CRITICAL9.8

GHSA-3vjm-36rr-7qrq

NULL Pointer Dereference in cbox

Details

An issue was discovered in the cbox crate through 2020-03-19 for Rust. The CBox API allows dereferencing raw pointers without a requirement for unsafe code.

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io/cbox

Introduced in: 0

No fixed version published yet for cbox. Pin to a known-safe version or switch to an alternative.

References

https://nvd.nist.gov/vuln/detail/CVE-2020-35860[ADVISORY]
https://github.com/TomBebbington/cbox-rs/issues/2[WEB]
https://github.com/TomBebbington/cbox-rs[PACKAGE]
https://rustsec.org/advisories/RUSTSEC-2020-0005.html[WEB]