Design/Logic Flaw

An issue was discovered in the actix-http crate before 2.0.0-alpha.1 for Rust. There is a use-after-free in BodyStream...

CVE-2020-35901

An issue was discovered in the actix-http crate before 2.0.0-alpha.1 for Rust. There is a use-after-free in BodyStream...

CVE-2020-35901

An issue was discovered in the actix-http crate before 2.0.0-alpha.1 for Rust. There is a use-after-free in BodyStream...

CVE-2020-35901

CVE-2020-35901 affects the actix-http crate for Rust, with exploitation possible via a use-after-free in BodyStream caused by lack of pinning. The issue is tied to the crate’s handling of buffers and memory location, and is mitigated by upgrading to a fixed version (2.0.0-alpha.1) or later as ind...

CVE-2020-35901: Use After Free

An issue was discovered in the actix-http crate before 2.0.0-alpha.1 for Rust. There is a use-after-free in BodyStream...

Rust Resource Management Error Vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in Rust actix-http crate before 2.0.0-alpha.1, which stems from BodyStream having a use-after-free...

PT-2020-17533

Name of the Vulnerable Software and Affected Versions actix-http crate versions prior to 2.0.0-alpha.1 Description The issue is related to a use-after-free in BodyStream. Affected versions of the crate did not require the buffer wrapped in BodyStream to be pinned, but treated it as if it had a...