Executive brief
SliceDeque::drain_filter can double drop an element if the predicate panics
Affected products
- crates.io slice-deque
Junglewise Threat Intelligence
CVE-2021-29938: RUSTSEC-2021-0047 - SliceDeque::drain_filter can double drop an element if the predicate panics
CVE-2021-29938 · Severity: low · CVSS 3.1 · Published 2021-02-19
Technologies: slice-deque (crates.io). Vendors: crates.io.
Related threats
- Slice Ring Buffer and Slice Deque contains four unique double-free vulnerabilities triggered through safe APIs
- RUSTSEC-2020-0158 - slice-deque is unmaintained
- RUSTSEC-2019-0002 - Bug in SliceDeque::move_head_unchecked corrupts its memory
- RUSTSEC-2018-0008 - Bug in SliceDeque::move_head_unchecked allows read of corrupted memory