Rust · Rust · CVE-2019-1010299
Name of the Vulnerable Software and Affected Versions:
The Rust Programming Language Standard Library versions 1.18.0 through 1.29.0
Description:
The issue concerns information exposure, where contents of uninitialized memory could be printed to a string or log file. This occurs in the Debug trait implementation for std::collections::vec deque::Iter. The attack vector involves invoking debug printing for an iterator over an empty VecDeque.
Recommendations:
For versions 1.18.0 through 1.29.0, update to version 1.30.0 or a nightly version after commit b85e4cc8fadaabd41da5b9645c08c68b8f89908d to resolve the issue.