CVE-2020-35876
2 advisories.
crates.io/rio CVE-2020-35876: critical 9.8, EPSS 1.56%
Use after free in rio
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.9.4 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-8rc5-mr4f-m243
- https://nvd.nist.gov/vuln/detail/CVE-2020-35876
- https://github.com/spacejam/rio/issues/11
- https://github.com/spacejam/rio/pull/31
- https://github.com/spacejam/rio
- https://rustsec.org/advisories/RUSTSEC-2020-0021.html
CVE-2020-35876 · published · modified · JSON
crates.io/rio CVE-2020-35876: critical 9.8, EPSS 1.56%
rio allows a use-after-free buffer access when a future is leaked
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.0-0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: RUSTSEC-2020-0021
- https://crates.io/crates/rio
- https://rustsec.org/advisories/RUSTSEC-2020-0021.html
- https://github.com/spacejam/rio/issues/11
CVE-2020-35876 · published · modified · JSON