HIGH
An issue was discovered in the rusqlite crate before 0.23.0 for Rust
Published Dec 31, 2020
8.1
HIGHCVSS 3.1
EPSS 1.03%
Description
An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via an Auxdata API data race.
Affected products
No data.
- < 0.23.0
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (6)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-1870 Advisory
- https://github.com/advisories/GHSA-rjh8-p66p-jrh5 Advisory
- https://github.com/rusqlite/rusqlite/commit/2ef3628dac35aeba0a97d5fb3a57746b4e1d62b3
- https://github.com/rusqlite/rusqlite/releases/tag/0.23.0 x_refsource_MISCRelease NotesThird Party Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2020-35871
- https://rustsec.org/advisories/RUSTSEC-2020-0014.html x_refsource_MISCThird Party Advisory
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-1870 | Advisory | |
| https://github.com/advisories/GHSA-rjh8-p66p-jrh5 | Advisory | |
| https://github.com/rusqlite/rusqlite/commit/2ef3628dac35aeba0a97d5fb3a57746b4e1d62b3 | ||
| https://github.com/rusqlite/rusqlite/releases/tag/0.23.0 | x_refsource_MISCRelease NotesThird Party Advisory | |
| https://nvd.nist.gov/vuln/detail/CVE-2020-35871 | ||
| https://rustsec.org/advisories/RUSTSEC-2020-0014.html | x_refsource_MISCThird Party Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Dec 31, 2020
Updated Aug 4, 2024
Reserved Dec 31, 2020
Link CVE-2020-35871
CISA Vulnrichment
No data
Red Hat
No data
GitHub
Link GHSA-RJH8-P66P-JRH5