PT-2021-18551 · Unknown · Slice-Deque

Published 2021-02-19 · Updated 2021-08-25 · CVE-2021-29938

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions slice-deque crate versions through 2021-02-19

Description The issue arises from the SliceDeque::drain filter function, where a double drop can occur if a panic happens in the predicate function self.pred. This is because the affected versions of the crate incremented the current index of the drain filter iterator before calling the predicate function. As a result, if the predicate function panics, it is possible for the last element in the iterator to be dropped twice.

Recommendations For versions through 2021-02-19, consider updating to a version that fixes this issue to prevent the double drop problem. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

CVE-2021-29938

GHSA-P9GF-GMFV-398M

RUSTSEC-2021-0047

Affected Products

Slice-Deque

References · 10

• 🔥 https://rustsec.org/advisories/RUSTSEC-2021-0047.html · Exploit
• https://osv.dev/vulnerability/GHSA-p9gf-gmfv-398m · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-29938 · Vendor Advisory
• https://osv.dev/vulnerability/RUSTSEC-2021-0047 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-29938 · Security Note
• https://github.com/gnzlbg/slice_deque · Note
• https://github.com/gnzlbg/slice_deque/issues/90 · Note
• https://crates.io/crates/slice-deque · Note
• https://t.me/cvenotify/12739 · Telegram Post
• https://t.me/cvenotify/12461 · Telegram Post