PT-2021-17722 · Stack Dst · Stack Dst

Published

2021-02-22

·

Updated

2021-09-01

·

CVE-2021-28034

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: stack dst versions prior to 0.6.1
Description: An issue in the stack dst crate for Rust can cause a double free to occur when a val.clone() panic happens due to the push inner behavior. This can lead to the stack dropping an already dropped element or dropping uninitialized memory. The issue was fixed by changing the order of operations in the push inner function to increase the length of the array after elements are cloned.
Recommendations: For versions prior to 0.6.1, update to version 0.6.1 or later to resolve the issue. As a temporary workaround, consider avoiding the use of the push inner function until a patch is available. Restrict access to the val.clone() call to minimize the risk of exploitation.

Fix

Use of Uninitialized Resource

Double Free

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-908CWE-415

Related Identifiers

CVE-2021-28034
GHSA-45W7-7G63-2M5W
GHSA-8MJX-H23H-W2PG
RUSTSEC-2021-0033

Affected Products

Stack Dst