github.com
https://github.com/rusqlite/rusqlite CVE-2020-35868
CRITICAL
Data races in rusqlite
Record summary
CVE-2020-35868 has a selected CVSS score of 9.8 (critical).
Description
An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via UnlockNotification.
Description source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
rusqliteBrowse crates.io / rusqlite | GitHub Advisory | Before 0.23.0 · Fixed in 0.23.0 | affected |
References
5github.com
https://github.com/rusqlite/rusqlite/commit/45fd77ee43c38eea4d6f4e2e56c1667a55ec654f github.com
https://github.com/rusqlite/rusqlite/releases/tag/0.23.0 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2020-35868 rustsec.org
https://rustsec.org/advisories/RUSTSEC-2020-0014.html