Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-04011
HistoryDec 28, 2021 - 12:00 a.m.

Rust rusqlite crate memory corruption vulnerability (CNVD-2022-04011)

2021-12-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
14
rust
rusqlite
sqlite
security vulnerability
resource management error

EPSS

0.001

Percentile

42.3%

Rust rusqlite crate is an ergonomic wrapper for using SQLite from Rust. it attempts to expose a rust-postgres-like interface. versions 0.25.x prior to 0.25.4 and 0.26.x prior to 0.26.2 of Rust rusqlite crate are vulnerable to security vulnerability, which stems from a resource management error in rollback_hook. No details of the vulnerability are currently available.

EPSS

0.001

Percentile

42.3%