RUSTSEC-2020-0073: 
Rust vulnerability analysis and mitigation

An issue was discovered in the image crate before version 0.23.12 for Rust, involving a mutable reference with immutable provenance. The vulnerability was disclosed on December 31, 2020, and was assigned CVE-2020-35916 (NVD, RUSTSEC).

The vulnerability has been assigned a CVSS v3.1 Base Score of 5.5 (Medium) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H. The technical nature of the issue involves incorrect handling of mutable references in the context of LLVM IR operations. The vulnerability is categorized under CWE-400 (Uncontrolled Resource Consumption) (NVD).

The vulnerability primarily affects the availability of the system, as indicated by the CVSS metrics showing High impact on Availability while having No impact on Confidentiality and Integrity. The local nature of the vulnerability (AV:L) suggests that the impact is limited to the local system (NVD).

The vulnerability requires local access (AV:L), low attack complexity (AC:L), and low privileges (PR:L) to exploit. No user interaction (UI:N) is required for exploitation (NVD).

The vulnerability has been fixed in version 0.23.12 of the image crate. Users should upgrade to this version or later to mitigate the issue (RUSTSEC).