vulnerability
Alpine Linux: CVE-2020-36323: Use of Externally-Controlled Format String
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 6 | (AV:N/AC:L/Au:N/C:P/I:N/A:P) | Apr 14, 2021 | Mar 26, 2024 | Dec 22, 2025 |
Severity
6
CVSS
(AV:N/AC:L/Au:N/C:P/I:N/A:P)
Published
Apr 14, 2021
Added
Mar 26, 2024
Modified
Dec 22, 2025
Description
In the standard library in Rust before 1.52.0, there is an optimization for joining strings that can cause uninitialized bytes to be exposed (or the program to crash) if the borrowed string changes after its length is checked.
Solution
alpine-linux-upgrade-rust
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.