
Cloud Vulnerability DB
A community-led vulnerabilities database
An issue was discovered in the slice-deque crate through 2021-02-19 for Rust. A double drop can occur in SliceDeque::drain_filter upon a panic in a predicate function (RUSTSEC Advisory, NVD).
The vulnerability occurs when the drain filter iterator increments its current index before calling the predicate function. If the predicate function panics, it can cause the last element in the iterator to be dropped twice, leading to a memory corruption issue. The vulnerability has been assigned a CVSS v3.1 base score of 7.5 (HIGH) with vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (RUSTSEC Advisory).
The vulnerability can lead to memory corruption through double-free of elements when a panic occurs in the predicate function. This primarily affects system availability, with no direct impact on confidentiality or integrity (RUSTSEC Advisory).
As of the advisory date, there are no patched versions available. Users should avoid using the drain_filter functionality in situations where the predicate function might panic (RUSTSEC Advisory).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."