critical9.8
CVE-2021-25907
Double free in containers
Impact
Upon panic in a user-provided function f, fn mutate() & fn mutate2 drops twice a same object. Affected versions of this crate did not guard against double drop while temporarily duplicating an object's ownership with ptr::read(). Dropping a same object can result in memory corruption. The flaw was corrected in version "0.9.11" by fixing the code to abort upon panic.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| rust | containers | < 0.9.11 | 0.9.11 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Containers Project | Containers | before 0.9.11 |