github.com
https://github.com/rusqlite/rusqlite CVE-2020-35866
CRITICAL
Data races in rusqlite
Record summary
CVE-2020-35866 has a selected CVSS score of 9.8 (critical).
Description
An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via VTab / VTabCursor.
Description source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
rusqliteBrowse crates.io / rusqlite | GitHub Advisory | Before 0.23.0 · Fixed in 0.23.0 | affected |
References
5github.com
https://github.com/rusqlite/rusqlite/commit/c9ef5bd63cad5c0c123344c072b490a1a9bcbe1f github.com
https://github.com/rusqlite/rusqlite/releases/tag/0.23.0 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2020-35866 rustsec.org
https://rustsec.org/advisories/RUSTSEC-2020-0014.html