CVE-2020-35876

An issue was discovered in the rio crate through 2020-05-11 for Rust. A struct can be leaked, allowing attackers to obtain sensitive information, cause a use-after-free, or cause a data race...

forgekit-reasoning (0.5.0), haneru (0.0.0) +7 more potentially affected by CVE-2020-35876 via rio (0.9.4)

rio CARGO version 0.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on rio and may be impacted: - forgekit-reasoning 0.5.0 - haneru 0.0.0 - marble 0.0.0 - mfio-rt 0.1.0 - pearl =0.4.0, =0.31.0, =0.34.7-p1, =0.34.7-patched Source cves: CVE-2020-35876...

CVE-2020-35876

An issue was discovered in the rio crate through 2020-05-11 for Rust. A struct can be leaked, allowing attackers to obtain sensitive information, cause a use-after-free, or cause a data race...

CVE-2020-35876

The CVE-2020-35876 entry relates to the rio crate (Rust) where leaking a rio::Completion can prevent its drop code from running, enabling access to or dropping of the underlying I/O buffer. This can lead to use-after-free, data races, or leaking secrets. The primary technical details are document...

CVE-2020-35876

Removed by vendor...

forgekit-reasoning (0.5.0), haneru (0.0.0) +7 more potentially affected by CVE-2020-35876 via rio (0.9.4)

rio CARGO version 0.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on rio and may be impacted: - forgekit-reasoning 0.5.0 - haneru 0.0.0 - marble 0.0.0 - mfio-rt 0.1.0 - pearl =0.4.0, =0.31.0, =0.34.7-p1, =0.34.7-patched Source cves: CVE-2020-35876...