Time Project Time 0.2.8 for Rust

CPE Details

Time Project Time 0.2.8 for Rust
time_project
time
0.2.8
2020-11-30
11h52 +00:00
2020-11-30
11h52 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:time_project:time:0.2.8:*:*:*:*:rust:*:*

Informations

Vendor

time_project

Product

time

Version

0.2.8

Target Software

rust

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2020-26235 2020-11-24 20h20 +00:00 In Rust time crate from version 0.2.7 and before version 0.2.23, unix-like operating systems may segfault due to dereferencing a dangling pointer in specific circumstances. This requires the user to set any environment variable in a different thread than the affected functions. The affected functions are time::UtcOffset::local_offset_at, time::UtcOffset::try_local_offset_at, time::UtcOffset::current_local_offset, time::UtcOffset::try_current_local_offset, time::OffsetDateTime::now_local and time::OffsetDateTime::try_now_local. Non-Unix targets are unaffected. This includes Windows and wasm. The issue was introduced in version 0.2.7 and fixed in version 0.2.23.
5.3
Medium