Ecosyste.ms: Advisories

Security Advisories: MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXJjY3EtajJtNy04Zndy

Double-free in id-map

A double free can occur in remove_set upon a panic in a Drop impl. When removing a set of elements, ptr::drop_in_place is called on each of the element to be removed. If the Drop impl of one of these elements panics then the previously dropped elements can be dropped again.

Permalink: https://github.com/advisories/GHSA-rccq-j2m7-8fwr
JSON: https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXJjY3EtajJtNy04Zndy
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Critical
Classification: General
Published: over 2 years ago
Updated: 11 months ago

CVSS Score: 9.8
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Identifiers: GHSA-rccq-j2m7-8fwr, CVE-2021-30457
References:

• https://nvd.nist.gov/vuln/detail/CVE-2021-30457
• https://github.com/andrewhickman/id-map/issues/3
• https://rustsec.org/advisories/RUSTSEC-2021-0052.html
• https://github.com/advisories/GHSA-rccq-j2m7-8fwr

Repository: https://github.com/andrewhickman/id-map
Blast Radius: 0.0

Affected Packages