"Urgent Fix Released for Critical Rust Vulnerability Exposing Windows Systems to Command Injection Attacks"
TL;DR
A critical vulnerability in the Rust standard library, known as BatBadBut and tracked as CVE-2024-24576, exposes Windows systems to command injection attacks when batch files are invoked with untrusted arguments. The flaw impacts all versions of Rust before 1.77.2 and has a maximum severity score. Security researcher RyotaK discovered and reported the bug, advising caution when executing commands on Windows and recommending moving batch files to a directory not included in the PATH environment variable to prevent unexpected execution.
Topics:technologysoftware-security-vulnerability#command-injection#rust#security-flaw#software-security-vulnerability#vulnerability#windows
- Critical 'BatBadBut' Rust Vulnerability Exposes Windows Systems to Attacks The Hacker News
- Rust rustles up fix for 10/10 critical command injection bug on Windows The Register
- Critical Rust flaw enables Windows command injection attacks BleepingComputer
- Command injection attacks likely with critical Rust vulnerability SC Media
- Rust rolls out critical fix for Windows vulnerability and urges immediate updating Techzine Europe
Want the full story? Read the original reporting
Read on The Hacker News