GitHub Advisoryadvisory · crates.io
GHSA-r57r-j98g-587f Pointer dereference in nanorand
CRITICAL
Official page ↗
- Aliases
- CVE-2021-45705
- Ecosystem
- crates.io
- Packages
- nanorand
- Severity
- Critical
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Reviewed
- 2022-01-05
Affected packages
• crates.io nanorand: >= 0.5.0, < 0.6.1 → fixed in 0.6.1
Description
An issue was discovered in the nanorand crate before 0.6.1 for Rust. There can be multiple mutable references to the same object because the TlsWyRand Deref implementation dereferences a raw pointer.
Related
Alias · CVE (1)
- CVE-2021-45705 An issue was discovered in the nanorand crate before 0.6.1 for Rust. vulnerability
References
- https://nvd.nist.gov/vuln/detail/CVE-2021-45705 advisory
- https://github.com/Absolucy/nanorand-rs/issues/28 web
- https://github.com/Absolucy/nanorand-rs package
- https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/nanorand/RUSTSEC-2021-0114.md web
- https://rustsec.org/advisories/RUSTSEC-2021-0114.html web