CVE-2018-20999

An issue was discovered in the orion crate before 0.11.2 for Rust. reset() calls cause incorrect results.

• CWE-682

• https://github.com/brycx/orion/issues/46Patch, Third Party Advisory
• https://rustsec.org/advisories/RUSTSEC-2018-0012.htmlThird Party Advisory
• https://github.com/brycx/orion/issues/46Patch, Third Party Advisory
• https://rustsec.org/advisories/RUSTSEC-2018-0012.htmlThird Party Advisory

Published

Aug 26, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-20993An issue was discovered in the yaml-rust crate before 0.4.1 …
• CVE-2018-20994An issue was discovered in the trust-dns-proto crate before …
• CVE-2018-20995An issue was discovered in the slice-deque crate before 0.1.…
• CVE-2018-20996An issue was discovered in the crossbeam crate before 0.4.1 …
• CVE-2018-20997An issue was discovered in the openssl crate before 0.10.9 f…
• CVE-2018-20998An issue was discovered in the arrayfire crate before 3.6.0 …
• CVE-2018-2100Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-21000An issue was discovered in the safe-transmute crate before 0…
• CVE-2018-21001The anycomment plugin before 0.0.33 for WordPress has XSS.
• CVE-2018-21002The js-support-ticket plugin before 2.0.6 for WordPress has …
• CVE-2018-21003The buddyforms plugin before 2.2.8 for WordPress has SQL inj…
• CVE-2018-21004The rsvpmaker plugin before 5.6.4 for WordPress has SQL inje…