PT-2020-17506 · Rust · Internment Crate

Published 2020-05-28 · Updated 2021-08-25 · CVE-2020-35874

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions internment crate versions prior to 0.3.12

Description The issue is related to a race condition in ArcIntern::drop, which can lead to a use-after-free scenario. This occurs when memory is released while another user is about to access it, resulting in the new user getting a reference to freed memory. The problem was resolved by serializing access to an interned object during deallocation.

Recommendations For versions prior to 0.3.12, update to version 0.3.12 or later to fix the issue. As a temporary workaround, consider implementing stronger locking mechanisms to avoid the problem, similar to the approach used in versions prior to 0.3.12.

Exploit

Fix

Race Condition

Use After Free

Weakness Enumeration

CWE-362

CWE-416

Related Identifiers

CVE-2020-35874

GHSA-96W3-P368-4H8C

RUSTSEC-2020-0017

Affected Products

Internment Crate

References · 8

• 🔥 https://rustsec.org/advisories/RUSTSEC-2020-0017.html · Exploit
• https://osv.dev/vulnerability/GHSA-96w3-p368-4h8c · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-35874 · Security Note
• https://osv.dev/vulnerability/RUSTSEC-2020-0017 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-35874 · Vendor Advisory
• https://github.com/droundy/internment/issues/11 · Note
• https://github.com/droundy/internment · Note
• https://crates.io/crates/internment · Note