CVE-2020-35901

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2020-35901
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-35901.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2020-35901
Aliases
Published
2020-12-31T09:15:14Z
Modified
2024-09-03T03:29:29.678422Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

An issue was discovered in the actix-http crate before 2.0.0-alpha.1 for Rust. There is a use-after-free in BodyStream.

References

Affected packages

Git / github.com/actix/actix-web

Affected ranges

Type
GIT
Repo
https://github.com/actix/actix-web
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
acda1c075a000a8b94f04b25b8d3668954d7938e

Affected versions

0.*

0.7.15
0.7.16
0.7.17
0.7.18

actors-v1.*

actors-v1.0.0

awc-v0.*

awc-v0.1.0
awc-v0.1.1
awc-v0.2.0
awc-v0.2.1

codegen-v0.*

codegen-v0.1.0
codegen-v0.1.1
codegen-v0.1.2

cors-v0.*

cors-v0.1.0

files-v0.*

files-v0.1.0
files-v0.1.1
files-v0.1.2

framed-v0.*

framed-v0.1.0
framed-v0.2.0

http-test-v0.*

http-test-v0.1.0
http-test-v0.1.1
http-test-v0.2.1
http-test-v0.2.2

http-v0.*

http-v0.1.0
http-v0.1.0-alpha.1
http-v0.1.1
http-v0.1.2
http-v0.1.3
http-v0.1.4
http-v0.1.5
http-v0.2.0
http-v0.2.1
http-v0.2.2
http-v0.2.3
http-v0.2.4

identity-v0.*

identity-v0.1.0

multipart-v0.*

multipart-v0.1.0
multipart-v0.1.0-beta.1
multipart-v0.1.1
multipart-v0.1.2

session-v0.*

session-v0.1.0
session-v0.1.0-beta.2
session-v0.1.1

v0.*

v0.2.0
v0.2.1
v0.3.0
v0.3.1
v0.3.2
v0.3.3
v0.4.0
v0.4.1
v0.4.10
v0.4.2
v0.4.3
v0.4.4
v0.4.5
v0.4.6
v0.4.7
v0.4.8
v0.4.9
v0.5.0
v0.5.1
v0.5.2
v0.5.3
v0.5.4
v0.5.5
v0.6.0
v0.6.1
v0.6.10
v0.6.2
v0.6.3
v0.6.4
v0.6.5
v0.6.6
v0.6.7
v0.6.8
v0.6.9
v0.7.0
v0.7.1
v0.7.10
v0.7.11
v0.7.12
v0.7.13
v0.7.14
v0.7.2
v0.7.3
v0.7.4
v0.7.5
v0.7.6
v0.7.7
v0.7.8
v0.7.9

v1.*

v1.0.0-alpha.2
v1.0.0-alpha.3
v1.0.0-alpha.4
v1.0.0-alpha.5
v1.0.0-alpha.6
v1.0.0-beta.1

web-v1.*

web-v1.0.0
web-v1.0.0-beta.2
web-v1.0.0-beta.3
web-v1.0.0-beta.4
web-v1.0.0-rc
web-v1.0.1