RUSTSEC-2023-0059

    Dashboard / Vulnerabilities / RUSTSEC-2023-0059

    RUSTSEC-2023-0059

    Published: 10 Sept 2023Last Modified: 10 Feb 2024

    Summary: Unaligned read of `*const *const c_char` pointer

    Details: Affected versions dereference a potentially unaligned pointer. The pointer is commonly unaligned in practice, resulting in undefined behavior. In some build modes, this is observable as a panic followed by abort. In other build modes the UB may manifest in some other way, including the possibility of working correctly in some architectures. The crate is not currently maintained, so a patched version is not available. ## Recommended alternatives - [`uzers`](https://crates.io/crates/uzers) (an actively maintained fork of the `users` crate) - [`sysinfo`](https://crates.io/crates/sysinfo)

    References: https://crates.io/crates/users, https://rustsec.org/advisories/RUSTSEC-2023-0059.html, https://github.com/ogham/rust-users/issues/55

    Affected packages

    Package

    Name: users

    Purl: pkg:cargo/users

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0.0.0-0
    Fixed -None

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    RUSTSEC-2023-0059 | CVE-DB