5 matches found
Linux Distros Unpatched Vulnerability : CVE-2018-25026
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the actix-web crate before 0.7.15 for Rust. It can add the Send marker trait to an object that cannot be sent between threads safely,...
async-fetcher (>=0.1.1, <=0.1.2), exonum (0.9.7) +2 more potentially affected by CVE-2018-25024 +2 more via actix-web (>=0.2.1, <=0.7.3)
actix-web CARGO version =0.2.1, =0.1.1, =0.1.0, =0.1.3 - sockjs 0.1.0 Source cves: CVE-2018-25024, CVE-2018-25025, CVE-2018-25026 Source advisory: OSV:GHSA-FGFM-HQJW-3265...
CVE-2018-25026
An issue was discovered in the actix-web crate before 0.7.15 for Rust. It can add the Send marker trait to an object that cannot be sent between threads safely, leading to memory corruption...
CVE-2018-25026
CVE-2018-25026 affects the Rust crate actix-web (before 0.7.15). The vulnerability allows an object that cannot be sent between threads to be marked as Send, enabling memory corruption. This is a Rust web framework issue identified in multiple sources; the core of the problem is the incorrect Sen...
actix-async-await (>=0.3.0-alpha.1, <=0.3.0), actix-broker (>=0.1.3, <=0.1.7) +90 more potentially affected by CVE-2018-25024 +2 more via actix-web (>=0.2.1, <=0.7.19)
actix-web CARGO version =0.2.1, =0.3.0-alpha.1, =0.1.3, =0.1.0, =0.3.0, =0.0.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.4.0, =0.4.3 and more Source cves: CVE-2018-25024, CVE-2018-25025, CVE-2018-25026 Source advisory: OSV:RUSTSEC-2018-0019...