PT-2021-18551

CVE-2021-29938

·

تاريخ النشر

2021-02-19

·

تاريخ التحديث

2021-08-25

الوصف من

CVSS 3.1
7.5
عالية
المقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions slice-deque crate versions through 2021-02-19
Description The issue arises from the SliceDeque::drain filter function, where a double drop can occur if a panic happens in the predicate function self.pred. This is because the affected versions of the crate incremented the current index of the drain filter iterator before calling the predicate function. As a result, if the predicate function panics, it is possible for the last element in the iterator to be dropped twice.
Recommendations For versions through 2021-02-19, consider updating to a version that fixes this issue to prevent the double drop problem. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
GHSA-P9GF-GMFV-398M
RUSTSEC-2021-0047
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾