CVE-2020-35901

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2020-35901
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-35901.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2020-35901
Aliases
Published
2020-12-31T09:15:14.880Z
Modified
2025-11-14T11:06:55.551146Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

An issue was discovered in the actix-http crate before 2.0.0-alpha.1 for Rust. There is a use-after-free in BodyStream.

References

Affected packages

Git / github.com/actix/actix-web

Affected ranges

Type
GIT
Repo
https://github.com/actix/actix-web
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
acda1c075a000a8b94f04b25b8d3668954d7938e

Affected versions

0.*
0.7.15
0.7.16
0.7.17
0.7.18
actors-v1.*
actors-v1.0.0
awc-v0.*
awc-v0.1.0
awc-v0.1.1
awc-v0.2.0
awc-v0.2.1
codegen-v0.*
codegen-v0.1.0
codegen-v0.1.1
codegen-v0.1.2
cors-v0.*
cors-v0.1.0
files-v0.*
files-v0.1.0
files-v0.1.1
files-v0.1.2
framed-v0.*
framed-v0.1.0
framed-v0.2.0
http-test-v0.*
http-test-v0.1.0
http-test-v0.1.1
http-test-v0.2.1
http-test-v0.2.2
http-v0.*
http-v0.1.0
http-v0.1.0-alpha.1
http-v0.1.1
http-v0.1.2
http-v0.1.3
http-v0.1.4
http-v0.1.5
http-v0.2.0
http-v0.2.1
http-v0.2.2
http-v0.2.3
http-v0.2.4
identity-v0.*
identity-v0.1.0
multipart-v0.*
multipart-v0.1.0
multipart-v0.1.0-beta.1
multipart-v0.1.1
multipart-v0.1.2
session-v0.*
session-v0.1.0
session-v0.1.0-beta.2
session-v0.1.1
v0.*
v0.2.0
v0.2.1
v0.3.0
v0.3.1
v0.3.2
v0.3.3
v0.4.0
v0.4.1
v0.4.10
v0.4.2
v0.4.3
v0.4.4
v0.4.5
v0.4.6
v0.4.7
v0.4.8
v0.4.9
v0.5.0
v0.5.1
v0.5.2
v0.5.3
v0.5.4
v0.5.5
v0.6.0
v0.6.1
v0.6.10
v0.6.2
v0.6.3
v0.6.4
v0.6.5
v0.6.6
v0.6.7
v0.6.8
v0.6.9
v0.7.0
v0.7.1
v0.7.10
v0.7.11
v0.7.12
v0.7.13
v0.7.14
v0.7.2
v0.7.3
v0.7.4
v0.7.5
v0.7.6
v0.7.7
v0.7.8
v0.7.9
v1.*
v1.0.0-alpha.2
v1.0.0-alpha.3
v1.0.0-alpha.4
v1.0.0-alpha.5
v1.0.0-alpha.6
v1.0.0-beta.1
web-v1.*
web-v1.0.0
web-v1.0.0-beta.2
web-v1.0.0-beta.3
web-v1.0.0-beta.4
web-v1.0.0-rc
web-v1.0.1

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-35901.json"