CVE-2020-35876 - An issue was discovered in the rio crate through 2020-05-11 for Rust

Back Back to CVE browser

CRITICAL

An issue was discovered in the rio crate through 2020-05-11 for Rust

Published Dec 31, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 1.56%

Description

An issue was discovered in the rio crate through 2020-05-11 for Rust. A struct can be leaked, allowing attackers to obtain sensitive information, cause a use-after-free, or cause a data race.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-416

Use After Free

CWE-772

References (6)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-1647
Advisory
https://github.com/advisories/GHSA-8rc5-mr4f-m243
Advisory
https://github.com/spacejam/rio/issues/11
https://github.com/spacejam/rio/pull/31
https://nvd.nist.gov/vuln/detail/CVE-2020-35876
https://rustsec.org/advisories/RUSTSEC-2020-0021.html
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-1647		Advisory
https://github.com/advisories/GHSA-8rc5-mr4f-m243		Advisory
https://github.com/spacejam/rio/issues/11
https://github.com/spacejam/rio/pull/31
https://nvd.nist.gov/vuln/detail/CVE-2020-35876
https://rustsec.org/advisories/RUSTSEC-2020-0021.html		x_refsource_MISCThird Party Advisory