crates.io/sys-info CVE-2020-36434: critical 9.8, EPSS 1.23%

Double free in sys-info

Action: Upgrade sys-info to 0.8.0 or later.

cargo update -p sys-info --precise 0.8.0

Affected

Fixed versions

Sources

• osv: GHSA-2f5j-3mhq-xv58
• https://nvd.nist.gov/vuln/detail/CVE-2020-36434
• https://github.com/FillZpp/sys-info-rs/issues/63
• https://github.com/FillZpp/sys-info-rs
• https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/sys-info/RUSTSEC-2020-0100.md
• https://rustsec.org/advisories/RUSTSEC-2020-0100.html

CVE-2020-36434 · published 2021-08-25T20:58:15Z · modified 2023-11-08T04:03:44.601087Z · JSON