5 matches found
account-db (0.1.0), akita (>=0.1.0, <=0.4.3) +386 more potentially affected by CVE-2021-45720 via lru (>=0.1.17, <=0.6.6)
lru CARGO version =0.1.17, =0.1.0, =0.3.0, =0.1.0, =0.1.1, =0.1.1, =2.0.0-alpha.22, =2.0.3, =2.0.3, =2.0.3, =0.28.2, =0.7.2, =0.1.0, =0.1.0, =0.9.1 and more Source cves: CVE-2021-45720 Source advisory: OSV:GHSA-QQMC-HWQP-8G2W...
account-db (0.1.0), akita (>=0.1.0, <=0.4.3) +386 more potentially affected by CVE-2021-45720 via lru (>=0.1.17, <=0.6.6)
lru CARGO version =0.1.17, =0.1.0, =0.3.0, =0.1.0, =0.1.1, =0.1.1, =2.0.0-alpha.22, =2.0.3, =2.0.3, =2.0.3, =0.28.2, =0.7.2, =0.1.0, =0.1.0, =0.9.1 and more Source cves: CVE-2021-45720 Source advisory: OSV:GHSA-V362-2895-H9R2...
CVE-2021-45720
An issue was discovered in the lru crate before 0.7.1 for Rust. The iterators have a use-after-free, as demonstrated by an access after a pop operation...
CVE-2021-45720
The CVE-2021-45720 entry concerns the Rust lru crate (pre-0.7.1). The vulnerability arises in the iterators for the cache: calling operations such as pop() removes and frees a value, yet references to that value may still be accessed, causing a use-after-free. Affected component: lru crate iterat...
account-db (0.1.0), akita (>=0.1.0, <=0.4.3) +386 more potentially affected by CVE-2021-45720 via lru (>=0.1.17, <=0.6.6)
lru CARGO version =0.1.17, =0.1.0, =0.3.0, =0.1.0, =0.1.1, =0.1.1, =2.0.0-alpha.22, =2.0.3, =2.0.3, =2.0.3, =0.28.2, =0.7.2, =0.1.0, =0.1.0, =0.9.1 and more Source cves: CVE-2021-45720 Source advisory: OSV:RUSTSEC-2021-0130...