Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2020-15254
PUBLISHED
More InfoOfficial Page
Assigner-GitHub_M
Assigner Org ID-a0819718-46f1-4df5-94e2-005712e83aaa
View Known Exploited Vulnerability (KEV) details
Published At-16 Oct, 2020 | 17:05
Updated At-04 Aug, 2024 | 13:08
Rejected At-
▼CVE Numbering Authority (CNA)
Undefined Behavior in bounded Crossbeam channel

Crossbeam is a set of tools for concurrent programming. In crossbeam-channel before version 0.4.4, the bounded channel incorrectly assumes that `Vec::from_iter` has allocated capacity that same as the number of iterator elements. `Vec::from_iter` does not actually guarantee that and may allocate extra memory. The destructor of the `bounded` channel reconstructs `Vec` from the raw pointer based on the incorrect assumes described above. This is unsound and causing deallocation with the incorrect capacity when `Vec::from_iter` has allocated different sizes with the number of iterator elements. This has been fixed in crossbeam-channel 0.4.4.

Affected Products
Vendor
crossbeam-rs
Product
crossbeam
Versions
Affected
  • < 0.4.4
Problem Types
TypeCWE IDDescription
CWECWE-119{"CWE-119":"Improper Restriction of Operations within the Bounds of a Memory Buffer"}
Metrics
VersionBase scoreBase severityVector
3.18.1HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-v5m7-53cv-f3hx
x_refsource_CONFIRM
https://github.com/crossbeam-rs/crossbeam/issues/539
x_refsource_MISC
https://github.com/crossbeam-rs/crossbeam/pull/533
x_refsource_MISC
https://github.com/RustSec/advisory-db/pull/425
x_refsource_MISC
▼Authorized Data Publishers (ADP)
CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-v5m7-53cv-f3hx
x_refsource_CONFIRM
x_transferred
https://github.com/crossbeam-rs/crossbeam/issues/539
x_refsource_MISC
x_transferred
https://github.com/crossbeam-rs/crossbeam/pull/533
x_refsource_MISC
x_transferred
https://github.com/RustSec/advisory-db/pull/425
x_refsource_MISC
x_transferred
Details not found