GitHub Advisoryadvisory · crates.io

GHSA-96w3-p368-4h8c Use after free in internment

HIGH Published 2021-08-25 Modified 2023-06-13 Official page ↗
Aliases
CVE-2020-35874
Ecosystem
crates.io
Packages
internment
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-362
Reviewed
2021-08-19

Affected packages

• crates.io internment: >= 0.3.12, < 0.4.0 → fixed in 0.4.0

Description

ArcIntern::drop has a race condition where it can release memory which is about to get another user. The new user will get a reference to freed memory. This was fixed by serializing access to an interned object while it is being deallocated. Versions prior to 0.3.12 used stronger locking which avoided the problem.

Related

Alias · CVE (1)

  • CVE-2020-35874 An issue was discovered in the internment crate through 2020-05-28 for Rust. vulnerability

Weakness · CWE (1)

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness

References