CVE-2020-36205 - An issue was discovered in the xcb crate through 2020-12-10 for Rust

Back Back to CVE browser

MEDIUM

An issue was discovered in the xcb crate through 2020-12-10 for Rust

Published Jan 22, 2021

5.5

MEDIUM

CVSS 3.1

EPSS 0.40%

Description

An issue was discovered in the xcb crate through 2020-12-10 for Rust. base::Error does not have soundness. Because of the public ptr field, a use-after-free or double-free can occur.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-415

CWE-416

Use After Free

References (6)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-1676
Advisory
https://github.com/advisories/GHSA-c8hq-x4mm-p6q6
Advisory
https://github.com/rtbo/rust-xcb/issues/93
https://github.com/rust-x-bindings/rust-xcb/issues/93
https://nvd.nist.gov/vuln/detail/CVE-2020-36205
https://rustsec.org/advisories/RUSTSEC-2020-0097.html
x_refsource_MISCExploitVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-1676		Advisory
https://github.com/advisories/GHSA-c8hq-x4mm-p6q6		Advisory
https://github.com/rtbo/rust-xcb/issues/93
https://github.com/rust-x-bindings/rust-xcb/issues/93
https://nvd.nist.gov/vuln/detail/CVE-2020-36205
https://rustsec.org/advisories/RUSTSEC-2020-0097.html		x_refsource_MISCExploitVendor Advisory