github.com
https://github.com/rusqlite/rusqlite CVE-2020-35871
HIGH
Data races in rusqlite
Record summary
CVE-2020-35871 has a selected CVSS score of 8.1 (high).
Description
An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via an Auxdata API data race.
Description source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
rusqliteBrowse crates.io / rusqlite | GitHub Advisory | Before 0.23.0 · Fixed in 0.23.0 | affected |
References
5github.com
https://github.com/rusqlite/rusqlite/commit/2ef3628dac35aeba0a97d5fb3a57746b4e1d62b3 github.com
https://github.com/rusqlite/rusqlite/releases/tag/0.23.0 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2020-35871 rustsec.org
https://rustsec.org/advisories/RUSTSEC-2020-0014.html