Rust · Orion Crate · CVE-2018-20999
**Name of the Vulnerable Software and Affected Versions**
orion crate versions prior to 0.11.2
**Description**
An issue in the orion crate causes incorrect results when `reset()` is called without first finalizing the streaming state. This occurs because the state is not properly reset. The flaw was corrected by changing the behavior of the `reset()` call to not check if the state had already been reset.
**Recommendations**
For versions prior to 0.11.2, update to version 0.11.2 or later to resolve the issue. As a temporary workaround, consider avoiding the use of the `reset()` function without first finalizing the streaming state to minimize the risk of incorrect results.