CVE-2020-35893
3 advisories.
crates.io/simple-slab CVE-2020-35892, CVE-2020-35893: critical 9.1, EPSS 1.53%
Out of bounds read in simple-slab
Action: Upgrade simple-slab to 0.3.3 or later.
cargo update -p simple-slab --precise 0.3.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.3.3 | - |
Fixed versions
| 0.3.3 |
Sources
- osv: GHSA-438g-fx34-4h9m
- https://nvd.nist.gov/vuln/detail/CVE-2020-35892
- https://github.com/nathansizemore/simple-slab/issues/2
- https://github.com/nathansizemore/simple-slab
- https://rustsec.org/advisories/RUSTSEC-2020-0039.html
CVE-2020-35892, CVE-2020-35893 · published · modified · JSON
crates.io/simple-slab CVE-2020-35892, CVE-2020-35893: high 7.5, EPSS 1.53%
Off-by-one error in simple-slab
Action: Upgrade simple-slab to 0.3.3 or later.
cargo update -p simple-slab --precise 0.3.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.3.3 | - |
Fixed versions
| 0.3.3 |
Sources
- osv: GHSA-hqc8-j86x-2764
- https://nvd.nist.gov/vuln/detail/CVE-2020-35893
- https://github.com/nathansizemore/simple-slab/issues/2
- https://github.com/nathansizemore/simple-slab/commit/5e0524c1db836e2192e1cd818848d96937c0b587
- https://github.com/nathansizemore/simple-slab
- https://rustsec.org/advisories/RUSTSEC-2020-0039.html
CVE-2020-35892, CVE-2020-35893 · published · modified · JSON
crates.io/simple-slab CVE-2020-35892, CVE-2020-35893: unknown, EPSS 1.53%
`index()` allows out-of-bound read and `remove()` has off-by-one error
Action: Upgrade simple-slab to 0.3.3 or later.
cargo update -p simple-slab --precise 0.3.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.0-0 | 0.3.3 | - |
Fixed versions
| 0.3.3 |
Sources
- osv: RUSTSEC-2020-0039
- https://crates.io/crates/simple-slab
- https://rustsec.org/advisories/RUSTSEC-2020-0039.html
- https://github.com/nathansizemore/simple-slab/issues/2
CVE-2020-35892, CVE-2020-35893 · published · modified · JSON