Lucene search
RedHatRHSA-2023:4634HistoryAug 14, 2023 - 1:42 p.m.
(RHSA-2023:4634) Important: rust security update
2023-08-1413:42:34
access.redhat.com
11
rust toolset
cargo
security update
cve-2023-38497
CVSS3
7.9
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
EPSS
0
Percentile
5.1%
Rust Toolset provides the Rust programming language compiler rustc, the cargo build tool and dependency manager, and required libraries.
Security Fix(es):
- rust-cargo: cargo does not respect the umask when extracting dependencies (CVE-2023-38497)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 9 | x86_64 | rust-doc | < 1.66.1-2.el9_2 | rust-doc-1.66.1-2.el9_2.x86_64.rpm |
| RedHat | 9 | noarch | rust-std-static-wasm32-unknown-unknown | < 1.66.1-2.el9_2 | rust-std-static-wasm32-unknown-unknown-1.66.1-2.el9_2.noarch.rpm |
| RedHat | 9 | aarch64 | clippy | < 1.66.1-2.el9_2 | clippy-1.66.1-2.el9_2.aarch64.rpm |
| RedHat | 9 | ppc64le | rust-doc | < 1.66.1-2.el9_2 | rust-doc-1.66.1-2.el9_2.ppc64le.rpm |
| RedHat | 9 | aarch64 | rust-debugsource | < 1.66.1-2.el9_2 | rust-debugsource-1.66.1-2.el9_2.aarch64.rpm |
| RedHat | 9 | s390x | cargo-debuginfo | < 1.66.1-2.el9_2 | cargo-debuginfo-1.66.1-2.el9_2.s390x.rpm |
| RedHat | 9 | s390x | clippy-debuginfo | < 1.66.1-2.el9_2 | clippy-debuginfo-1.66.1-2.el9_2.s390x.rpm |
| RedHat | 9 | ppc64le | rustfmt | < 1.66.1-2.el9_2 | rustfmt-1.66.1-2.el9_2.ppc64le.rpm |
| RedHat | 9 | noarch | rust-gdb | < 1.66.1-2.el9_2 | rust-gdb-1.66.1-2.el9_2.noarch.rpm |
| RedHat | 9 | ppc64le | rust-std-static | < 1.66.1-2.el9_2 | rust-std-static-1.66.1-2.el9_2.ppc64le.rpm |
Related
oraclelinux
oraclelinux
rust-toolset:ol8 security update
2023-08-28 00:00:00
rust security update
2023-08-25 00:00:00
nessus
nessus
RHEL 8 : rust-toolset:rhel8 (RHSA-2023:4635)
2023-08-14 00:00:00
CentOS 9 : rust-1.71.1-1.el9
2024-02-29 00:00:00
Oracle Linux 9 : rust (ELSA-2023-4634)
2023-08-25 00:00:00
fedora
fedora
[SECURITY] Fedora 38 Update: rust-1.71.1-1.fc38
2023-08-10 00:43:17
[SECURITY] Fedora 37 Update: rust-1.71.1-1.fc37
2023-08-17 00:34:26
github
github
Cargo not respecting umask when extracting crate archives
2023-08-03 16:30:52
redhat
redhat
(RHSA-2023:4651) Important: rust-toolset-1.66-rust security update
2023-08-15 00:05:25
(RHSA-2023:4635) Important: rust-toolset:rhel8 security update
2023-08-14 13:43:13
(RHSA-2024:3428) Important: rust-toolset:rhel8 security update
2024-05-28 13:07:54
osv
osv
cargo, rust-cargo vulnerability
2023-08-03 14:30:10
Cargo not respecting umask when extracting crate archives
2023-08-03 16:30:52
CVE-2023-38497
2023-08-04 16:15:10
ubuntu
ubuntu
Cargo vulnerability
2023-08-03 00:00:00
cve
cve
CVE-2023-38497
2023-08-04 16:15:10
debiancve
debiancve
CVE-2023-38497
2023-08-04 16:15:10
openvas
openvas
Ubuntu: Security Advisory (USN-6275-1)
2023-08-04 00:00:00
Fedora: Security Advisory for rust (FEDORA-2023-6f2c7aa713)
2023-08-10 00:00:00
openSUSE: Security Advisory for rust1.71 (SUSE-SU-2023:3251-1)
2024-03-04 00:00:00
almalinux
almalinux
Important: rust security update
2023-08-14 00:00:00
Important: rust-toolset:rhel8 security update
2023-08-14 00:00:00
alpinelinux
alpinelinux
CVE-2023-38497
2023-08-04 16:15:10
prion
prion
Code injection
2023-08-04 16:15:00
rocky
rocky
rust security update
2023-08-24 04:21:28
rust-toolset:rhel8 security update
2023-08-24 04:21:04
cvelist
cvelist
CVE-2023-38497 Cargo not respecting umask when extracting crate archives
2023-08-04 15:51:44
redhatcve
redhatcve
CVE-2023-38497
2023-08-04 11:23:22
nvd
nvd
CVE-2023-38497
2023-08-04 16:15:10
githubexploit
githubexploit
Exploit for Insecure Preserved Inherited Permissions in Rust-Lang Cargo
2023-08-04 16:36:10
redos
redos
ROS-20240729-09
2024-07-29 00:00:00
ubuntucve
ubuntucve
CVE-2023-38497
2023-08-03 00:00:00
cbl_mariner
cbl_mariner
CVE-2023-38497 affecting package rust for versions less than 1.72.0-2
2023-10-11 01:41:59
hackerone
hackerone
veracode
veracode
Directory Traversal
2023-08-07 05:59:23
amazon
amazon
Important: rust
2023-08-31 22:28:00
gentoo
gentoo
Rust: Multiple Vulnerabilities
2024-09-22 00:00:00
CVSS3
7.9
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
EPSS
0
Percentile
5.1%
Related for RHSA-2023:4634