PYSEC-2019-144
Vulnerability from pysec - Published: 2019-08-26 18:15 - Updated: 2021-06-10 06:51
VLAI?
Details
An issue was discovered in the arrayfire crate before 3.6.0 for Rust. Addition of the repr() attribute to an enum is mishandled, leading to memory corruption.
Impacted products
| Name | purl | arrayfire | pkg:pypi/arrayfire |
|---|
Aliases
{
"affected": [
{
"package": {
"ecosystem": "PyPI",
"name": "arrayfire",
"purl": "pkg:pypi/arrayfire"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3.6.0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"3.0.20150914",
"3.1.20151111",
"3.2.20151211",
"3.2.20151214",
"3.2.20151224",
"3.2.20151224.post1",
"3.3.20160320",
"3.3.20160328",
"3.3.20160427",
"3.3.20160427.post1",
"3.3.20160510",
"3.3.20160516",
"3.3.20160624",
"3.3.20160624.post1",
"3.4.20160925",
"3.4.20161126",
"3.4.20170222",
"3.5.20170718",
"3.5.20170721",
"3.5.20170817"
]
}
],
"aliases": [
"CVE-2018-20998"
],
"details": "An issue was discovered in the arrayfire crate before 3.6.0 for Rust. Addition of the repr() attribute to an enum is mishandled, leading to memory corruption.",
"id": "PYSEC-2019-144",
"modified": "2021-06-10T06:51:33.535067Z",
"published": "2019-08-26T18:15:00Z",
"references": [
{
"type": "ADVISORY",
"url": "https://rustsec.org/advisories/RUSTSEC-2018-0011.html"
}
],
"withdrawn": "2022-09-09T05:28:00Z"
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…