VDB

CVE-2020-15254

CVE-2020-15254 PUBLISHED

Crossbeam is a set of tools for concurrent programming. In crossbeam-channel before version 0.4.4, the bounded channel incorrectly assumes that `Vec::from_iter` has allocated capacity that same as the number of iterator elements. `Vec::from_iter` does not actually guarantee that and may allocate extra memory. The destructor of the `bounded` channel reconstructs `Vec` from the raw pointer based on the incorrect assumes described above. This is unsound and causing deallocation with the incorrect capacity when `Vec::from_iter` has allocated different sizes with the number of iterator elements. This has been fixed in crossbeam-channel 0.4.4.

EPSS 0.62% · 70.5th percentile

Risk Scores

EPSS Score
0.62%
70.5th percentile

Affected Products

VendorProductVersions
Ubuntu:24.04:LTSrust-crossbeam0.8.4-1, 0.8.1-1, 0
Ubuntu:20.04:LTSmozjs6868.5.0-1~fakesync, 68.6.0-1ubuntu1, 68.6.0-1
Ubuntu:20.04:LTSrust-crossbeam0, 0.3.2-2, 0.7.2-2
Ubuntu:22.04:LTSrust-crossbeam0, 0.7.2-3
Ubuntu:16.04:LTSfirefox56.0+build6-0ubuntu0.16.04.1, 0, 41.0.2+build2-0ubuntu1
Ubuntu:20.04:LTSmozjs5252.9.1-1ubuntu3, 52.9.1-1build1, 0
Ubuntu:18.04:LTSfirefox*, *, *
Ubuntu:18.04:LTSmozjs3838.8.0~repack1-0ubuntu4, 38.8.0~repack1-0ubuntu3, 38.8.0~repack1-0ubuntu1
Ubuntu:25.10rust-crossbeam0.8.4-1, 0
Ubuntu:18.04:LTSmozjs520, 52.3.1-0ubuntu3, 52.9.1-0ubuntu0.18.04.1
Ubuntu:20.04:LTSfirefox74.0+build2-0ubuntu2, 76.0+build2-0ubuntu0.20.04.1, 76.0.1+build1-0ubuntu0.20.04.1

Exploit Intelligence

Timeline

  • Jun 26, 2020 CVE Published
  • Apr 14, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Aug 24, 2021 EPSS Score
  • Dec 27, 2021 EPSS Score
  • Jan 6, 2022 EPSS Score
  • Feb 4, 2022 EPSS Score
  • Feb 28, 2022 EPSS Score
  • Apr 1, 2022 EPSS Score
  • Jul 3, 2022 EPSS Score
  • Sep 4, 2022 EPSS Score
  • Nov 6, 2022 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›