An issue was discovered in the libpulse-binding crate before 2.5.0 for Rust. proplist::Iterator can cause a use-after-free.

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2018-25001 · Microsoft / collected KEV context

EUVD-2021-1599

GHSA-6gvc-4jvj-pwq4

GHSA-f56g-chqp-22m9

RUSTSEC-2018-0020

cve-program · CVE-2018-25001

• https://rustsec.org/advisories/RUSTSEC-2018-0020.html

euvd · EUVD-2021-1599

• https://rustsec.org/advisories/RUSTSEC-2018-0020.html

nvd · CVE-2018-25001

• https://rustsec.org/advisories/RUSTSEC-2018-0020.html

osv · GHSA-6gvc-4jvj-pwq4

• https://nvd.nist.gov/vuln/detail/CVE-2018-25001
• https://github.com/advisories/GHSA-6gvc-4jvj-pwq4
• https://github.com/jnqnfe/pulse-binding-rust
• https://rustsec.org/advisories/RUSTSEC-2018-0020.html

osv · GHSA-f56g-chqp-22m9

• https://github.com/jnqnfe/pulse-binding-rust/security/advisories/GHSA-f56g-chqp-22m9
• https://nvd.nist.gov/vuln/detail/CVE-2018-25001
• https://github.com/jnqnfe/pulse-binding-rust/commit/9e31c82d71749619387cb9d0c9698134d05b28c9
• https://github.com/jnqnfe/pulse-binding-rust
• https://rustsec.org/advisories/RUSTSEC-2018-0020.html

osv · RUSTSEC-2018-0020

• https://crates.io/crates/libpulse-binding
• https://rustsec.org/advisories/RUSTSEC-2018-0020.html
• https://github.com/jnqnfe/pulse-binding-rust/commit/9e31c82d71749619387cb9d0c9698134d05b28c9

No related operational record is retained in the current change model.