Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-04007
HistoryDec 28, 2021 - 12:00 a.m.

Rust rusqlite crate memory corruption vulnerability (CNVD-2022-04007)

2021-12-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
rust
rusqlite crate
sqlite
memory corruption
vulnerability
resource management error
security vulnerability
cnvd-2022-04007

EPSS

0.001

Percentile

42.3%

Rust rusqlite crate is an ergonomic wrapper for using SQLite from Rust. it attempts to expose a rust-postgres-like interface. versions 0.25.x prior to 0.25.4 and 0.26.x prior to 0.26.2 of Rust rusqlite crate are vulnerable to security vulnerability, which stems from a resource management error in create_scalar_function. No details of the vulnerability are currently available.

EPSS

0.001

Percentile

42.3%