Lucene search

CVE-2023-38497

🗓️ 04 Aug 2023 16:10:15Reported by GoogleType

osv🔗 osv.dev👁 19 Views

Cargo did not respect umask, enabling exploit to change source code compiled and execute

Reporter	Title	Published	Views	Family All 66
Oracle linux	rust security update	25 Aug 202300:00	–	oraclelinux
Oracle linux	rust-toolset:ol8 security update	28 Aug 202300:00	–	oraclelinux
Tenable Nessus	Oracle Linux 9 : rust (ELSA-2023-4634)	25 Aug 202300:00	–	nessus
Tenable Nessus	RHEL 8 : rust-toolset:rhel8 (RHSA-2023:4635)	14 Aug 202300:00	–	nessus
Tenable Nessus	CentOS 9 : rust-1.71.1-1.el9	29 Feb 202400:00	–	nessus
Tenable Nessus	RHEL 9 : rust (RHSA-2023:4634)	14 Aug 202300:00	–	nessus
Tenable Nessus	Rocky Linux 9 : rust (RLSA-2023:4634)	24 Aug 202300:00	–	nessus
Tenable Nessus	AlmaLinux 8 : rust-toolset:rhel8 (ALSA-2023:4635)	16 Aug 202300:00	–	nessus
Tenable Nessus	RHEL 9 : rust (RHSA-2024:3418)	28 May 202400:00	–	nessus
Tenable Nessus	Oracle Linux 8 : rust-toolset:ol8 (ELSA-2023-4635)	28 Aug 202300:00	–	nessus

Source	Link
github	www.github.com/rust-lang/cargo/security/advisories/GHSA-j3xp-wfr4-hx87
github	www.github.com/rust-lang/cargo/pull/12443
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/QGKE6PGM4HIQUHPJRBQAHMELINSGN4H4/
github	www.github.com/rust-lang/cargo/commit/d78bbf4bde3c6b95caca7512f537c6f9721426ff
en	www.en.wikipedia.org/wiki/Umask
github	www.github.com/rust-lang/wg-security-response/tree/main/patches/CVE-2023-38497
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/QMEXGUGPW5OBSQA6URTBNDSU3RAEFOZ4/
rust-lang	www.rust-lang.org/policies/security

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

04 Aug 2023 16:15Current

7High risk

Vulners AI Score7

CVSS37.3 - 7.9

EPSS0.00042

SSVC