Miggo Logo
Miggo Vulnerability Database
→
CVE-2020-35892

CVE-2020-35892: Out of bounds read in simple-slab

9.1

CVSS Score
3.1

Basic Information

CVE ID
CVE-2020-35892
GHSA ID
GHSA-438g-fx34-4h9m
EPSS Score
0.61972%
CWE
CWE-125
Published
8/25/2021
Updated
1/27/2023
KEV Status
No
Technology
TechnologyRust

Technical Details

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Package NameEcosystemVulnerable VersionsFirst Patched Version
simple-slabrust< 0.3.30.3.3

Vulnerability Intelligence
Miggo AIMiggo AI

Miggo AIRoot Cause Analysis

The vulnerability reports explicitly show:

  1. index() uses unsafe pointer arithmetic without bounds checks (CWE-125)
  2. remove() accesses mem.offset(self.len) which is an off-by-one error
  3. The GitHub issue demonstrates crash scenarios from both functions
  4. The RustSec advisory confirms both issues were fixed in 0.3.3 Code examples from the project's lib.rs directly show the vulnerable pointer operations without proper validation.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

WAF Protection Rules

WAF Rule

*n issu* w*s *is*ov*r** in t** simpl*-sl** *r*t* ***or* *.*.* *or Rust. in**x() *llows *n out-o*-*oun*s r***.

Reasoning

T** vuln*r**ility r*ports *xpli*itly s*ow: *. in**x() us*s uns*** point*r *rit*m*ti* wit*out *oun*s ****ks (*W*-***) *. r*mov*() ****ss*s m*m.o**s*t(s*l*.l*n) w*i** is *n o**-*y-on* *rror *. T** *it*u* issu* **monstr*t*s *r*s* s**n*rios *rom *ot* *u