RUSTSEC-2020-0011: 
Rust vulnerability analysis and mitigation

The memoffset crate for Rust, prior to version 0.5.0, contained a security vulnerability identified as RUSTSEC-2020-0011. The vulnerability was related to the offset_of and span_of functions which could potentially expose uninitialized memory (RustSec Advisory).

The vulnerability was classified with a CVSS v3.0 Base Score of 7.5 (HIGH) with the vector string CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. The issue was categorized under CWE-908 (Use of Uninitialized Resource). The technical nature of the vulnerability involved potential exposure of uninitialized memory through the improper implementation of offset_of and span_of functions (NVD).

The vulnerability could lead to the exposure of uninitialized memory, potentially revealing sensitive information from the affected systems. This information disclosure vulnerability could compromise the confidentiality of applications using the affected versions of the memoffset crate (NVD).

The vulnerability has a Network attack vector with Low attack complexity and requires No privileges or user interaction for exploitation, as indicated by the CVSS metrics (NVD).

Users are advised to upgrade to memoffset version 0.5.0 or later, which contains fixes for this vulnerability (RustSec Advisory).