Skip to content
OpenAdvisories
High · 7.5 CVE-2019-25054 EUVD-2022-0419GHSA-24g6-5rx7-58wjGHSA-r6ff-2q3c-v3pvRUSTSEC-2019-0037

Missing Initialization of Resource in pnet

Published Dec 26, 2021 · Updated Aug 5, 2024 · Assigned by mitre

Description

An issue was discovered in the pnet crate before 0.27.2 for Rust. There is a segmentation fault (upon attempted dereference of an uninitialized descriptor) because of an erroneous IcmpTransportChannelIterator compiler optimization.

Affected packages

EcosystemPackageAffectedFixedRecord
crates.io pnet < 0.27.2 0.27.2 GHSA-24g6-5rx7-58wj
crates.io pnet >= 0.0.0-0, < 0.27.2 0.27.2 RUSTSEC-2019-0037

References