CVE-2020-35892: 
Rust vulnerability analysis and mitigation

An issue was discovered in the simple-slab crate before version 0.3.3 for Rust, where the index() function allows an out-of-bounds read. The vulnerability was discovered and reported on September 3, 2020, and officially issued on October 1, 2020. This security flaw is tracked as CVE-2020-35892 (RustSec Advisory, NVD).

The vulnerability stems from the Slab::index() function not performing proper boundary checking, which leads to out-of-bounds read access. The issue has been assigned a CVSS v3.1 Base Score of 9.1 CRITICAL with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H (NVD).

The vulnerability allows unauthorized out-of-bounds read access, which could potentially expose sensitive information from memory locations that should not be accessible. This could lead to information disclosure and potential system crashes (NVD).

The vulnerability can be exploited remotely without requiring any special privileges or user interaction. The attack complexity is considered low, making it relatively straightforward to exploit (NVD).

The vulnerability has been fixed in version 0.3.3 of the simple-slab crate. Users are advised to upgrade to this version or later to address the security issue (RustSec Advisory).