What big-name CVEs would Rust have helped prevent?
Inspired by a recent post on NTP, I’m looking at the bugs behind some of the most severe known security flaws and trying to figure out which ones Rust may have helped prevent. So far I only have:
- Heartbleed: buffer overread (CVE-2014-0160)
- GHOST: buffer overflow (CVE-2015-0235)
- NetUSB driver: buffer overflows (CVE-2015-3036)
But I am not 100% positive about the buffer overflows, and am curious what other well-known security flaws likely wouldn’t have happened if written in Rust.
Edit: additions
- Venom: rw outside buffer (CVE-2015-3456)