{"id":"CVE-2021-26954","aliases":["RUSTSEC-2021-0018"],"url":"https://o3.security/vulnerability/CVE-2021-26954","summary":"insert_slice_clone can double drop if Clone panics.","details":"Affected versions of this crate used ptr::copy when inserting into the middle of a Vec. When ownership was temporarily duplicated during this copy, it calls the clone method of a user provided element.\n\nThis issue can result in an element being double-freed if the clone call panics.\n\nCommit `20cb73d` fixed this issue by adding a set_len(0) call before operating on the vector to avoid dropping the elements during a panic.","published":"2022-05-24T17:41:47Z","modified":"2023-11-08T04:05:23.024619Z","cvss":{"score":5.3,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},"epss":null,"cisaKev":null,"exploitsKnown":1,"affectedPackages":[{"ecosystem":"crates.io","name":"qwutils","fixedVersion":"0.3.1"}],"fix":{"url":"https://github.com/qwertz19281/rust_utils/commit/20cb73d","label":"qwertz19281/rust_utils@20cb73d"},"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-26954"},{"type":"WEB","url":"https://github.com/qwertz19281/rust_utils/issues/3"},{"type":"WEB","url":"https://github.com/qwertz19281/rust_utils/commit/20cb73d"},{"type":"PACKAGE","url":"https://github.com/qwertz19281/rust_utils"},{"type":"WEB","url":"https://rustsec.org/advisories/RUSTSEC-2021-0018.html"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2023-11-08T04:05:23.024619Z"}}