CVE-2020-36434

An issue was discovered in the sys-info crate before 0.8.0 for Rust. sysinfo::diskinfo calls can trigger a double free...

bat (0.18.0), buffett-core (>=0.1.0, <=0.1.1) +74 more potentially affected by CVE-2020-36434 via sys-info (>=0.4.1, <=0.7.0)

sys-info CARGO version =0.4.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =1.3.0, =0.29.0, =0.20.0, =0.1.0, =0.1.0, =1.3.0, =1.8.0, =0.7.0, =0.7.0, =0.31.2 and more Source cves: CVE-2020-36434 Source advisory: OSV:GHSA-2F5J-3MHQ-XV58...

CVE-2020-36434

creationtimestamp| type| source ---|---|--- 2021-08-08 12:35:53+00:00| seen| https://t.me/cibsecurity/26988...

CVE-2020-36434

An issue was discovered in the sys-info crate before 0.8.0 for Rust. sysinfo::diskinfo calls can trigger a double free...

CVE-2020-36434

An issue was discovered in the sys-info crate before 0.8.0 for Rust. sysinfo::diskinfo calls can trigger a double free...

CVE-2020-36434

The CVE-2020-36434 issue affects the Rust crate sys-info prior to version 0.8.0. The root cause is a static/global list used to store temporary disk information; cleanup code (DFCleanup) assumes a single-threaded environment and can free the same memory twice when sys_info::disk_info is invoked c...

bat (0.18.0), buffett-core (>=0.1.0, <=0.1.1) +74 more potentially affected by CVE-2020-36434 via sys-info (>=0.4.1, <=0.7.0)

sys-info CARGO version =0.4.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =1.3.0, =0.29.0, =0.20.0, =0.1.0, =0.1.0, =1.3.0, =1.8.0, =0.7.0, =0.7.0, =0.31.2 and more Source cves: CVE-2020-36434 Source advisory: OSV:RUSTSEC-2020-0100...