1 line
1.5 KiB
JSON
1 line
1.5 KiB
JSON
{"schema_version":"1.7.5","id":"RUSTSEC-2018-0019","published":"2018-06-08T12:00:00Z","modified":"2026-06-01T14:30:04.613921380Z","aliases":["CVE-2018-25024","CVE-2018-25025","CVE-2018-25026","GHSA-7x36-h62w-vw65","GHSA-9qj6-4rfq-vm84","GHSA-fgfm-hqjw-3265","GHSA-w65j-g6c7-g3m4"],"summary":"Multiple memory safety issues","details":"Affected versions contain multiple memory safety issues, such as:\n\n - Unsoundly coercing immutable references to mutable references\n - Unsoundly extending lifetimes of strings\n - Adding the `Send` marker trait to objects that cannot be safely sent between threads\n\nThis may result in a variety of memory corruption scenarios, most likely use-after-free.\n \nA significant refactoring effort has been conducted to resolve these issues.","affected":[{"package":{"name":"actix-web","ecosystem":"crates.io","purl":"pkg:cargo/actix-web"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"},{"fixed":"0.7.20-0"}]}],"ecosystem_specific":{"affected_functions":null,"affects":{"arch":[],"functions":[],"os":[]}},"database_specific":{"categories":["memory-corruption"],"cvss":null,"informational":null,"source":"https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2018-0019.json"}}],"references":[{"type":"PACKAGE","url":"https://crates.io/crates/actix-web"},{"type":"ADVISORY","url":"https://rustsec.org/advisories/RUSTSEC-2018-0019.html"},{"type":"REPORT","url":"https://github.com/actix/actix-web/issues/289"}],"database_specific":{"license":"CC0-1.0"}} |