CVE-2020-36317 - log back

CVE-2020-36317 edited at 12 Apr 2021 09:42:37
Severity
- Unknown
+ Medium
Remote
- Unknown
+ Remote
Type
- Unknown
+ Incorrect calculation
Description
+ In the standard library in Rust before 1.49.0, String::retain() function has a panic safety problem. It allows creation of a non-UTF-8 Rust string when the provided closure panics. This bug could result in a memory safety violation when other string APIs assume that UTF-8 encoding is used on the same string.
References
+ https://github.com/rust-lang/rust/issues/78498
+ https://github.com/rust-lang/rust/pull/78499
+ https://github.com/rust-lang/rust/commit/48c4afbf9c29880dd946067d1c9aee1e7f75834a
Notes
CVE-2020-36317 created at 12 Apr 2021 09:41:29