`index()` allows out-of-bound read and `remove()` has off-by-one error

🗓️ 03 Sep 2020 12:00:00Reported by rustsecType

`Index()` and `remove()` functions have security vulnerabilities leading to out-of-bound read and off-by-one error causing memory leakage and uninitialized memory drop in `Slab::index()` and `Slab::remove()`

Reporter	Title	Published	Views	Family All 15
CNNVD	Rust Buffer Error Vulnerability	31 Dec 202000:00	–	cnnvd
CVE	CVE-2020-35892	31 Dec 202008:24	–	cve
Cvelist	CVE-2020-35892	31 Dec 202008:24	–	cvelist
EUVD	EUVD-2021-1553	7 Oct 202500:30	–	euvd
Github Security Blog	Out of bounds read in simple-slab	25 Aug 202120:48	–	github
NVD	CVE-2020-35892	31 Dec 202010:15	–	nvd
OSV	CVE-2020-35893	31 Dec 202010:15	–	osv
OSV	GHSA-438G-FX34-4H9M Out of bounds read in simple-slab	25 Aug 202120:48	–	osv
OSV	GHSA-HQC8-J86X-2764 Off-by-one error in simple-slab	25 Aug 202120:48	–	osv
OSV	RUSTSEC-2020-0039 `index()` allows out-of-bound read and `remove()` has off-by-one error	3 Sep 202012:00	–	osv