Vulnerabilities > CVE-2020-36443 - Use of Uninitialized Resource vulnerability in Libp2P Libp2P-Deflate

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
libp2p
CWE-908

Summary

An issue was discovered in the libp2p-deflate crate before 0.27.1 for Rust. An uninitialized buffer is passed to AsyncRead::poll_read(), which is a user-provided trait function.

Vulnerable Configurations

Part Description Count
Application
Libp2P
1

Common Weakness Enumeration (CWE)