Lucene search
+L

203 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:17 p.m.5 views

Malicious code in bfx-facs-lru (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1c71282b457fa54f197f5ad9c1cdb8b5116f8508b1edf86d1c69014c8306de0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:17 p.m.16 views

MAL-2022-1530 Malicious code in bfx-facs-lru (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1c71282b457fa54f197f5ad9c1cdb8b5116f8508b1edf86d1c69014c8306de0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2022/06/17 12:11 a.m.23 views

GHSA-QQMC-HWQP-8G2W Use after free in lru crate

Lru crate has use after free vulnerability. Lru crate has two functions for getting an iterator. Both iterators give references to key and value. Calling specific functions, like pop, will remove and free the value, and but it's still possible to access the reference of value which is already...

7.5CVSS7.5AI score0.0118EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
added 2022/06/17 12:11 a.m.20 views

Use after free in lru crate

Lru crate has use after free vulnerability. Lru crate has two functions for getting an iterator. Both iterators give references to key and value. Calling specific functions, like pop, will remove and free the value, and but it's still possible to access the reference of value which is already...

3AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2022/01/07 10:37 p.m.47 views

Use After Free in lru

Lru crate has two functions for getting an iterator. Both iterators give references to key and value. Calling specific functions, like pop, will remove and free the value, and but it's still possible to access the reference of value which is already dropped causing use after free...

7.5CVSS7.4AI score0.0118EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2022/01/07 10:37 p.m.14 views

GHSA-V362-2895-H9R2 Use After Free in lru

Lru crate has two functions for getting an iterator. Both iterators give references to key and value. Calling specific functions, like pop, will remove and free the value, and but it's still possible to access the reference of value which is already dropped causing use after free...

7.5CVSS7.4AI score0.0118EPSS
SaveExploits1References5
CNVD
CNVD
added 2021/12/28 12:00 a.m.53 views

Mozilla Rust lru crate post-release reuse vulnerability

Mozilla Rust lru crate is an implementation of the LRU cache. a security vulnerability exists in versions of Mozilla Rust lru crate prior to 0.7.1, which can lead to a resource management error. An attacker could exploit this vulnerability to cause memory corruption...

7.5CVSS4.1AI score0.0118EPSS
SaveExploits1References1
NVD
NVD
added 2021/12/26 10:15 p.m.19 views

CVE-2021-45720

An issue was discovered in the lru crate before 0.7.1 for Rust. The iterators have a use-after-free, as demonstrated by an access after a pop operation...

7.5CVSS0.0118EPSS
SaveExploits1References2
OSV
OSV
added 2021/12/26 10:15 p.m.6 views

CVE-2021-45720

An issue was discovered in the lru crate before 0.7.1 for Rust. The iterators have a use-after-free, as demonstrated by an access after a pop operation...

7.5CVSS5.8AI score0.0118EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2021/12/26 10:15 p.m.26 views

CVE-2021-45720

An issue was discovered in the lru crate before 0.7.1 for Rust. The iterators have a use-after-free, as demonstrated by an access after a pop operation...

7.5CVSS7.1AI score0.0118EPSS
SaveExploits1References3
CVE
CVE
added 2021/12/26 9:45 p.m.63 views

CVE-2021-45720

The CVE-2021-45720 entry concerns the Rust lru crate (pre-0.7.1). The vulnerability arises in the iterators for the cache: calling operations such as pop() removes and frees a value, yet references to that value may still be accessed, causing a use-after-free. Affected component: lru crate iterat...

7.5CVSS7.3AI score0.0118EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2021/12/26 9:45 p.m.23 views

CVE-2021-45720

An issue was discovered in the lru crate before 0.7.1 for Rust. The iterators have a use-after-free, as demonstrated by an access after a pop operation...

7.7AI score0.0118EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/12/26 12:00 a.m.6 views

Rust lru crate 资源管理错误漏洞

Mozilla Rust lru crate is an implementation of the LRU cache. a security vulnerability exists in versions of Mozilla Rust lru crate prior to 0.7.1, which can lead to a resource management error. An attacker could exploit this vulnerability to cause memory corruption...

7.5CVSS5.7AI score0.0118EPSS
SaveExploits1References4
RustSec
RustSec
added 2021/12/21 12:00 p.m.16 views

Use after free in lru crate

Lru crate has use after free vulnerability. Lru crate has two functions for getting an iterator. Both iterators give references to key and value. Calling specific functions, like pop, will remove and free the value, and but it's still possible to access the reference of value which is already...

7.5CVSS3AI score0.0118EPSS
SaveExploits1Affected Software1
OSV
OSV
added 2021/12/21 12:00 p.m.17 views

RUSTSEC-2021-0130 Use after free in lru crate

Lru crate has use after free vulnerability. Lru crate has two functions for getting an iterator. Both iterators give references to key and value. Calling specific functions, like pop, will remove and free the value, and but it's still possible to access the reference of value which is already...

7.5CVSS7.5AI score0.0118EPSS
SaveExploits1References3
Oracle linux
Oracle linux
added 2020/05/05 12:00 a.m.33 views

memcached security update

0:1.5.9-3 - fix null-pointer dereference in 'lru mode' and 'lru tempttl' 1709408 - CVE-2019-11596...

7.5CVSS1AI score0.02958EPSS
SaveExploits1
Veracode
Veracode
added 2020/04/29 2:45 a.m.25 views

Denial Of Service (DoS)

memcached is vulnerable to denial of service DoS. The vulnerability exists through a null-pointer dereference in "lru mode" and "lru tempttl" causing denial of service...

7.5CVSS2.5AI score0.02958EPSS
SaveExploits1References12Affected Software1
RedHat Linux
RedHat Linux
added 2020/04/28 3:27 p.m.8 views

memcached: null-pointer dereference in "lru mode" and "lru temp_ttl" causing denial of service

In memcached before 1.5.14, a NULL pointer dereference was found in the "lru mode" and "lru tempttl" commands. This causes a denial of service when parsing crafted lru command messages in processlrucommand in memcached.c...

7.5CVSS7.1AI score0.02958EPSS
SaveExploits1References4
Check Point Advisories
Check Point Advisories
added 2020/01/23 12:00 a.m.11 views

Memcached lru mode Denial of Service (CVE-2019-11596)

A denial of service vulnerability exists in Memcached 'lru mode' and 'lru tempttl' commands. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

5CVSS5AI score0.02958EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2019/06/14 12:00 a.m.200 views

Memcached < 1.5.14 DoS Vulnerability

Memcached is prone to a denial of service DoS vulnerability. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

7.5CVSS7.4AI score0.02958EPSS
SaveExploits1References1
Rows per page
Query Builder