CVE-2019-15544

HIGH7.5EPSS 2.7%

Out of Memory in stream::read_raw_bytes_into()

發布日:2021/8/25修改日:2023/11/8

描述

Affected versions of this crate called Vec::reserve() on user-supplied input. This allows an attacker to cause an Out of Memory condition while calling the vulnerable method on untrusted data.

受影響套件(2)

CVSS 分數

來源版本嚴重程度向量
osvCVSS 3.1HIGH7.5CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

參考連結(9)