PT-2018-15484 · Rust+1 · Smallvec+1
Vurich
·
Publicado
2018-07-19
·
Atualizado
2021-08-25
·
CVE-2018-20991
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
smallvec versions prior to 0.6.3
Description
An issue in the smallvec crate for Rust was discovered, where the Iterator implementation mishandles destructors, potentially leading to a double free. This occurs when an iterator passed to
SmallVec::insert many panics in Iterator::next, causing destructors to run during unwinding while the vector is in an inconsistent state.Recommendations
For versions prior to 0.6.3, update to version 0.6.3 to resolve the issue. As a temporary workaround, consider avoiding the use of
SmallVec::insert many with iterators that may panic in Iterator::next until the update is applied.Correção
Double Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Suse
Smallvec