An issue was discovered in the http crate before 0.1.20 for Rust. The HeaderMap::Drain API can use a raw pointer, defeating soundness.
The product calls free() twice on the same memory address.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Http | Hyper | * | 0.1.20 (excluding) |
| Rust-http | Ubuntu | focal | * |
| Rust-http | Ubuntu | groovy | * |
| Rust-http | Ubuntu | hirsute | * |
| Rust-http | Ubuntu | impish | * |
| Rust-http | Ubuntu | kinetic | * |
| Rust-http | Ubuntu | lunar | * |
| Rust-http | Ubuntu | mantic | * |
| Rust-http | Ubuntu | oracular | * |
| Rust-http | Ubuntu | trusty | * |