UBUNTU-CVE-2020-35861

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2020-35861

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2020/UBUNTU-CVE-2020-35861.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2020-35861

Related

CVE-2020-35861

Published

2020-12-31T10:15:00Z

Modified

2024-10-15T14:07:50Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator

Summary

[none]

Details

An issue was discovered in the bumpalo crate before 3.2.1 for Rust. The realloc feature allows the reading of unknown memory. Attackers can potentially read cryptographic keys.

References

Affected packages

Ubuntu:20.04:LTS / rust-bumpalo

Package

Name: rust-bumpalo
Purl: pkg:deb/ubuntu/rust-bumpalo?arch=src?distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.5.0-3

2.6.0-1

3.*

3.1.2-1

Ecosystem specific

{
    "ubuntu_priority": "medium"
}