~ / search / GHSA-r98r-j25q-rmpr

GHSA-r98r-j25q-rmpr

Rust Failure Crate Vulnerable to Type confusion

Source: GitHub Advisory Database (reviewed) Critical CVE-2019-25010

Packages

EcosystemPackageAffectedFixed in
crates.io failure <= 0.1.8 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Safe Rust code can implement malfunctioning `__private_get_type_id__` and cause type confusion when downcasting, which is an undefined behavior. Users who derive Fail trait are not affected.

References

External links from the advisory. They lead to third-party sites.