CVE-2015-20001 Memory corruption in n/a

What is CVE-2015-20001?

CVE-2015-20001 is a high-severity memory corruption vulnerability in n/a, published on 11 Apr 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

In the standard library in Rust before 1.2.0, BinaryHeap is not panic-safe. The binary heap is left in an inconsistent state when the comparison of generic elements inside sift_up or sift_down_range panics. This bug leads to a drop of zeroed memory as an arbitrary type, which can result in a memory safety violation.

Weakness: CWE-119

Which versions are affected by CVE-2015-20001?

It affects 1 product.

Products include Rust-Lang Rust.

How do I fix CVE-2015-20001?

Upgrade to a fixed version.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2015-20001 being exploited?

There is no known exploitation of CVE-2015-20001 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2020-36318 Use after free in n/a Critical 9.8
• CVE-2018-1000810 Integer overflow in n/a Critical 9.8
• CVE-2021-29922 Security feature bypass in n/a Critical 9.1
• CVE-2024-43402 Rust OS Command Injection/Argument Injection vulnerability High 8.2
• CVE-2018-1000657 Memory corruption in n/a High 7.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2015-20001, GHSA-gf7g-j42c-9rjr.