RUSTSEC-2019-0024 Test advisory with associated example crate

Not scored Published

This is a test advisory for an empty example crate used to verify RustSec tooling, with no actual security impact.

Exploited in the wild
Not known
Login needed
Not stated
Attackable
Not stated
Victim action needed
Not stated
Fix
Available

What is RUSTSEC-2019-0024?

RUSTSEC-2019-0024 is a vulnerability in rustsec-example-crate, published on 8 Oct 2019.

Official description

This is a test advisory useful for verifying RustSec tooling and vulnerability detection pipelines are working correctly. Aside from the fact that it is filed against an example crate, it is otherwise considered by the Advisory Database itself to be a normal security advisory.

It's filed against rustsec-example-crate, an otherwise completely empty crate with no functionality or code, which has three releases:

  • v0.0.0 - unaffected by this advisory (but yanked from crates.io)
  • v0.0.1 - vulnerable according to this advisory
  • v1.0.0 - patched by this advisory

Which versions are affected by RUSTSEC-2019-0024?

1 open source package ship an affected version, including rustsec-example-crate.

PackageAffectedFixed in
rustsec-example-crate crates.ioFrom 0.0.11.0.0

How do I fix RUSTSEC-2019-0024?

Upgrade rustsec-example-crate to 1.0.0 or later.

Is RUSTSEC-2019-0024 being exploited?

There is no known exploitation of RUSTSEC-2019-0024 in the wild and no public exploit code.

Sources

Is RUSTSEC-2019-0024 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free