CVE-2021-28034
Critical
Description
An issue was discovered in the stack_dst crate before 0.6.1 for Rust. Because of the push_inner behavior, a double free can occur upon a val.clone() panic.
SeverityCritical
CVSS9.8
Exploit probability—
ProductStack Dst
PublishedMar 5, 2021
First seenMar 5, 2021
How to fix
Update
- stack_dst_project stack_dst0.6.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| stack_dst_project stack_dst | v < 0.6.1 | 0.6.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.