CVE-2020-36434
2 advisories.
crates.io/sys-info CVE-2020-36434: critical 9.8, EPSS 1.23%
Double free in sys-info
Action: Upgrade sys-info to 0.8.0 or later.
cargo update -p sys-info --precise 0.8.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.8.0 | - |
Fixed versions
| 0.8.0 |
Sources
- osv: GHSA-2f5j-3mhq-xv58
- https://nvd.nist.gov/vuln/detail/CVE-2020-36434
- https://github.com/FillZpp/sys-info-rs/issues/63
- https://github.com/FillZpp/sys-info-rs
- https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/sys-info/RUSTSEC-2020-0100.md
- https://rustsec.org/advisories/RUSTSEC-2020-0100.html
CVE-2020-36434 · published · modified · JSON
crates.io/sys-info CVE-2020-36434: critical 9.8, EPSS 1.23%
Double free when calling `sys_info::disk_info` from multiple threads
Action: Upgrade sys-info to 0.8.0 or later.
cargo update -p sys-info --precise 0.8.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.0-0 | 0.8.0 | - |
Fixed versions
| 0.8.0 |
Sources
- osv: RUSTSEC-2020-0100
- https://crates.io/crates/sys-info
- https://rustsec.org/advisories/RUSTSEC-2020-0100.html
- https://github.com/FillZpp/sys-info-rs/issues/63
CVE-2020-36434 · published · modified · JSON