PT-2020-17585
CVE-2020-36213
·
تاريخ النشر
2020-12-21
·
تاريخ التحديث
2021-08-25
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
abi stable crate versions prior to 0.9.1
Description
The issue concerns soundness bugs in the abi stable crate for Rust, where a retain call can create an invalid UTF-8 string and DrainFilter lacks soundness due to a double drop. These bugs are related to issues in the Rust standard library.
Recommendations
For versions prior to 0.9.1, update to version 0.9.1 or later to resolve the issue. As a temporary workaround, consider avoiding the use of the retain call and DrainFilter function until the update is applied.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾