Out-of-Bounds Read Vulnerability in Rust's Simple-Slab Crate
CVE-2020-35892

9.1CRITICAL

Key Information:

Vendor

Simple-slab Project

Status
Simple-slab
Vendor
CVE Published:
31 December 2020

What is CVE-2020-35892?

An issue in the simple-slab crate, prior to version 0.3.3, allows for an out-of-bounds read due to improper handling of index access. This flaw could potentially be exploited by an attacker to access memory outside the intended bounds, which may lead to unexpected behavior or security risks. Users of affected versions should upgrade to mitigate potential security implications.

References

https://rustsec.org/advisories/RUSTSEC-2020-0039.html
x_refsource_MISC

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.