RUSTSEC-2021-0105: 
Rust vulnerability analysis and mitigation

A critical vulnerability was discovered in the abi_stable crate versions prior to 0.9.1 for Rust. The vulnerability, tracked as RUSTSEC-2021-0105, was published on January 26, 2021. The issue affects the DrainFilter functionality in the abi_stable crate, which could lead to memory safety violations (NVD CVE).

The vulnerability stems from a soundness issue in the DrainFilter implementation where a double drop condition can occur. The severity of this vulnerability is rated as HIGH with a CVSS v3.1 base score of 7.5 (Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). Under CVSS v2.0, it received a MEDIUM severity rating with a base score of 5.0 (Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P) (NVD CVE).

The vulnerability can lead to memory corruption due to the double drop condition, potentially causing application crashes or denial of service. The high availability impact (A:H) in the CVSS score indicates that the vulnerability could significantly impact system availability (NVD CVE).

The vulnerability has a network attack vector (AV:N) with low attack complexity (AC:L), requiring no privileges (PR:N) or user interaction (UI:N). This combination of factors makes the vulnerability relatively straightforward to exploit if left unpatched (NVD CVE).

Users are advised to upgrade to abi_stable version 0.9.1 or later, which contains the fix for this vulnerability. The vulnerability affects all versions of the crate prior to 0.9.1 (NVD CVE).