Critical · 9.8 CVE-2020-35866 CVE-2020-35867CVE-2020-35868CVE-2020-35869CVE-2020-35870CVE-2020-35871CVE-2020-35872CVE-2020-35873EUVD-2021-1601GHSA-28ph-f7gx-fqj8GHSA-3cgf-9m6x-pwwrGHSA-6q5w-m3c5-rv95GHSA-8h4j-vm3r-vcq3GHSA-8r7q-r9mx-35rhGHSA-g4w7-3qr8-5623GHSA-q3cc-7p7g-392cGHSA-rjh8-p66p-jrh5RUSTSEC-2020-0014

Data races in rusqlite

Published Dec 31, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Package: rusqlite Ecosystem: crates.io

Description

An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via VTab / VTabCursor.

Affected packages

Ecosystem	Package	Affected	Fixed	Record
crates.io	rusqlite	< 0.23.0	0.23.0	GHSA-28ph-f7gx-fqj8
crates.io	rusqlite	>= 0.0.0-0, < 0.23.0	0.23.0	RUSTSEC-2020-0014

References

https://rustsec.org/advisories/RUSTSEC-2020-0014.html
https://github.com/rusqlite/rusqlite/releases/tag/0.23.0