CVE-2020-35711

Katalog CVE

CVSS 7.5 · High EPSS 1,6%

Kerentanan pada arc-swap project arc-swap. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

An issue has been discovered in the arc-swap crate before 0.4.8 (and 1.x before 1.1.0) for Rust. Use of arc_swap::access::Map with the Constant test helper (or with a user-supplied implementation of the Access trait) could sometimes lead to dangling references being returned by the map.

Rincian

Terbit di NVD

25 Desember 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

EPSS (30 hari)

1,6% peluang dieksploitasi; lebih tinggi dari 75,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/vorner/arc-swap/issues/45 exploit · patch · advisory pihak ketiga
• https://rustsec.org/advisories/RUSTSEC-2020-0091.html advisory pihak ketiga