cve.bz

CVE-2018-20999

7.5 highEPSS 1.6%

High (7.5) in orion project orion. EPSS 1.6% chance of exploitation in the next 30 days. Fixed in orion 0.11.2.

An issue was discovered in the orion crate before 0.11.2 for Rust. reset() calls cause incorrect results.

Severity

CVSS 3.0

7.5 high
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
CWE
CWE-682
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-gffv-5hr2-f9gjcrates.ioorion<0.11.20.11.2
RUSTSEC-2018-0012crates.ioorion>=0.0.0-0 <0.11.20.11.2

References

Check your stackJSON