CVE-2020-36212: 
Rust vulnerability analysis and mitigation

An issue was discovered in the abi_stable crate before 0.9.1 for Rust. The vulnerability involves the DrainFilter functionality which lacks soundness due to a double drop issue (RustSec Advisory). The vulnerability was reported on December 21, 2020, and officially issued on January 20, 2021.

The vulnerability stems from code inherited from the Rust standard library that contained soundness bugs. Specifically, it relates to rust-lang/rust#60977 which causes a double drop condition. The vulnerability has been assigned a CVSS v3.1 base score of 7.5 (HIGH) with a vector string of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (RustSec Advisory).

The vulnerability primarily affects the availability of systems using the affected versions of the abi_stable crate. The CVSS metrics indicate high impact on availability while showing no direct impact on confidentiality or integrity (RustSec Advisory).

The vulnerability has a network attack vector with low attack complexity, requiring no privileges or user interaction to exploit. This makes it relatively straightforward to exploit in scenarios where the vulnerable code is exposed (RustSec Advisory).

The vulnerability was fixed in version 0.9.1 of the abi_stable crate. The fix implemented was similar to the one made in the Rust standard library. Users should upgrade to version 0.9.1 or later to mitigate this vulnerability (RustSec Advisory).