CVE-2018-1000657

    Dashboard / Vulnerabilities / CVE-2018-1000657

    CVE-2018-1000657

    Published: 20 Aug 2018Last Modified: 9 Jul 2026

    Summary:

    Details: Rust Programming Language Rust standard library version Commit bfa0e1f58acf1c28d500c34ed258f09ae021893e and later; stable release 1.3.0 and later contains a Buffer Overflow vulnerability in std::collections::vec_deque::VecDeque::reserve() function that can result in Arbitrary code execution, but no proof-of-concept exploit is currently published.. This vulnerability appears to have been fixed in after commit fdfafb510b1a38f727e920dccbeeb638d39a8e60; stable release 1.22.0 and later.

    References: http://www.securityfocus.com/bid/105188, https://github.com/rust-lang/rust/issues/44800, https://github.com/rust-lang/rust/commit/f71b37bc28326e272a37b938e835d4f99113eec2

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 9a92aaf19a64603b02b4130fe52958cc12488900
    Fixed -328886ba2eaf0d3ac7e78ef3ba27eb296d0af3c0

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High