Vulnerability RUSTSEC-2022-0030
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
4 years ago
May 21, 2022 at 12:00 PM UTC
Stack overflow during recursive expression parsing
0.1.0 - 0.4.2
0.1.0 - 0.4.2
Summary
Stack overflow during recursive expression parsing
Details
When parsing untrusted rulex expressions, the stack may overflow, possibly enabling a Denial of Service attack. This happens when parsing an expression with several hundred levels of nesting, causing the process to abort immediately.
The flaw was corrected in commits 60aa2dc03a by adding a check to recursion depth.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Medium Risk
4 years ago
Uncontrolled Recursion in rulex
0.1.0 - 0.4.2 GHSA-v78m-2q7v-fjqp
0.1.0 - 0.4.2 GHSA-v78m-2q7v-fjqp
Medium Risk
4 years ago
Reachable Assertion in rulex
0.1.0 - 0.4.2 GHSA-8v9w-p43c-r885
0.1.0 - 0.4.2 GHSA-8v9w-p43c-r885
Unknown
4 years ago
Panic due to improper UTF-8 indexing
0.1.0 - 0.4.2 RUSTSEC-2022-0031
0.1.0 - 0.4.2 RUSTSEC-2022-0031
Impacted packages
Timeline
Published
4 years ago
May 21, 2022 at 12:00 PM UTC
Fixed (0.4.3)
4 years ago
June 19, 2022 at 02:02 PM UTC
Last Modified
1 hour ago
October 12, 2026 at 06:00 PM UTC