github.com
https://github.com/rusqlite/rusqlite CVE-2020-35867
CRITICAL
Data races in rusqlite
Record summary
CVE-2020-35867 has a selected CVSS score of 9.8 (critical).
Description
An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via create_module.
Description source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
rusqliteBrowse crates.io / rusqlite | GitHub Advisory | Before 0.23.0 · Fixed in 0.23.0 | affected |
References
5github.com
https://github.com/rusqlite/rusqlite/commit/3c6b57fe1b2cc87e7ebecde43dd836ffb1c4ea5c github.com
https://github.com/rusqlite/rusqlite/releases/tag/0.23.0 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2020-35867 rustsec.org
https://rustsec.org/advisories/RUSTSEC-2020-0014.html