OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2026-02-23 15:38:27 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
cb9432ef2adc2cdeae9dfbe9ae0ffe4a4ed8b7e2
advisory-db/crates/ordnung/RUSTSEC-2020-0038.md
Yechan Bae 846dfb93a3 Update CVE numbers (#542)
2021-01-04 09:02:59 -08:00

532 B
Raw Blame History 

[advisory]
id = "RUSTSEC-2020-0038"
package = "ordnung"
aliases = ["CVE-2020-35890", "CVE-2020-35891"]
date = "2020-09-03"
url = "https://github.com/maciejhirsz/ordnung/issues/8"

[versions]
patched = []

Memory safety issues in compact::Vec

compact::Vec contains multiple memory safety issues.

  1. It mishandles large capacity and causes out-of-bound access in 32-bit / allocator layout mismatch in 64-bit.
  2. remove() is not panic-safe and causes double-free when an index larger than the length is provided.