CVE-2018-20996: Double Free
An issue was discovered in the crossbeam crate before 0.4.1 for Rust. There is a double free because of destructor mishandling.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-20996?
CVE-2018-20996 is a vulnerability in the crossbeam crate before version 0.4.1 for Rust, which can lead to a double free due to destructor mishandling.
What is the impact of CVE-2018-20996?
CVE-2018-20996 has a severity rating of 9.8 (Critical) and can allow an attacker to execute arbitrary code or cause a denial of service.
How can I check if my software is affected by CVE-2018-20996?
To check if your software is affected by CVE-2018-20996, you can verify the version of the crossbeam crate used in your code. If the version is before 0.4.1, your software may be vulnerable.
How do I fix CVE-2018-20996?
To fix CVE-2018-20996, update the crossbeam crate to version 0.4.1 or later.
Where can I find more information about CVE-2018-20996?
You can find more information about CVE-2018-20996 at the following reference: [https://rustsec.org/advisories/RUSTSEC-2018-0009.html]