Gen_Prime (>=0.1.0 <=1.1.9), anchor-token (>=0.0.1 <=0.3.0-alpha.1) +93 more potentially affected by CVE-2020-35880 via bigint (>=1.0.5 <=4.4.3)

bigint CARGO version =1.0.5, =0.1.0, =0.0.1, =3.6.1, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.0.1 - csepicwalletapi =1.0.0 and more Source cves: CVE-2020-35880 Source advisory: OSV:GHSA-WGX2-6432-J3FW...

GHSA-WGX2-6432-J3FW Unsoundness in bigint

An issue was discovered in the bigint crate through 2020-05-07 for Rust. It allows a soundness violation...

Unsoundness in bigint

An issue was discovered in the bigint crate through 2020-05-07 for Rust. It allows a soundness violation...

CVE-2021-26198

An issue was discovered in JerryScript 2.4.0. There is a SEVG in ecmaderefbigint in ecma-helpers.c file...

UBUNTU-CVE-2021-26198

An issue was discovered in JerryScript 2.4.0. There is a SEVG in ecmaderefbigint in ecma-helpers.c file...

JerryScript 安全漏洞

JerryScript is a lightweight JavaScript engine . A security vulnerability exists in ecmaderefbigint in ecma-helpers.c in JerryScript version 2.4.0. No details of the vulnerability are provided at this time...

PT-2021-7491 · Mariadb +9 · Mariadb +10

Name of the Vulnerable Software and Affected Versions: MariaDB versions 10.5.9 and earlier Description: The issue is related to a use-after-free error in MariaDB, specifically when the BIGINT data type is used. This can be triggered by attackers, potentially leading to a denial of service. The...

Uncontrolled Resource Consumption in json-bigint

Overview Prototype pollution in json-bigint package 1.0.0 may lead to a denial-of-service DoS attack. Recommendation Upgrade to version 1.0.0 or later References - CVE - GitHub Advisory...

GHSA-WGFQ-7857-4JCC Uncontrolled Resource Consumption in json-bigint

Prototype pollution in json-bigint npm package 1.0.0 may lead to a denial-of-service DoS attack...

Uncontrolled Resource Consumption in json-bigint

Prototype pollution in json-bigint npm package 1.0.0 may lead to a denial-of-service DoS attack...

Denial of service through parsing payloads with too big exponent

The parseduration::parse function allows for parsing duration strings with exponents like 5e5s where under the hood, the BigInt type along with the pow function are used for such payloads. Passing an arbitrarily big exponent makes the parseduration::parse function to process the payload for a ver...

RUSTSEC-2021-0041 Denial of service through parsing payloads with too big exponent

The parseduration::parse function allows for parsing duration strings with exponents like 5e5s where under the hood, the BigInt type along with the pow function are used for such payloads. Passing an arbitrarily big exponent makes the parseduration::parse function to process the payload for a ver...

CVE-2020-35880

An issue was discovered in the bigint crate through 2020-05-07 for Rust. It allows a soundness violation...

CVE-2020-35880

An issue was discovered in the bigint crate through 2020-05-07 for Rust. It allows a soundness violation...

Design/Logic Flaw

An issue was discovered in the bigint crate through 2020-05-07 for Rust. It allows a soundness violation...

CVE-2020-35880

The CVE-2020-35880 entry relates to the Rust bigint crate (pre-2020-05-07). The connected advisories describe an unsoundness in bigint, i.e., a soundness violation in the implementation. Practical impact and exploit details are not provided in the supplied documents; they only state there is a so...

CVE-2020-35880

An issue was discovered in the bigint crate through 2020-05-07 for Rust. It allows a soundness violation...

Rust Security Vulnerabilities

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. bigint crate through 2020-05-07 for Rust A security vulnerability exists that allows soundness violations...

Security update for MozillaFirefox (critical)

openSUSE Security Update: Security update for MozillaFirefox Announcement ID: openSUSE-SU-2020:2325-1 Rating: critical References: 1180039 Cross-References: CVE-2020-16042 CVE-2020-26971 CVE-2020-26973 CVE-2020-26974 CVE-2020-26978 CVE-2020-35111 CVE-2020-35112 CVE-2020-35113 Affected Products:...

chromium-browser: Uninitialized Use in V8

The Mozilla Foundation Security Advisory describes this flaw as: When a BigInt was right-shifted the backing store was not properly cleared, allowing uninitialized memory to be read...