CVE Vulnerabilities

CVE-2020-25576

Incorrect Type Conversion or Cast

Published: Sep 14, 2020 | Modified: Nov 21, 2024
CVSS 3.x
9.8
CRITICAL
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM
root.io logo minimus.io logo echo.ai logo

An issue was discovered in the rand_core crate before 0.4.2 for Rust. Casting of byte slices to integer slices mishandles alignment constraints.

Weakness

The product does not correctly convert an object, resource, or structure from one type to a different type.

Affected Software

NameVendorStart VersionEnd Version
RandRand_project*0.4.2 (excluding)
Rust-rand-coreUbuntutrusty*
Rust-rand-coreUbuntuupstream*
Rust-rand-core-0.2Ubuntufocal*
Rust-rand-core-0.2Ubuntutrusty*
Rust-rand-core-0.3Ubuntufocal*
Rust-rand-core-0.3Ubuntugroovy*
Rust-rand-core-0.3Ubuntuhirsute*
Rust-rand-core-0.3Ubuntuimpish*
Rust-rand-core-0.3Ubuntutrusty*

References