crates.io/sys-info CVE-2020-36434: critical 9.8, EPSS 1.23%

Double free when calling `sys_info::disk_info` from multiple threads

Action: Upgrade sys-info to 0.8.0 or later.

cargo update -p sys-info --precise 0.8.0

Affected

Fixed versions

Sources

• osv: RUSTSEC-2020-0100
• https://crates.io/crates/sys-info
• https://rustsec.org/advisories/RUSTSEC-2020-0100.html
• https://github.com/FillZpp/sys-info-rs/issues/63

CVE-2020-36434 · published 2020-05-31T12:00:00Z · modified 2023-11-08T04:03:44.601087Z · JSON