Lucene search
Gentoo FoundationGLSA-202409-07HistorySep 22, 2024 - 12:00 a.m.
Rust: Multiple Vulnerabilities
2024-09-2200:00:00
Gentoo Foundation
security.gentoo.org
1
rust
vulnerabilities
upgrade
resolution
cve
segfaults
thread safety
CVSS3
7.9
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
AI Score
7.7
Confidence
Low
Background
A systems programming language that runs blazingly fast, prevents segfaults, and guarantees thread safety.
Description
Multiple vulnerabilities have been discovered in Rust. Please review the CVE identifiers referenced below for details.
Impact
Please review the referenced CVE identifiers for details.
Workaround
There is no known workaround at this time.
Resolution
All Rust binary users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-lang/rust-bin-1.71.1"
All Rust users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-lang/rust-1.71.1"
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Gentoo | any | all | dev-lang/rust | < 1.71.1 | UNKNOWN |
| Gentoo | any | all | dev-lang/rust-bin | < 1.71.1 | UNKNOWN |
Related
nessus
nessus
GLSA-202409-07 : Rust: Multiple Vulnerabilities
2024-09-22 00:00:00
Photon OS 5.0: Rust PHSA-2023-5.0-0067
2024-07-24 00:00:00
debiancve
debiancve
CVE-2022-46176
2023-01-11 21:15:10
CVE-2023-38497
2023-08-04 16:15:10
osv
osv
cargo1.66-1.66.0-2.1 on GA media
2024-06-15 00:00:00
git2 Rust package suppresses ssh host key checking
2023-01-12 12:00:00
Cargo did not verify SSH host keys
2023-01-10 21:09:31
veracode
veracode
Man-In-The-Middle (MITM)
2023-01-24 01:14:03
Directory Traversal
2023-08-07 05:59:23
fedora
fedora
[SECURITY] Fedora 37 Update: rust-1.66.1-1.fc37
2023-01-13 01:33:20
[SECURITY] Fedora 36 Update: rust-1.66.1-1.fc36
2023-01-21 03:43:49
[SECURITY] Fedora 38 Update: rust-1.71.1-1.fc38
2023-08-10 00:43:17
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2023:0132-1)
2023-01-25 00:00:00
Fedora: Security Advisory for rust (FEDORA-2023-19bcafe341)
2023-01-13 00:00:00
openSUSE: Security Advisory for rust1.65 (SUSE-SU-2023:0133-1)
2024-03-04 00:00:00
cve
cve
CVE-2022-46176
2023-01-11 21:15:10
CVE-2023-38497
2023-08-04 16:15:10
cbl_mariner
cbl_mariner
CVE-2022-46176 affecting package rust for versions less than 1.68.2-1
2023-04-16 01:05:08
CVE-2022-46176 affecting package rust 1.59.0-1
2024-09-27 09:12:39
CVE-2023-38497 affecting package rust for versions less than 1.72.0-2
2023-10-11 01:41:59
redhatcve
redhatcve
CVE-2022-46176
2023-01-12 07:36:18
CVE-2023-38497
2023-08-04 11:23:22
nvd
nvd
CVE-2022-46176
2023-01-11 21:15:10
CVE-2023-38497
2023-08-04 16:15:10
cvelist
cvelist
CVE-2022-46176 Cargo did not verify SSH host keys
2023-01-11 20:07:12
CVE-2023-38497 Cargo not respecting umask when extracting crate archives
2023-08-04 15:51:44
prion
prion
Design/Logic Flaw
2023-01-11 21:15:00
Code injection
2023-08-04 16:15:00
github
github
Cargo did not verify SSH host keys
2023-01-10 21:09:31
Cargo not respecting umask when extracting crate archives
2023-08-03 16:30:52
ubuntucve
ubuntucve
CVE-2022-46176
2023-01-11 00:00:00
CVE-2023-38497
2023-08-03 00:00:00
rustsec
rustsec
git2 Rust package suppresses ssh host key checking
2023-01-12 12:00:00
alpinelinux
alpinelinux
CVE-2022-46176
2023-01-11 21:15:10
CVE-2023-38497
2023-08-04 16:15:10
oraclelinux
oraclelinux
rust-toolset:ol8 security update
2023-08-28 00:00:00
rust security update
2023-08-25 00:00:00
redhat
redhat
(RHSA-2023:4634) Important: rust security update
2023-08-14 13:42:34
(RHSA-2023:4651) Important: rust-toolset-1.66-rust security update
2023-08-15 00:05:25
(RHSA-2023:4635) Important: rust-toolset:rhel8 security update
2023-08-14 13:43:13
ubuntu
ubuntu
Cargo vulnerability
2023-08-03 00:00:00
almalinux
almalinux
Important: rust security update
2023-08-14 00:00:00
Important: rust-toolset:rhel8 security update
2023-08-14 00:00:00
rocky
rocky
rust security update
2023-08-24 04:21:28
rust-toolset:rhel8 security update
2023-08-24 04:21:04
githubexploit
githubexploit
Exploit for Insecure Preserved Inherited Permissions in Rust-Lang Cargo
2023-08-04 16:36:10
redos
redos
ROS-20240729-09
2024-07-29 00:00:00
hackerone
hackerone
amazon
amazon
Important: rust
2023-08-31 22:28:00
photon
photon
Moderate Photon OS Security Update - PHSA-2023-5.0-0067
2023-08-07 00:00:00
CVSS3
7.9
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
AI Score
7.7
Confidence
Low
Related for GLSA-202409-07