← All advisories

Critical severityNVD Advisory· Published Dec 31, 2020· Updated Aug 5, 2024

CVE-2019-25009

CVE-2019-25009

Description

An issue was discovered in the http crate before 0.1.20 for Rust. The HeaderMap::Drain API can use a raw pointer, defeating soundness.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
httpcrates.io	< 0.1.20	0.1.20

Affected products

4

rust/httpdescription
osv-coords3 versions
pkg:apk/chainguard/zed pkg:apk/wolfi/zed pkg:cargo/http
< 0.146.3-r0+ 2 more
- (no CPE)range: < 0.146.3-r0
- (no CPE)range: < 0.146.3-r0
- (no CPE)range: < 0.1.20

Patches

Vulnerability mechanics

References

3

github.com/advisories/GHSA-6rhx-hqxm-8p36ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2019-25009ghsaADVISORY
rustsec.org/advisories/RUSTSEC-2019-0034.htmlghsax_refsource_MISCWEB

News mentions

0

No linked articles in our index yet.