Vulnerability Details CVE-2020-25575
An issue was discovered in the failure crate through 0.1.5 for Rust. It may introduce "compatibility hazards" in some applications, and has a type confusion flaw when downcasting. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: This may overlap CVE-2019-25010
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 71.4%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
- https://boats.gitlab.io/blog/post/failure-to-fehler/
- https://github.com/rust-lang-nursery/failure/issues/336
- https://rustsec.org/advisories/RUSTSEC-2020-0036.html
- https://boats.gitlab.io/blog/post/failure-to-fehler/
- https://github.com/rust-lang-nursery/failure/issues/336
- https://rustsec.org/advisories/RUSTSEC-2020-0036.html
Products affected by CVE-2020-25575
-
cpe:2.3:a:failure_project:failure:-
-
cpe:2.3:a:failure_project:failure:0.0.1
-
cpe:2.3:a:failure_project:failure:0.1.0
-
cpe:2.3:a:failure_project:failure:0.1.1
-
cpe:2.3:a:failure_project:failure:0.1.2
-
cpe:2.3:a:failure_project:failure:0.1.3
-
cpe:2.3:a:failure_project:failure:0.1.4
-
cpe:2.3:a:failure_project:failure:0.1.5
-
cpe:2.3:a:failure_project:failure:0.1.6
-
cpe:2.3:a:failure_project:failure:0.1.7
-
cpe:2.3:a:failure_project:failure:0.1.8