RUSTSEC-2022-0058 Library exclusively intended to inject UB into safe Rust.
A Rust crate intentionally injects undefined behavior when a specific feature is enabled, posing a stability and safety risk to dependent projects.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Not stated
- Victim action needed
- Not needed
- Fix
- None listed
What is RUSTSEC-2022-0058?
RUSTSEC-2022-0058 is a vulnerability in inconceivable, published on 28 Sep 2022.
Official description
Quoting from the crate description:
> This crate is created purely to inject undefined behavior into stable, safe rust.
Specifically, the inconceivable! macro is insta-UB if the ub_inconceivable feature is enabled by any reverse dependency.
The value this adds is questionable, and hides unsafe code from naive analysis.
Which versions are affected by RUSTSEC-2022-0058?
1 open source package ship an affected version, including inconceivable.
| Package | Affected | Fixed in |
|---|---|---|
inconceivable crates.io | From 0.0.0-0 | None |
How do I fix RUSTSEC-2022-0058?
No fix has been published for RUSTSEC-2022-0058 yet. Limit exposure of the affected software until one is available.
Is RUSTSEC-2022-0058 being exploited?
There is no known exploitation of RUSTSEC-2022-0058 in the wild and no public exploit code.