CVE catalog

CVE-2020-25575

rust-failure: CVE-2020-25575

[CVE catalog]

Severity
Low
Published
Source
[NVD] · [CVE record]
EPSS
2.93% · Oct 25, 2026

An issue was discovered in the failure crate through 0.1.5 for Rust. It may introduce "compatibility hazards" in some applications, and has a type confusion flaw when downcasting. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: This may overlap CVE-2019-25010

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianrust-failurebookworm0.1.7-1vulnerable
Ubunturust-failure20.040.1.5-1build1vulnerable
Ubunturust-failure22.040.1.7-1vulnerable
Ubunturust-failure24.040.1.7-1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianrust-failuresourcebookworm(unfixed)unimportantNot reported[969839]

[Debian bug #969839]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [librust-failure+backtrace-dev]Affected

    Source package: [rust-failure]

    Details (2)

    • 0.1.7-1 · amd64 · bookworm

      Affected

      dsa · rust-failure · debian · bookworm; dsa · rust-failure · debian · 12

    • 0.1.7-1 · arm64 · bookworm

      Affected

      dsa · rust-failure · debian · bookworm; dsa · rust-failure · debian · 12

  • [librust-failure+default-dev]Affected

    Source package: [rust-failure]

    Details (2)

    • 0.1.7-1 · amd64 · bookworm

      Affected

      dsa · rust-failure · debian · bookworm; dsa · rust-failure · debian · 12

    • 0.1.7-1 · arm64 · bookworm

      Affected

      dsa · rust-failure · debian · bookworm; dsa · rust-failure · debian · 12

  • [librust-failure+derive-dev]Affected

    Source package: [rust-failure]

    Details (2)

    • 0.1.7-1 · amd64 · bookworm

      Affected

      dsa · rust-failure · debian · bookworm; dsa · rust-failure · debian · 12

    • 0.1.7-1 · arm64 · bookworm

      Affected

      dsa · rust-failure · debian · bookworm; dsa · rust-failure · debian · 12

  • [librust-failure-dev]Affected

    Source package: [rust-failure]

    Details (2)

    • 0.1.7-1 · amd64 · bookworm

      Affected

      dsa · rust-failure · debian · bookworm; dsa · rust-failure · debian · 12

    • 0.1.7-1 · arm64 · bookworm

      Affected

      dsa · rust-failure · debian · bookworm; dsa · rust-failure · debian · 12

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]