Data races in rusqlite
An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via an Auxdata API data race.
01
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-35873US | critical9.8 | — | ||
An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated because sessions.rs has a use-after-free. | ||||
| CVE-2020-35872US | critical9.8 | — | ||
An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via the repr(Rust) type. | ||||
| CVE-2020-35871US | high8.1 | — | ||
An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via an Auxdata API data race. | ||||
| CVE-2020-35870US | critical9.8 | — | ||
An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via an Auxdata API use-after-free. | ||||
| CVE-2020-35869US | critical9.8 | — | ||
An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated because rusqlite::trace::log mishandles format strings. | ||||
| CVE-2020-35868US | critical9.8 | — | ||
An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via UnlockNotification. | ||||
| CVE-2020-35867US | critical9.8 | — | ||
An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via create_module. | ||||
| CVE-2020-35866US | critical9.8 | — | ||
An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via VTab / VTabCursor. | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/rusqlite/rusqlitePACKAGE
- https://github.com/rusqlite/rusqlite/commit/2ef3628dac35aeba0a97d5fb3a57746b4e1d62b3WEB
- https://github.com/rusqlite/rusqlite/releases/tag/0.23.0WEB
- https://nvd.nist.gov/vuln/detail/CVE-2020-35871ADVISORY
- https://rustsec.org/advisories/RUSTSEC-2020-0014.htmlWEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan