PT-2021-18551
CVE-2021-29938
·
تاريخ النشر
2021-02-19
·
تاريخ التحديث
2021-08-25
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
slice-deque crate versions through 2021-02-19
Description
The issue arises from the
SliceDeque::drain filter function, where a double drop can occur if a panic happens in the predicate function self.pred. This is because the affected versions of the crate incremented the current index of the drain filter iterator before calling the predicate function. As a result, if the predicate function panics, it is possible for the last element in the iterator to be dropped twice.Recommendations
For versions through 2021-02-19, consider updating to a version that fixes this issue to prevent the double drop problem.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾