CVE-2021-45688 — Use of Uninitialized Resource in ash — CVE Details

• First published January 6, 2022 (1740 days ago).
• Last revised November 8, 2023 — 670 days after initial publication.

• CWE-908
  View on MITRE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

• https://nvd.nist.gov/vuln/detail/CVE-2021-45688
  ADVISORY
• https://github.com/MaikKlein/ash/issues/354
  WEB
• https://github.com/ash-rs/ash/issues/354
  WEB
• https://github.com/ash-rs/ash/pull/470
  WEB
• https://github.com/ash-rs/ash/commit/2c98b6f384a017de031698bd623551a45f24c8f9
  WEB
• https://github.com/MaikKlein/ash
  PACKAGE
• https://github.com/ash-rs/ash/compare/0.33.0...0.33.1
  WEB
• https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/ash/RUSTSEC-2021-0090.md
  WEB
• https://rustsec.org/advisories/RUSTSEC-2021-0090.html
  WEB

What is CVE-2021-45688?

Use of Uninitialized Resource in ash. This vulnerability has been assigned a severity rating of CRITICAL (CVSS score: 9.8/10).

How do I check if my project is affected by CVE-2021-45688?

CVE-2021-45688 affects ash. Use GeekWala's free vulnerability scanner to check your dependencies against CVE-2021-45688 and 200,000+ other known vulnerabilities.