0.002 Low
EPSS
Percentile
60.7%
Even if an element is popped from a queue, crossbeam would run its destructor inside the epoch-based garbage collector. This is a source of double frees.
The flaw was corrected by wrapping elements inside queues in a ManuallyDrop.
github.com/crossbeam-rs/crossbeam-epoch
github.com/crossbeam-rs/crossbeam-epoch/issues/82
nvd.nist.gov/vuln/detail/CVE-2018-20996
rustsec.org/advisories/RUSTSEC-2018-0009.html