CVE-2021-45685 - OpenCVE

An issue was discovered in the columnar crate through 2021-01-07 for Rust. ColumnarReadExt::read_typed_vec may read from uninitialized memory locations.

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

AV:N/AC:L/Au:N/C:P/I:P/A:P

Vendors & Products
CPE Configurations

Vendors	Products
Columnar Project	Columnar

Configuration 1 [-]

cpe:2.3:a:columnar_project:columnar:*:*:*:*:*:rust:*:*

References

Link	Resource
https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/columnar/RUSTSEC-2021-0087.md	Third Party Advisory
https://rustsec.org/advisories/RUSTSEC-2021-0087.html	Third Party Advisory

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: mitre

Published: 2021-12-26T21:52:16

Updated: 2021-12-26T21:52:16

Reserved: 2021-12-26T00:00:00

Link: CVE-2021-45685

JSON object: View

NVD Information

Status : Analyzed

Published: 2021-12-27T00:15:09.037

Modified: 2022-01-06T16:31:16.053

Link: CVE-2021-45685

JSON object: View

Redhat Information

No data.

CWE

CWE-908

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:columnar_project:columnar:*:*:*:*:*:rust:*:*", "matchCriteriaId": "372824D6-CA13-4B53-9A19-88A8F63BBD57", "versionEndIncluding": "0.0.19", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in the columnar crate through 2021-01-07 for Rust. ColumnarReadExt::read_typed_vec may read from uninitialized memory locations."}, {"lang": "es", "value": "Se ha detectado un problema en la crate columnar versiones hasta 07-01-2021 para Rust. La funci\u00f3n ColumnarReadExt::read_typed_vec puede leer desde ubicaciones de memoria no inicializadas"}], "id": "CVE-2021-45685", "lastModified": "2022-01-06T16:31:16.053", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2021-12-27T00:15:09.037", "references": [{"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/columnar/RUSTSEC-2021-0087.md"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "https://rustsec.org/advisories/RUSTSEC-2021-0087.html"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-908"}], "source": "nvd@nist.gov", "type": "Primary"}]}