Description
An issue was discovered in the asn1_der crate before 0.6.2 for Rust. Attackers can trigger memory exhaustion by supplying a large value in a length field.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| crates.io | asn1_der | < 0.6.2 | 0.6.2 | GHSA-v5r6-6r3c-wqxc |
| crates.io | asn1_der | >= 0.0.0-0, < 0.6.2 | 0.6.2 | RUSTSEC-2019-0007 |