GitHub Advisoryadvisory · crates.io

GHSA-7j44-fv4x-79g9 Improper Input Validation in once_cell

HIGH Published 2021-08-25 Modified 2023-06-13 Official page ↗
Aliases
CVE-2019-16141
Ecosystem
crates.io
Packages
once_cell
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-20
Reviewed
2021-08-19

Affected packages

• crates.io once_cell: >= 0.2.5, < 1.0.1 → fixed in 1.0.1

Description

If during the first dereference of Lazy the initialization function panics, subsequent dereferences will execute std::hints::unreachable_unchecked. Applications with panic = "abort" are not affected, as there will be no subsequent dereferences.

Related

Alias · CVE (1)

  • CVE-2019-16141 An issue was discovered in the once_cell crate before 1.0.1 for Rust. vulnerability

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References