CVE-2019-25009
Double free in http
Summary
Double free in http
Original description
The description as published by the source.
An issue was discovered in the http crate before 0.1.20 for Rust. The HeaderMap::Drain API can use a raw pointer, defeating soundness.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
crates.io
http
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.1.20"}]}]
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2019-25009 rust-http Fixed in: 0.1.21-0.1
- Ubuntu UBUNTU-CVE-2019-25009 rust-http
References
- advisory nvd.nist.gov
- web rustsec.org