RUSTSEC-2020-0021: 
Rust vulnerability analysis and mitigation

A memory safety vulnerability was discovered in the rio crate through 2020-05-11 for Rust, identified as RUSTSEC-2020-0021 (CVE-2020-35876). The vulnerability allows for struct leakage that could potentially expose sensitive information, lead to use-after-free conditions, or cause data races (NVD).

The vulnerability has been assigned a CVSS v3.1 Base Score of 9.8 CRITICAL with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. Under CVSS v2.0, it received a Base Score of 7.5 HIGH with the vector (AV:N/AC:L/Au:N/C:P/I:P/A:P). The vulnerability is associated with CWE-416 (Use After Free) and CWE-772 (Missing Release of Resource after Effective Lifetime) (NVD).

The vulnerability can lead to multiple severe consequences including exposure of sensitive information through struct leakage, potential use-after-free conditions, and data races. These impacts could compromise the security and stability of affected systems (NVD).

The vulnerability is considered highly exploitable as indicated by its CVSS metrics, requiring no privileges (PR:N) and no user interaction (UI:N) for exploitation. It can be accessed over the network (AV:N) with low attack complexity (AC:L) (NVD).

The affected versions include all versions of the rio crate through 2020-05-11. Users should update to a patched version of the crate when available (NVD).