~ / search / GHSA-v5r6-6r3c-wqxc

GHSA-v5r6-6r3c-wqxc

Memory exhaustion in asn1_der

Source: GitHub Advisory Database (reviewed) High CVE-2019-15549

Packages

EcosystemPackageAffectedFixed in
crates.io asn1_der < 0.6.2 0.6.2

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered in the asn1_der crate before 0.6.2 for Rust. Attackers can trigger memory exhaustion by supplying a large value in a length field.

References

External links from the advisory. They lead to third-party sites.