{"id":"RUSTSEC-2020-0159","aliases":[],"status":"published","title":"Potential segfault in `localtime_r` invocations","description":"### Impact\n\nUnix-like operating systems may segfault due to dereferencing a dangling pointer in specific circumstances. This requires an environment variable to be set in a different thread than the affected functions. This may occur without the user's knowledge, notably in a third-party library.\n\n### Workarounds\n\nNo workarounds are known.\n\n### References\n\n- [time-rs/time#293](https://github.com/time-rs/time/issues/293)","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2020-11-10T12:00:00Z","modified":"2026-02-04T02:59:27Z","fixes":[{"ecosystem":"crates.io","package":"chrono","fixed_in":["0.4.20"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"crates.io","package":"chrono","ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"},{"fixed":"0.4.20"}]}]}],"references":[{"url":"https://crates.io/crates/chrono","tags":["package"]},{"url":"https://rustsec.org/advisories/RUSTSEC-2020-0159.html","tags":["advisory"]},{"url":"https://github.com/chronotope/chrono/issues/499","tags":["report"]}],"sources":{"osv":[{"id":"RUSTSEC-2020-0159","title":"Potential segfault in `localtime_r` invocations","description":"### Impact\n\nUnix-like operating systems may segfault due to dereferencing a dangling pointer in specific circumstances. This requires an environment variable to be set in a different thread than the affected functions. This may occur without the user's knowledge, notably in a third-party library.\n\n### Workarounds\n\nNo workarounds are known.\n\n### References\n\n- [time-rs/time#293](https://github.com/time-rs/time/issues/293)","status":"published","published":"2020-11-10T12:00:00Z","modified":"2026-02-04T02:59:27.428469Z","updated_at":"2026-11-02T15:53:39.492624Z"}]}}