Vulnerabilities
Misconfiguration
Runtime Security
Compliance
CVE Vulnerabilities

CVE-2020-35711

Published: Dec 25, 2020 | Modified: Dec 30, 2020
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM
Additional information
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2020-35711
CWEhttps://cwe.mitre.org/data/definitions/.html

An issue has been discovered in the arc-swap crate before 0.4.8 (and 1.x before 1.1.0) for Rust. Use of arc_swap::access::Map with the Constant test helper (or with a user-supplied implementation of the Access trait) could sometimes lead to dangling references being returned by the map.

Affected Software

Name Vendor Start Version End Version
Arc-swap Arc-swap_project * 0.4.8 (excluding)
Arc-swap Arc-swap_project 1.0.0 (including) 1.1.0 (excluding)
Rust-arc-swap Ubuntu devel *
Rust-arc-swap Ubuntu esm-apps/focal *
Rust-arc-swap Ubuntu esm-apps/jammy *
Rust-arc-swap Ubuntu esm-apps/noble *
Rust-arc-swap Ubuntu focal *
Rust-arc-swap Ubuntu groovy *
Rust-arc-swap Ubuntu hirsute *
Rust-arc-swap Ubuntu impish *
Rust-arc-swap Ubuntu jammy *
Rust-arc-swap Ubuntu kinetic *
Rust-arc-swap Ubuntu lunar *
Rust-arc-swap Ubuntu mantic *
Rust-arc-swap Ubuntu noble *
Rust-arc-swap Ubuntu oracular *
Rust-arc-swap Ubuntu trusty *

References

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.
Copyright © 2024 Aqua Security Software Ltd.   Privacy Policy | Terms of Use