Executive brief
Bug in SliceDeque::move_head_unchecked allows read of corrupted memory
Affected products
- crates.io slice-deque
Junglewise Threat Intelligence
CVE-2018-20995: RUSTSEC-2018-0008 - Bug in SliceDeque::move_head_unchecked allows read of corrupted memory
CVE-2018-20995 · Severity: low · CVSS 3 · Published 2018-12-05
Technologies: slice-deque (crates.io). Vendors: crates.io.
Related threats
- Slice Ring Buffer and Slice Deque contains four unique double-free vulnerabilities triggered through safe APIs
- RUSTSEC-2021-0047 - SliceDeque::drain_filter can double drop an element if the predicate panics
- RUSTSEC-2020-0158 - slice-deque is unmaintained
- RUSTSEC-2019-0002 - Bug in SliceDeque::move_head_unchecked corrupts its memory