GHSA-c3cw-c387-pj65

ghsaUSosv

Double free in crossbeam

view advisory published 2021-08-25Licence: CC-BY-4.0

Even if an element is popped from a queue, crossbeam would run its destructor inside the epoch-based garbage collector. This is a source of double frees. The flaw was corrected by wrapping elements inside queues in a ManuallyDrop.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2018-20996US	critical9.8	1.74% (78th)	—	2019-08-26
An issue was discovered in the crossbeam crate before 0.4.1 for Rust. There is a double free because of destructor mishandling.

references

External citations — patches, advisories, analysis.

https://github.com/crossbeam-rs/crossbeam-epochPACKAGE
https://github.com/crossbeam-rs/crossbeam-epoch/issues/82WEB
https://nvd.nist.gov/vuln/detail/CVE-2018-20996ADVISORY
https://rustsec.org/advisories/RUSTSEC-2018-0009.htmlWEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan