crates.io/linked_list_allocator CVE-2022-36086: high 8.4
linked_list_allocator vulnerable to out-of-bound writes on `Heap` initialization and `Heap::extend`
Action: Upgrade linked_list_allocator to 0.10.2 or later.
cargo update -p linked_list_allocator --precise 0.10.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.10.2 | - |
Fixed versions
| 0.10.2 |
Sources
- osv: GHSA-xg8p-34w2-j49j
- https://github.com/rust-osdev/linked-list-allocator/security/advisories/GHSA-xg8p-34w2-j49j
- https://nvd.nist.gov/vuln/detail/CVE-2022-36086
- https://github.com/rust-osdev/linked-list-allocator/commit/013b0758643943e8df5b17bbb495460ff47e8bbf
- https://github.com/advisories/GHSA-xg8p-34w2-j49j
- https://github.com/rust-osdev/linked-list-allocator
- https://rustsec.org/advisories/RUSTSEC-2022-0063.html
CVE-2022-36086 · published · modified · JSON