OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2025-12-28 07:18:07 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #119 from Shnatsel/patch-1

Browse Source 
Add advisory for SmallVec issue #148
This commit is contained in:
Tony Arcieri
2019-07-02 15:21:43 -07:00
committed by GitHub
parent 7d2f62d5ed 2cbddfd81d
commit 09936b6d4b
1 changed files with 17 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
crates/smallvec/RUSTSEC-0000-0000.toml Normal file
View File

@@ -0,0 +1,17 @@
[advisory]
id = "RUSTSEC-0000-0000"
package = "smallvec"
date = "2019-06-06"
title = "Double-free and use-after-free in SmallVec::grow()"
description = """
Attempting to call `grow` on a spilled SmallVec with a value equal to the current capacity causes it to free the existing data. This performs a double free immediately and may lead to use-after-free on subsequent accesses to the SmallVec contents.
An attacker that controls the value passed to `grow` may exploit this flaw to obtain memory contents or gain remote code execution.
Credits to @ehuss for discovering, reporting and fixing the bug.
"""
patched_versions = [">= 0.6.10"]
unaffected_versions = ["< 0.6.5"]
url = "https://github.com/servo/rust-smallvec/issues/148"
keywords = ["double free", "use after free", "arbitrary code execution"]
affected_functions = ["smallvec::SmallVec::grow"]