Fix CVE–2021–29940

[debricked]

CVE–2021–29940

Vulnerability details

Description

Double Free

The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.

NVD

An issue was discovered in the through crate through 2021-02-18 for Rust. There is a double free (in through and through_and) upon a panic of the map function.

GitHub

Double free in through

An issue was discovered in the through crate through 2021-02-18 for Rust. There is a double free (in through and through_and) upon a panic of the map function.

CVSS details - 9.8

 

CVSS3 metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User interaction	None
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

References

    Double free in through · CVE-2021-29940 · GitHub Advisory Database · GitHub
    NVD - CVE-2021-29940
    RUSTSEC-2021-0049: through: through and through_and causes a double free if the map function panics › RustSec Advisory Database
    double free of T upon panic in two functions · Issue #1 · gretchenfrage/through · GitHub

 

Related information

📌 Remember! Check the changes to ensure they don't introduce any breaking changes.
📚 Read more about the CVE