CVE-2021-45682: 
Rust vulnerability analysis and mitigation

An issue was discovered in the bronzedb-protocol crate through 2021-01-03 for Rust. The vulnerability involves the ReadKVExt implementation which may read from uninitialized memory locations (NVD, RustSec). The vulnerability was assigned CVE-2021-45682 and was disclosed on December 26, 2021.

The vulnerability stems from passing an uninitialized buffer to a user-provided Read implementation. The ReadKVExt implementation can read from uninitialized memory locations, which can produce undefined values and lead to undefined behavior. The vulnerability has a CVSS v3.1 Base Score of 9.8 CRITICAL (Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) (NVD).

The vulnerability allows arbitrary Read implementations to read from uninitialized buffer (memory exposure) and return incorrect number of bytes written to the buffer. Reading from uninitialized memory produces undefined values that can quickly invoke undefined behavior (RustSec).

The vulnerability requires no privileges or user interaction and can be exploited remotely with low attack complexity, as indicated by the CVSS metrics (AV:N/AC:L/PR:N/UI:N) (NVD).

As of the latest available information, there are no patched versions available for this vulnerability (RustSec).