GHSA-HXJF-H2MH-R6HJ Use After Free in libpulse-binding

🗓️ 06 Jan 2022 22:20:12Reported by GoogleType

osv🔗 osv.dev👁 12 Views

Use After Free in libpulse-binding Affected versions contained a pair of use-after-free issues with the objects returned by the get_format_info and get_context methods of Stream objects. These objects were mistakenly being constructed without setting an important flag to prevent destruction of the underlying C objects they reference upon their own destruction

Reporter	Title	Published	Views	Family All 22
CNNVD	Rust libpulse-binding crate资源管理错误漏洞	27 Dec 202100:00	–	cnnvd
CNNVD	Rust libpulse-binding crate 资源管理错误漏洞	27 Dec 202100:00	–	cnnvd
CNVD	Mozilla Rust libpulse-binding crate memory corruption vulnerability	28 Dec 202100:00	–	cnvd
CVE	CVE-2018-25027	26 Dec 202121:54	–	cve
CVE	CVE-2018-25028	26 Dec 202121:54	–	cve
Cvelist	CVE-2018-25027	26 Dec 202121:54	–	cvelist
Cvelist	CVE-2018-25028	26 Dec 202121:54	–	cvelist
EUVD	EUVD-2022-0623	3 Oct 202520:07	–	euvd
EUVD	EUVD-2022-0632	3 Oct 202520:07	–	euvd
Github Security Blog	Use After Free in libpulse-binding	6 Jan 202222:20	–	github

Source	Link
github	www.github.com/jnqnfe/pulse-binding-rust/security/advisories/GHSA-ghpq-vjxw-ch5w
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-25027
github	www.github.com/jnqnfe/pulse-binding-rust
raw	www.raw.githubusercontent.com/rustsec/advisory-db/main/crates/libpulse-binding/RUSTSEC-2018-0021.md
rustsec	www.rustsec.org/advisories/RUSTSEC-2018-0021.html

08 Nov 2023 04:00Current

7.4High risk

Vulners AI Score7.4

CVSS 3.17.5

EPSS0.00478