CVE-2019-16882 - An issue was discovered in the string-interner crate before 0.7.1 for Rust

Back Back to CVE browser

HIGH

An issue was discovered in the string-interner crate before 0.7.1 for Rust

Published Sep 25, 2019

7.5

HIGH

CVSS 3.1

EPSS 1.55%

Description

An issue was discovered in the string-interner crate before 0.7.1 for Rust. It allows attackers to read from memory locations associated with dangling pointers, because of a cloning flaw.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-416

Use After Free

References (6)

https://github.com/Robbepop/string-interner/commit/d91dac0cfe42512526879cdfaac0b81beff54089
https://github.com/Robbepop/string-interner/issues/9
https://github.com/Robbepop/string-interner/pull/10
https://github.com/advisories/GHSA-49fq-pw77-6qxj
Advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-16882
https://rustsec.org/advisories/RUSTSEC-2019-0023.html
x_refsource_CONFIRMExploitPatchThird Party Advisory

Link	Providers	Tags
https://github.com/Robbepop/string-interner/commit/d91dac0cfe42512526879cdfaac0b81beff54089
https://github.com/Robbepop/string-interner/issues/9
https://github.com/Robbepop/string-interner/pull/10
https://github.com/advisories/GHSA-49fq-pw77-6qxj		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-16882
https://rustsec.org/advisories/RUSTSEC-2019-0023.html		x_refsource_CONFIRMExploitPatchThird Party Advisory