Lucene search

MitreCVE-2021-25905

HistoryJan 26, 2021 - 6:16 p.m.

CVE-2021-25905

2021-01-2618:16:22

CWE-908

mitre

web.nvd.nist.gov

cve-2021-25905

bra crate

rust

uninitialized memory

nvd

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:N/A:P

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

AI Score

9.1

Confidence

High

EPSS

0.005

Percentile

75.6%

JSON

An issue was discovered in the bra crate before 0.1.1 for Rust. It lacks soundness because it can read uninitialized memory.

Affected configurations

Nvd

Node

bra_projectbraRange<0.1.1rust

VendorProductVersionCPE
bra_projectbra*cpe:2.3:a:bra_project:bra:*:*:*:*:*:rust:*:*

Vendor	Product	Version	CPE
bra_project	bra	*	cpe:2.3:a:bra_project:bra::::::rust::*

References

rustsec.org/advisories/RUSTSEC-2021-0008.html

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:N/A:P

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

AI Score

9.1

Confidence

High

EPSS

0.005

Percentile

75.6%

JSON

Related for CVE-2021-25905