-12083",
"lastModified": "2024-11-21T04:22:10.460",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 2.2,
"impactScore": 5.9,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2019-05-13T20:29:02.913",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00076.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00006.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00031.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Exploit",
"Mitigation",
"Vendor Advisory"
],
"url": "https://blog.rust-lang.org/2019/05/13/Security-advisory.html"
},
{
"source": "cve@mitre.org",
"url": "https://groups.google.com/forum/#%21topic/rustlang-security-announcements/aZabeCMUv70"
},
{
"source": "cve@mitre.org",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HG47HYH3AQTUMBUMX3S3G5DNAY4CBW6N/"
},
{
"source": "cve@mitre.org",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K6T4BNA5KQYJRIKIGGBOGBMR7TRXPHLR/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00076.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00006.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00031.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Mitigation",
"Vendor Advisory"
],
"url": "https://blog.rust-lang.org/2019/05/13/Security-advisory.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://groups.google.com/forum/#%21topic/rustlang-security-announcements/aZabeCMUv70"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HG47HYH3AQTUMBUMX3S3G5DNAY4CBW6N/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K6T4BNA5KQYJRIKIGGBOGBMR7TRXPHLR/"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-125"
},
{
"lang": "en",
"value": "CWE-787"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…