GHSA-GFWX-W7GR-FVH7 vulnerabilities

Vulnerabilities for packages: py3-nltk, open-webui, kubeflow-pipelines-visualization-server...

CGA-6MJ3-GFWX-2RRR

Bulletin has no description...

EUVD-2021-1938

Malware in sbrugna...

CVE-2020-36211

An issue was discovered in the gfwx crate before 0.3.0 for Rust. Because ImageChunkMut does not have bounds on its Send trait or Sync trait, a data race and memory corruption can occur...

Data races in gfwx

In the affected versions of this crate, ImageChunkMut unconditionally implements Send and Sync, allowing to create data races. This can result in a memory corruption or undefined behavior when non thread-safe types are moved and referenced across thread boundaries. The flaw was corrected in commi...

PT-2021-28353

Name of the Vulnerable Software and Affected Versions: GFWX affected versions not specified Description: The issue is related to a dynamic stack buffer overflow, which can cause a crash. The crash occurs in the decode function of the GFWX class, specifically when decoding short values. The...

gfwx:fuzzer-decoder: Dynamic-stack-buffer-overflow in std::__1::pair<unsigned int, unsigned int>::pair<unsigned int, unsigned int, fal

Detailed Report: https://oss-fuzz.com/testcase?key=6204715519049728 Project: gfwx Fuzzing Engine: afl Fuzz Target: fuzzer-decoder Job Type: aflasangfwx Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow WRITE 4 Crash Address: 0x7ffdc006e500 Crash State: std::1::pair::pair::type,...

CVE-2020-36211

An issue was discovered in the gfwx crate before 0.3.0 for Rust. Because ImageChunkMut does not have bounds on its Send trait or Sync trait, a data race and memory corruption can occur...

CVE-2020-36211

An issue was discovered in the gfwx crate before 0.3.0 for Rust. Because ImageChunkMut does not have bounds on its Send trait or Sync trait, a data race and memory corruption can occur...

Memory corruption

An issue was discovered in the gfwx crate before 0.3.0 for Rust. Because ImageChunkMut does not have bounds on its Send trait or Sync trait, a data race and memory corruption can occur...

Rust 安全漏洞

A security vulnerability in Rust gfwx crate before 0.3.0, a general-purpose, compiled programming language from the Mozilla Foundation, stems from a limitation in ImageChunkMut's lack of sending or synchronization features, and could be exploited by an attacker to cause data contention and memory...

CVE-2020-36211

CVE-2020-36211 affects the Rust gfwx crate (pre-0.3.0). The issue is that ImageChunkMut does not have bounds on its Send or Sync traits, allowing data races and memory corruption. Remediation documented in RUSTSEC-2020-0104 and related advisories shows the fix: add T: Send to the Send implementat...

CVE-2020-36211

An issue was discovered in the gfwx crate before 0.3.0 for Rust. Because ImageChunkMut does not have bounds on its Send trait or Sync trait, a data race and memory corruption can occur...

CVE-2020-36211

An issue was discovered in the gfwx crate before 0.3.0 for Rust. Because ImageChunkMut does not have bounds on its Send trait or Sync trait, a data race and memory corruption can occur...

CVE-2020-36211: Improper Synchronization

An issue was discovered in the gfwx crate before 0.3.0 for Rust. Because ImageChunkMut does not have bounds on its Send trait or Sync trait, a data race and memory corruption can occur...

PT-2020-17583

Name of the Vulnerable Software and Affected Versions gfwx crate versions prior to 0.3.0 Description The issue arises from ImageChunkMut not having bounds on its Send trait or Sync trait, leading to potential data races and memory corruption. Specifically, ImageChunkMut unconditionally implements...