Описание
Double-Free / Use-After-Free (UAF) in the IntoIter::drop and ThinVec::clear functions in the thin_vec crate. A panic in ptr::drop_in_place skips setting the length to zero.
A flaw was found in the thin_vec component of mozilla/thin-vec. This vulnerability involves a memory management error known as a Double-Free/Use-After-Free (UAF), which occurs in the IntoIter::drop and ThinVec::clear functions. When a specific error condition (a panic in ptr::drop_in_place) is triggered, the system fails to correctly manage memory, potentially allowing an attacker to execute malicious code or cause the application to crash, leading to a denial of service.
Отчет
This vulnerability affects version 0.2.15 of thin-vec, which is not included in any Red Hat products.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 10 | firefox | Not affected | ||
| Red Hat Enterprise Linux 10 | gjs | Not affected | ||
| Red Hat Enterprise Linux 10 | rust | Not affected | ||
| Red Hat Enterprise Linux 10 | thunderbird | Not affected | ||
| Red Hat Enterprise Linux 7 | firefox | Not affected | ||
| Red Hat Enterprise Linux 8 | firefox | Not affected | ||
| Red Hat Enterprise Linux 8 | rust-toolset:rhel8/rust | Not affected | ||
| Red Hat Enterprise Linux 8 | thunderbird | Not affected | ||
| Red Hat Enterprise Linux 9 | firefox | Not affected | ||
| Red Hat Enterprise Linux 9 | gjs | Not affected |
Показывать по
Дополнительная информация
Статус:
EPSS
7.3 High
CVSS3
Связанные уязвимости
Double-Free / Use-After-Free (UAF) in the `IntoIter::drop` and `ThinVec::clear` functions in the thin_vec crate. A panic in `ptr::drop_in_place` skips setting the length to zero.
Double-Free / Use-After-Free (UAF) in the `IntoIter::drop` and `ThinVec::clear` functions in the thin_vec crate. A panic in `ptr::drop_in_place` skips setting the length to zero.
Double-Free / Use-After-Free (UAF) in the `IntoIter::drop` and `ThinVe ...
thin-vec: Use-After-Free and Double Free in IntoIter::drop When Element Drop Panics
EPSS
7.3 High
CVSS3