CVE-2019-25009: Double Free
Published Dec 31, 2020
·Updated
An issue was discovered in the http crate before 0.1.20 for Rust. The HeaderMap::Drain API can use a raw pointer, defeating soundness.
Affected Software
1 affected component
hyper Http Rust<0.1.20
Event History
Dec 31, 2020
CVE Published
via MITRE·08:31 AM
Data Sourced
via MITRE·08:31 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-25009?
The severity of CVE-2019-25009 is categorized as a moderate risk due to potential soundness issues.
2
How do I fix CVE-2019-25009?
To fix CVE-2019-25009, upgrade the http crate to version 0.1.20 or later.
3
What software is affected by CVE-2019-25009?
CVE-2019-25009 affects the http crate in Rust versions prior to 0.1.20.
4
What impact does CVE-2019-25009 have on software?
CVE-2019-25009 can lead to unsafe behavior in applications using the HeaderMap::Drain API.
5
Is CVE-2019-25009 exploitable?
While CVE-2019-25009 may not be easily exploitable, it can result in undefined behavior in Rust applications.