CVE-2020-35878
published 2020-12-31CVE-2020-35878: An issue was discovered in the ozone crate through 2020-07-04 for Rust. Memory safety is violated because of the dropping of uninitialized memory.
PriorityP335critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
1.52%
71.5th percentile
An issue was discovered in the ozone crate through 2020-07-04 for Rust. Memory safety is violated because of the dropping of uninitialized memory.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | ozone | 0 – 0.1.0 | — |
| apache | ozone | >= 0.0.0-0 | — |
| ozone_project | ozone | <= 0.1.0 | — |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
Out of bounds read in Ozone
osv·2021-08-25
CVE-2020-35877 [CRITICAL] Out of bounds read in Ozone
Out of bounds read in Ozone
An issue was discovered in the ozone crate through version 0.1.0 for Rust. Memory safety is violated because of out-of-bounds access.
OSV
Drop of uninitialized memory in Ozone
osv·2021-08-25
CVE-2020-35877 [CRITICAL] Drop of uninitialized memory in Ozone
Drop of uninitialized memory in Ozone
An issue was discovered in the ozone crate through version 0.1.0 for Rust. Memory safety is violated because of the dropping of uninitialized memory.
GHSA
Drop of uninitialized memory in Ozone
ghsa·2021-08-25
CVE-2020-35878 [CRITICAL] CWE-119 Drop of uninitialized memory in Ozone
Drop of uninitialized memory in Ozone
An issue was discovered in the ozone crate through version 0.1.0 for Rust. Memory safety is violated because of the dropping of uninitialized memory.
OSV
Ozone contains several memory safety issues
osv·2020-07-04
CVE-2020-35877 Ozone contains several memory safety issues
Ozone contains several memory safety issues
Ozone contains several memory safety issues including [out-of-bound access](https://github.com/bqv/ozone/blob/e21f948b0178ab305f644118f18d87a838c618e0/src/buffer.rs#L38-L48)
and dropping of [uninitialized memory](https://github.com/bqv/ozone/blob/e21f948b0178ab305f644118f18d87a838c618e0/src/map.rs#L94-L101).
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2020-12-31
Published