https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 24 Oct 2026 20:32:06 +0000 https://cve.radiocsirt.org/vuln/cve-2021-28305 <p>An issue was discovered in the diesel crate before 1.4.6 for Rust. There is a use-after-free in the SQLite backend because the semantics of sqlite3_column_name are not followed.</p> <p>An issue was discovered in the diesel crate before 1.4.6 for Rust. There is a use-after-free in the SQLite backend because the semantics of sqlite3_column_name are not followed.</p> https://cve.radiocsirt.org/vuln/cve-2021-28305 https://cve.radiocsirt.org/vuln/rustsec-2021-0037 <p><strong>Affected:</strong> crates.io: diesel</p> <p>We&#39;ve misused `sqlite3_column_name`. The [SQLite](https://www.sqlite.org/c3ref/column_name.html) documentation states that the following:</p> <p>&gt; The returned string pointer is valid until either the prepared statement &gt; is destroyed by sqlite3_finalize() or until the statement is automatically &gt; reprepared by the first call to sqlite3_step() for a particular &gt; run or until the next call to sqlite3_column_name() &gt; or sqlite3_column_name16() on the same column.</p> <p>As part of our `query_by_name` infrastructure we&#39;ve first received all field names for the prepared statement and stored them as string slices for later use. After that we called `sqlite3_step()` for the first time, which invalids the pointer and therefore the stored string slice.</p> <p><strong>Affected:</strong> crates.io: diesel</p> <p>We&#39;ve misused `sqlite3_column_name`. The [SQLite](https://www.sqlite.org/c3ref/column_name.html) documentation states that the following:</p> <p>&gt; The returned string pointer is valid until either the prepared statement &gt; is destroyed by sqlite3_finalize() or until the statement is automatically &gt; reprepared by the first call to sqlite3_step() for a particular &gt; run or until the next call to sqlite3_column_name() &gt; or sqlite3_column_name16() on the same column.</p> <p>As part of our `query_by_name` infrastructure we&#39;ve first received all field names for the prepared statement and stored them as string slices for later use. After that we called `sqlite3_step()` for the first time, which invalids the pointer and therefore the stored string slice.</p> https://cve.radiocsirt.org/vuln/rustsec-2021-0037