GHSA-82HM-VH7G-HRH9中危已审查

Partial read is incorrect in molecule

OSV 1.4.0 · github-reviewed · 修改于 2021-09-10 01:55

发布时间

2021-08-26 05:01

GitHub 审查时间

2021-08-03 02:10

NVD 发布时间

—

源文件

advisories/github-reviewed/2021/08/GHSA-82hm-vh7g-hrh9/GHSA-82hm-vh7g-hrh9.json

公告说明

Impact

Anyone who uses total_size(..) function to partial read the length of any FixVec will get an incorrect result, due to an incorrect implementation. This has been resolved in the 0.7.2 release.

Workarounds

If you already have the whole FixVec A, you can use A.as_slice().len() to get the total size of the FixVec.

For more information

If you have any questions or comments about this advisory:

Open an issue to ask use directly.

受影响的软件包

crates.io

molecule

ECOSYSTEM

标识信息

别名 / CVE

无

CWE

无

软件生态

crates.io

扩展资料

暂无扩展资料。

CVSS 评分

没有 CVSS 数据。

原始 OSV JSON

{
  "id": "GHSA-82hm-vh7g-hrh9",
  "aliases": [],
  "details": "### Impact\n\nAnyone who uses `total_size(..)` function to partial read the length of any `FixVec` will get an incorrect result, due to an incorrect implementation. This has been resolved in the 0.7.2 release.\n\n### Workarounds\n\nIf you already have the whole `FixVec` `A`, you can use `A.as_slice().len()` to get the total size of the `FixVec`.\n\n### For more information\n\nIf you have any questions or comments about this advisory:\n\n- [Open an issue to ask use directly](https://github.com/nervosnetwork/molecule/issues/new).",
  "summary": "Partial read is incorrect in molecule",
  "affected": [
    {
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.7.2"
            }
          ]
        }
      ],
      "package": {
        "name": "molecule",
        "ecosystem": "crates.io"
      }
    }
  ],
  "modified": "2021-09-09T17:55:10Z",
  "severity": [],
  "published": "2021-08-25T21:01:25Z",
  "references": [
    {
      "url": "https://github.com/nervosnetwork/molecule/security/advisories/GHSA-82hm-vh7g-hrh9",
      "type": "WEB"
    },
    {
      "url": "https://github.com/nervosnetwork/molecule/pull/49",
      "type": "WEB"
    },
    {
      "url": "https://github.com/nervosnetwork/molecule",
      "type": "PACKAGE"
    },
    {
      "url": "https://rustsec.org/advisories/RUSTSEC-2021-0103.html",
      "type": "WEB"
    }
  ],
  "schema_version": "1.4.0",
  "database_specific": {
    "cwe_ids": [],
    "severity": "MODERATE",
    "github_reviewed": true,
    "nvd_published_at": null,
    "github_reviewed_at": "2021-08-02T18:10:49Z"
  }
}