rustsec-2020-0169
Vulnerability from osv_rustsec
Published
2020-02-07 12:00
Modified
2024-12-04 12:55
Summary
multi_mut is Unmaintained
Details
Last release was about 6 years ago.
There is an outstanding soundness issue.
The maintainer has not responded for two years to the existing soundness issue.
Rust compiler has enabled errors relating to LLVM noalias rules and may not compile anymore where as the old compiler versions had turned these off.
The maintainer has stated:
I will take no responsibility of undefined behaviour possibly caused by this crate.
This crate may or may not be suitable for use anymore given the outstanding issues.
{
"affected": [
{
"database_specific": {
"categories": [],
"cvss": null,
"informational": "unsound"
},
"ecosystem_specific": {
"affected_functions": null,
"affects": {
"arch": [],
"functions": [],
"os": []
}
},
"package": {
"ecosystem": "crates.io",
"name": "multi_mut",
"purl": "pkg:cargo/multi_mut"
},
"ranges": [
{
"events": [
{
"introduced": "0.0.0-0"
}
],
"type": "SEMVER"
}
],
"versions": []
}
],
"aliases": [],
"database_specific": {
"license": "CC0-1.0"
},
"details": "Last release was about 6 years ago.\n\nThere is an outstanding [soundness issue](https://github.com/golddranks/multi_mut/issues/1).\n\nThe maintainer has not responded for two years to the existing soundness issue.\n\nRust compiler has enabled errors relating to LLVM noalias rules and may not\ncompile anymore where as the old compiler versions had turned these off.\n\nThe maintainer has stated:\n\n\u003e I will take no responsibility of undefined behaviour possibly caused by this crate.\n\nThis crate may or may not be suitable for use anymore given the outstanding issues.",
"id": "RUSTSEC-2020-0169",
"modified": "2024-12-04T12:55:45Z",
"published": "2020-02-07T12:00:00Z",
"references": [
{
"type": "PACKAGE",
"url": "https://crates.io/crates/multi_mut"
},
{
"type": "ADVISORY",
"url": "https://rustsec.org/advisories/RUSTSEC-2020-0169.html"
},
{
"type": "REPORT",
"url": "https://github.com/golddranks/multi_mut/issues/1"
},
{
"type": "REPORT",
"url": "https://github.com/rust-lang/rust/issues/39155"
},
{
"type": "WEB",
"url": "https://www.reddit.com/r/rust/comments/5ofuun/multi_mut_multiple_mutable_references_to_hashmap/"
}
],
"related": [],
"severity": [],
"summary": "multi_mut is Unmaintained"
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…