Log in Start free

Vulnerability · Published Sep 14, 2020 · Assigned by mitre

CVE-2020-25573

Critical 9.8

In plain English

A critical-severity security flaw in the rust-linked-hash-map package (Debian). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.8% (higher than 79% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)9.8Critical
Exploit odds (30 days)1.8%top 21.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

An issue was discovered in the linked-hash-map crate before 0.5.3 for Rust. It creates an uninitialized NonNull pointer, which violates a non-null constraint.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12rust-linked-hash-map0.5.4-1DEBIAN-CVE-2020-25573
Debian:13rust-linked-hash-map0.5.4-1DEBIAN-CVE-2020-25573
Debian:14rust-linked-hash-map0.5.4-1DEBIAN-CVE-2020-25573
Ubuntu:22.04:LTSrust-linked-hash-mapno fix listedUBUNTU-CVE-2020-25573
Ubuntu:24.04:LTSrust-linked-hash-mapno fix listedUBUNTU-CVE-2020-25573
Ubuntu:25.10rust-linked-hash-mapno fix listedUBUNTU-CVE-2020-25573
Ubuntu:26.04:LTSrust-linked-hash-mapno fix listedUBUNTU-CVE-2020-25573
Ubuntu:26.10rust-linked-hash-mapno fix listedUBUNTU-CVE-2020-25573

Affected products (as reported)

VendorProductVersions
n/a n/a n/a

References