Lucene search

K
alpinelinuxAlpine Linux Development TeamALPINE:CVE-2020-36317
HistoryApr 11, 2021 - 8:15 p.m.

CVE-2020-36317

2021-04-1120:15:00
Alpine Linux Development Team
security.alpinelinux.org
4
rust
string::retain()
panic safety

EPSS

0.002

Percentile

52.4%

In the standard library in Rust before 1.49.0, String::retain() function has a panic safety problem. It allows creation of a non-UTF-8 Rust string when the provided closure panics. This bug could result in a memory safety violation when other string APIs assume that UTF-8 encoding is used on the same string.

OSVersionArchitecturePackageVersionFilename
Alpine3.13-communitynoarchrust= 1.47.0-r2UNKNOWN