CVE-2020-35871: 
Rust vulnerability analysis and mitigation

A memory safety vulnerability (CVE-2020-35871) was discovered in the rusqlite crate versions prior to 0.23.0 for Rust. The vulnerability specifically involves a data race condition in the Auxdata API that could violate memory safety (NVD, RustSec).

The vulnerability has been assigned a CVSS v3.1 Base Score of 8.1 (HIGH) with the vector string CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. The issue specifically relates to a data race condition in the Auxdata API implementation that could lead to memory safety violations. The vulnerability is classified under CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization) (NVD).

The vulnerability could potentially lead to memory safety violations, which might result in unauthorized access to memory contents, system crashes, or potential code execution. The high CVSS score indicates that successful exploitation could lead to significant impacts on the confidentiality, integrity, and availability of affected systems (NVD).

The vulnerability requires network access but has high attack complexity. No authentication is required to exploit the vulnerability, though no user interaction is needed. The attack vector is network-accessible, making it potentially exploitable remotely (NVD).

The vulnerability has been fixed in rusqlite version 0.23.0. Users are advised to upgrade to this version or later to address the security issue. The fix includes changes to the Auxdata API implementation to prevent the data race condition (Github Release).