Lucene search
+L

7 matches found

Github Security Blog
Github Security Blog
•added 2021/09/01 6:30 p.m.•43 views

Double free in stack_dst

Affected versions of stackdst used a pushinner function that increased the internal length of the array and then called val.clone. If the val.clone call panics, the stack could drop an already dropped element or drop uninitialized memory. This issue was fixed in 2a4d538 by increasing the length o...

9.8CVSS8.8AI score0.01295EPSS
SaveExploits0References6Affected Software1
attackerkb
attackerkb
•added 2021/03/05 9:15 a.m.•11 views

CVE-2021-28034

An issue was discovered in the stackdst crate before 0.6.1 for Rust. Because of the pushinner behavior, a double free can occur upon a val.clone panic...

9.8CVSS8.3AI score0.01295EPSS
SaveExploits0References2
Prion
Prion
•added 2021/03/05 9:15 a.m.•20 views

Double free

An issue was discovered in the stackdst crate before 0.6.1 for Rust. Because of the pushinner behavior, a double free can occur upon a val.clone panic...

7.5CVSS9.4AI score0.01295EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2021/03/05 8:39 a.m.•0 views

CVE-2021-28035

An issue was discovered in the stackdst crate before 0.6.1 for Rust. Because of the pushinner behavior, a drop of uninitialized memory can occur upon a val.clone panic...

9.8CVSS0.01295EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/05 12:00 a.m.•2 views

CVE-2021-28034: Double Free

An issue was discovered in the stackdst crate before 0.6.1 for Rust. Because of the pushinner behavior, a double free can occur upon a val.clone panic...

9.8CVSS5.9AI score0.01295EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/05 12:00 a.m.•3 views

CVE-2021-28035: Use of Uninitialized Resource

An issue was discovered in the stackdst crate before 0.6.1 for Rust. Because of the pushinner behavior, a drop of uninitialized memory can occur upon a val.clone panic...

9.8CVSS5.8AI score0.01295EPSS
SaveExploits0References2
OSV
OSV
•added 2021/02/22 12:00 p.m.•23 views

RUSTSEC-2021-0033 push_cloned can drop uninitialized memory or double free on panic

Affected versions of stackdst used a pushinner function that increased the internal length of the array and then called val.clone. If the val.clone call panics, the stack could drop an already dropped element or drop uninitialized memory. This issue was fixed in 2a4d538 by increasing the length o...

9.8CVSS9.3AI score0.01295EPSS
SaveExploits0References3
Rows per page
Query Builder