high8.1
CVE-2020-35871
Data races in rusqlite
Impact
An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via an Auxdata API data race.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| rust | rusqlite | < 0.23.0 | 0.23.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rusqlite Project | Rusqlite | before 0.23.0 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/rusqlite/rusqlite/releases/tag/0.23.0
- https://rustsec.org/advisories/RUSTSEC-2020-0014.html
- https://github.com/advisories/GHSA-rjh8-p66p-jrh5
- https://nvd.nist.gov/vuln/detail/CVE-2020-35871
- https://github.com/rusqlite/rusqlite/commit/2ef3628dac35aeba0a97d5fb3a57746b4e1d62b3