CVE-2019-25007: 
Rust vulnerability analysis and mitigation

An issue was discovered in the streebog crate before 0.8.0 for Rust. The Streebog hash function implementation contained a critical flaw where the internal update-sigma function was implemented incorrectly, which could lead to incorrect results or cause a panic when processing certain inputs (RustSec Advisory).

The vulnerability stems from an incorrect implementation of the internal update-sigma function in the Streebog hash function. Depending on debug-assertions settings, this implementation flaw could result in either incorrect hash outputs or cause the application to panic when processing specific inputs. The issue has been assigned a CVSS v3.1 Base Score of 7.5 HIGH with vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (NVD).

The vulnerability can cause the Streebog hash function to produce incorrect hash values or trigger a panic in the application, potentially leading to service disruption. This affects the reliability and availability of systems using the affected versions of the streebog crate (RustSec Advisory).

The vulnerability can be triggered by providing specific inputs to the Streebog hash function implementation. The exact nature of these triggering inputs is not publicly detailed, but the vulnerability requires no special privileges or user interaction to exploit (NVD).

The vulnerability has been fixed in version 0.8.0 of the streebog crate. Users are advised to upgrade to this version or later to address the issue. No alternative workarounds are documented (RustSec Advisory).