5 matches found
account-db (0.1.0), anything (>=0.1.0, <=0.1.4) +106 more potentially affected by CVE-2021-45720 via lru (>=0.1.17, <=0.6.6)
lru CARGO version =0.1.17, =0.1.0, =0.1.1, =0.1.1, =0.1.0, =0.1.1, =0.0.1, =0.11.0, =0.3.0-beta.1, =0.1.9, =0.8.0-alpha1, =0.8.1 - cw-erc20 0.4.0 - cw-escrow 0.4.0 and more Source cves: CVE-2021-45720 Source advisory: OSV:GHSA-QQMC-HWQP-8G2W...
account-db (0.1.0), anything (>=0.1.0, <=0.1.4) +106 more potentially affected by CVE-2021-45720 via lru (>=0.1.17, <=0.6.6)
lru CARGO version =0.1.17, =0.1.0, =0.1.1, =0.1.1, =0.1.0, =0.1.1, =0.0.1, =0.11.0, =0.3.0-beta.1, =0.1.9, =0.8.0-alpha1, =0.8.1 - cw-erc20 0.4.0 - cw-escrow 0.4.0 and more Source cves: CVE-2021-45720 Source advisory: OSV:GHSA-V362-2895-H9R2...
CVE-2021-45720
An issue was discovered in the lru crate before 0.7.1 for Rust. The iterators have a use-after-free, as demonstrated by an access after a pop operation...
CVE-2021-45720
The CVE-2021-45720 entry concerns the Rust lru crate (pre-0.7.1). The vulnerability arises in the iterators for the cache: calling operations such as pop() removes and frees a value, yet references to that value may still be accessed, causing a use-after-free. Affected component: lru crate iterat...
account-db (0.1.0), anything (>=0.1.0, <=0.1.4) +106 more potentially affected by CVE-2021-45720 via lru (>=0.1.17, <=0.6.6)
lru CARGO version =0.1.17, =0.1.0, =0.1.1, =0.1.1, =0.1.0, =0.1.1, =0.0.1, =0.11.0, =0.3.0-beta.1, =0.1.9, =0.8.0-alpha1, =0.8.1 - cw-erc20 0.4.0 - cw-escrow 0.4.0 and more Source cves: CVE-2021-45720 Source advisory: OSV:RUSTSEC-2021-0130...