OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2026-01-01 17:20:33 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #409 from RustSec/old-actix

Browse Source 
Add advisory for very old, unsound actix-web
This commit is contained in:
Sergey "Shnatsel" Davidoff
2020-09-26 22:37:35 +02:00
committed by GitHub
parent 2c3b462fbb 2522178d5b
commit c6d6a43c6d
1 changed files with 21 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
crates/actix-web/RUSTSEC-0000-0000.toml Normal file
View File

@@ -0,0 +1,21 @@
[advisory]
id = "RUSTSEC-0000-0000"
package = "actix-web"
date = "2018-06-08"
title = "Multiple memory safety issues"
url = "https://github.com/actix/actix-web/issues/289"
categories = ["memory-corruption"]
description = """
Affected versions contain multiple memory safety issues, such as:
- Unsoundly coercing immutable references to mutable references
- Unsoundly extending lifetimes of strings
- Adding the `Send` marker trait to objects that cannot be safely sent between threads
This may result in a variety of memory corruption scenarios, most likely use-after-free.
A signficant refactoring effort has been conducted to resolve these issues.
"""
[versions]
patched = [">= 0.7.15"]