mirror of
https://github.com/OMGeeky/advisory-db.git
synced 2026-02-23 15:38:27 +01:00
23 lines
657 B
TOML
23 lines
657 B
TOML
[advisory]
|
|
id = "RUSTSEC-2018-0009"
|
|
package = "crossbeam"
|
|
date = "2018-12-09"
|
|
title = "MsQueue and SegQueue suffer from double-free"
|
|
url = "https://github.com/crossbeam-rs/crossbeam-epoch/issues/82"
|
|
keywords = ["concurrency", "memory-management", "memory-corruption"]
|
|
description = """
|
|
Even if an element is popped from a queue, crossbeam would run its
|
|
destructor inside the epoch-based garbage collector. This is a source
|
|
of double frees.
|
|
|
|
The flaw was corrected by wrapping elements inside queues in a
|
|
`ManuallyDrop`.
|
|
|
|
Thanks to @c0gent for reporting the issue.
|
|
"""
|
|
aliases = ["CVE-2018-20996"]
|
|
|
|
[versions]
|
|
patched = [">= 0.4.1"]
|
|
unaffected = ["< 0.4.0"]
|