GHSA-p6gj-gpc8-f8xw

Source

https://github.com/advisories/GHSA-p6gj-gpc8-f8xw

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/06/GHSA-p6gj-gpc8-f8xw/GHSA-p6gj-gpc8-f8xw.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-p6gj-gpc8-f8xw

Aliases

Published

2022-06-17T00:13:24Z

Modified

2023-11-08T04:07:22.929289Z

Summary

Aliased mutable references from `tls_rand` & `TlsWyRand`

Details

TlsWyRand's implementation of Deref unconditionally dereferences a raw pointer, and returns multiple mutable references to the same object, which is undefined behavior.

Database specific

{
    "nvd_published_at": null,
    "cwe_ids": [],
    "severity": "MODERATE",
    "github_reviewed": true,
    "github_reviewed_at": "2022-06-17T00:13:24Z"
}

References

Affected packages

crates.io / nanorand

Package

Name: nanorand; View open source insights on deps.dev
Purl: pkg:cargo/nanorand

Affected ranges

Type: SEMVER
Events: Introduced

0.5.0

Fixed

0.6.1

Ecosystem specific

{
    "affected_functions": [
        "nanorand::tls::tls_rand"
    ]
}