Memory Leakage and Uninitialized Memory Issue in Rust's simple-slab Crate
CVE-2020-35893

7.5HIGH

Key Information:

Vendor

Simple-slab Project

Status
Simple-slab
Vendor
CVE Published:
31 December 2020

What is CVE-2020-35893?

The simple-slab crate, prior to version 0.3.3, contains an off-by-one error in its remove() function, which can lead to memory leakage and the potential exposure of uninitialized memory. This vulnerability can compromise the stability and security of applications relying on the affected versions, making it crucial for developers to upgrade to the latest release to mitigate associated risks.

References

https://rustsec.org/advisories/RUSTSEC-2020-0039.html
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.