critical9.8
CVE-2021-45705
An issue was discovered in the nanorand crate before 0.6.1 for Rust.
Impact
An issue was discovered in the nanorand crate before 0.6.1 for Rust. There can be multiple mutable references to the same object because the TlsWyRand Deref implementation dereferences a raw pointer.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nanorand Project | Nanorand | from 0.5.0 before 0.6.1 |
References
- NVD record
- CVE.org record
- https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/nanorand/RUSTSEC-2021-0114.md
- https://rustsec.org/advisories/RUSTSEC-2021-0114.html
- https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/nanorand/RUSTSEC-2021-0114.md
- https://rustsec.org/advisories/RUSTSEC-2021-0114.html