Description
An issue was discovered in the string-interner crate before 0.7.1 for Rust. It allows attackers to read from memory locations associated with dangling pointers, because of a cloning flaw.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| crates.io | string-interner | >= 0.7.0, < 0.7.1 | 0.7.1 | GHSA-49fq-pw77-6qxj |
| crates.io | string-interner | < 0.6.4 | 0.6.4 | GHSA-49fq-pw77-6qxj |
| crates.io | string-interner | >= 0.0.0-0, < 0.6.4 · >= 0.7.0-0, < 0.7.1 | 0.6.4, 0.7.1 | RUSTSEC-2019-0023 |