Lucene search
+L

269 matches found

Github Security Blog
Github Security Blog
•added 2021/08/25 8:53 p.m.•38 views

Error on unsupported architectures in raw-cpuid

nativecpuid::cpuidcount exposes the unsafe cpuidcount intrinsic from core::arch::x86 or core::arch::x8664 as a safe function, and uses it internally, without checking the safety requirement: The CPU the program is currently running on supports the function being called. CPUID is available in most...

5.5CVSS6.1AI score0.00341EPSS
SaveExploits1References7Affected Software1
osv_ghsa
osv_ghsa
•added 2021/08/25 8:53 p.m.•60 views

GHSA-JRF8-CMGG-GV2M Error on unsupported architectures in raw-cpuid

nativecpuid::cpuidcount exposes the unsafe cpuidcount intrinsic from core::arch::x86 or core::arch::x8664 as a safe function, and uses it internally, without checking the safety requirement: The CPU the program is currently running on supports the function being called. CPUID is available in most...

5.5CVSS6.2AI score0.01261EPSS
SaveExploits1References7
vulnersOsv
vulnersOsv
•added 2021/05/06 12:00 p.m.•13 views

actix-broker (>=0.1.3, <=0.1.7), actix-diesel (>=0.1.0, <=0.3.0) +895 more potentially affected by unknown CVE via cpuid-bool (>=0.1.2, <=0.2.0)

cpuid-bool CARGO version =0.1.2, =0.1.3, =0.1.0, =0.3.0, =0.3.0-alpha.1, =0.5.1, =0.0.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0064...

5.8AI score
SaveExploits0
RustSec
RustSec
•added 2021/05/06 12:00 p.m.•19 views

`cpuid-bool` has been renamed to `cpufeatures`

Please use the cpufeatures crate going forward: There will be no further releases of cpuid-bool...

6.9AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/05/06 12:00 a.m.•3 views

PT-2021-28381

Name of the Vulnerable Software and Affected Versions: cpuid-bool affected versions not specified Description: The cpuid-bool crate will no longer receive further releases, and users are advised to use the cpufeatures crate instead. Recommendations: At the moment, there is no information about a...

5.8AI score
SaveExploits0References4
OpenVAS
OpenVAS
•added 2021/04/19 12:00 a.m.•19 views

SUSE: Security Advisory (SUSE-SU-2018:2304-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS8.3AI score0.60631EPSS
SaveExploits3References13
OpenVAS
OpenVAS
•added 2021/04/19 12:00 a.m.•25 views

SUSE: Security Advisory (SUSE-SU-2018:0007-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.6CVSS8.7AI score0.74041EPSS
SaveExploits10References5
OpenVAS
OpenVAS
•added 2021/04/19 12:00 a.m.•39 views

SUSE: Security Advisory (SUSE-SU-2018:1386-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.6CVSS8.6AI score0.74041EPSS
SaveExploits13References6
NVD
NVD
•added 2021/02/23 6:15 p.m.•35 views

CVE-2021-27579

Snow Inventory Agent through 6.7.0 on Windows uses CPUID to report on processor types and versions that may be deployed and in use across an IT environment. A privilege-escalation vulnerability exists if CPUID is enabled, and thus it should be disabled via configuration settings...

7.8CVSS0.00477EPSS
SaveExploits0References1
Prion
Prion
•added 2021/02/23 6:15 p.m.•30 views

Privilege escalation

Snow Inventory Agent through 6.7.0 on Windows uses CPUID to report on processor types and versions that may be deployed and in use across an IT environment. A privilege-escalation vulnerability exists if CPUID is enabled, and thus it should be disabled via configuration settings...

4.4CVSS7.5AI score0.00477EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/02/23 5:03 p.m.•43 views

CVE-2021-27579

Snow Inventory Agent through 6.7.0 on Windows uses CPUID to report on processor types and versions that may be deployed and in use across an IT environment. A privilege-escalation vulnerability exists if CPUID is enabled, and thus it should be disabled via configuration settings...

7.7AI score0.00477EPSS
SaveExploits0References1
CVE
CVE
•added 2021/02/23 5:03 p.m.•67 views

CVE-2021-27579

Snow Inventory Agent for Windows (up to version 6.7.0) uses CPUID to report processor information. The disclosed vulnerability is a privilege-escalation flaw that exists when CPUID is enabled; remediation is to disable CPUID via configuration. No exploit specifics or affected product versions bey...

7.8CVSS7.5AI score0.00477EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/23 12:00 a.m.•11 views

CVE-2021-27579: Undefined Security Weakness

Snow Inventory Agent through 6.7.0 on Windows uses CPUID to report on processor types and versions that may be deployed and in use across an IT environment. A privilege-escalation vulnerability exists if CPUID is enabled, and thus it should be disabled via configuration settings...

7.8CVSS5.7AI score0.00477EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/02/23 12:00 a.m.•7 views

PT-2021-17519

Name of the Vulnerable Software and Affected Versions Snow Inventory Agent versions 6.7.0 and earlier Description A privilege-escalation issue exists in Snow Inventory Agent on Windows when CPUID is enabled, allowing it to report on processor types and versions deployed across an IT environment. ...

7.8CVSS0.00477EPSS
SaveExploits0References5
CNVD
CNVD
•added 2021/02/03 12:00 a.m.•67 views

Unspecified Vulnerability in Rust (CNVD-2021-13683)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in the raw-cpuid crate function in versions of Rust prior to 9.0.0 that allows the cpuid count call to be made even if the processor does not support the cpuid directive, ultimate...

5.5CVSS6.5AI score0.00341EPSS
SaveExploits1References1
NVD
NVD
•added 2021/01/29 3:15 a.m.•38 views

CVE-2021-26306

An issue was discovered in the raw-cpuid crate before 9.0.0 for Rust. It has unsound transmute calls within asstring methods...

7.5CVSS7.5AI score0.01261EPSS
SaveExploits0References1
NVD
NVD
•added 2021/01/29 3:15 a.m.•39 views

CVE-2021-26307

An issue was discovered in the raw-cpuid crate before 9.0.0 for Rust. It allows cpuidcount calls even if the processor does not support the CPUID instruction, which is unsound and causes a deterministic crash...

5.5CVSS5.5AI score0.00341EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2021/01/29 3:15 a.m.•17 views

CVE-2021-26307

An issue was discovered in the raw-cpuid crate before 9.0.0 for Rust. It allows cpuidcount calls even if the processor does not support the CPUID instruction, which is unsound and causes a deterministic crash...

5.5CVSS6.6AI score0.01261EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2021/01/29 3:15 a.m.•17 views

CVE-2021-26306

An issue was discovered in the raw-cpuid crate before 9.0.0 for Rust. It has unsound transmute calls within asstring methods...

7.5CVSS6.5AI score0.01261EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2021/01/29 3:15 a.m.•9 views

CVE-2021-26306

An issue was discovered in the raw-cpuid crate before 9.0.0 for Rust. It has unsound transmute calls within asstring methods...

7.5CVSS7.2AI score0.01261EPSS
SaveExploits0References2
Rows per page
Query Builder