RUSTSEC-2021-0047

See a problem?
Please try reporting it to the source first.

Source

https://rustsec.org/advisories/RUSTSEC-2021-0047

Import Source

JSON Data

https://api.osv.dev/v1/vulns/RUSTSEC-2021-0047

Aliases

Published

2021-02-19T12:00:00Z

Modified

2023-11-08T04:05:44.001761Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

SliceDeque::drain_filter can double drop an element if the predicate panics

Details

Affected versions of the crate incremented the current index of the drain filter iterator before calling the predicate function self.pred.

If the predicate function panics, it is possible for the last element in the iterator to be dropped twice.

Database specific

{
    "license": "CC0-1.0"
}

References

Affected packages

{
    "affected_functions": null,
    "affects": {
        "os": [],
        "functions": [],
        "arch": []
    }
}

{
    "cvss": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
    "informational": null,
    "categories": [
        "memory-corruption"
    ]
}