GitHub Advisoryadvisory · crates.io

GHSA-hqc8-j86x-2764 Off-by-one error in simple-slab

HIGH Published 2021-08-25 Modified 2021-08-19 Official page ↗
Aliases
CVE-2020-35893
Ecosystem
crates.io
Packages
simple-slab
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-193
Reviewed
2021-08-19

Affected packages

• crates.io simple-slab: < 0.3.3 → fixed in 0.3.3

Description

An issue was discovered in the simple-slab crate before 0.3.3 for Rust. remove() has an off-by-one error, causing memory leakage and a drop of uninitialized memory.

Related

Alias · CVE (1)

  • CVE-2020-35893 An issue was discovered in the simple-slab crate before 0.3.3 for Rust. vulnerability

Weakness · CWE (1)

  • CWE-193 Off-by-one Error weakness

References