OSV 1.4.0 · github-reviewed · 修改于 2023-06-14 04:48
发布时间
2021-08-26 05:00
GitHub 审查时间
2021-08-07 03:28
NVD 发布时间
—
源文件
advisories/github-reviewed/2021/08/GHSA-mcrf-7hf9-f6q5/GHSA-mcrf-7hf9-f6q5.json
Affected versions of this crate pre-allocate memory on deserializing raw buffers without checking whether there is sufficient data available. This allows an attacker to do denial-of-service attacks by sending small msgpack messages that allocate gigabytes of memory.