Vulnerability Description
In the standard library in Rust before 1.2.0, BinaryHeap is not panic-safe. The binary heap is left in an inconsistent state when the comparison of generic elements inside sift_up or sift_down_range panics. This bug leads to a drop of zeroed memory as an arbitrary type, which can result in a memory safety violation.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Rust-Lang | Rust | < 1.2.0 |
Related Weaknesses (CWE)
References
- https://github.com/rust-lang/rust/issues/25842ExploitIssue TrackingPatch
- https://github.com/rust-lang/rust/pull/25856Issue TrackingPatchThird Party Advisory
- https://github.com/rust-lang/rust/issues/25842ExploitIssue TrackingPatch
- https://github.com/rust-lang/rust/pull/25856Issue TrackingPatchThird Party Advisory
FAQ
What is CVE-2015-20001?
CVE-2015-20001 is a vulnerability with a CVSS score of 7.5 (HIGH). In the standard library in Rust before 1.2.0, BinaryHeap is not panic-safe. The binary heap is left in an inconsistent state when the comparison of generic elements inside sift_up or sift_down_range p...
How severe is CVE-2015-20001?
CVE-2015-20001 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-20001?
Check the references section above for vendor advisories and patch information. Affected products include: Rust-Lang Rust.