CVE-2021-25907

Name of the Vulnerable Software and Affected Versions containers crate versions prior to 0.9.11

Description An issue in the containers crate for Rust can cause a double drop of an object when a panic occurs in a user-provided function f, specifically in fn mutate() and fn mutate2(). This happens because affected versions of the crate did not guard against double drop while temporarily duplicating an object's ownership with ptr::read(). Dropping the same object twice can result in memory corruption.

Recommendations For versions prior to 0.9.11, update to version 0.9.11 to fix the issue by aborting upon panic, thus preventing the double drop and potential memory corruption.