Lucene search
GoogleOSV:RUSTSEC-2016-0003HistoryAug 01, 2016 - 12:00 p.m.
HTTP download and execution allows MitM RCE
2016-08-0112:00:00
Google
osv.dev
8
EPSS
0.001
Percentile
47.9%
The build script in the portaudio crate will attempt to download via HTTP
the portaudio source and build it.
A Mallory in the middle can intercept the download with their own archive
and get RCE.
Related
nvd
nvd
CVE-2016-10933
2019-08-26 13:15:10
rustsec
rustsec
HTTP download and execution allows MitM RCE
2016-08-01 12:00:00
cvelist
cvelist
CVE-2016-10933
2019-08-26 12:03:36
osv
osv
Source code is downloaded over cleartext HTTP in portaudio
2021-08-25 20:43:09
prion
prion
Code injection
2019-08-26 13:15:00
github
github
Source code is downloaded over cleartext HTTP in portaudio
2021-08-25 20:43:09
cve
cve
CVE-2016-10933
2019-08-26 13:15:10