Lucene search
+L

23 matches found

CNNVD
CNNVD
added 2020/12/31 12:00 a.m.12 views

Rust lucet-runtime-internals crate security vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in lucet-runtime-internals crate before 0.5.1 for Rust, which stems from incorrect handling of sigstack allocations. Client programs may be able to obtain sensitive information, o...

9.1CVSS5.8AI score0.01505EPSS
SaveExploits0References2
OSV
OSV
added 2020/01/24 12:00 p.m.32 views

RUSTSEC-2020-0004 sigstack allocation bug can cause memory corruption or leak

An embedding using affected versions of lucet-runtime configured to use non-default Wasm globals sizes of more than 4KiB, or compiled in debug mode without optimizations, could leak data from the signal handler stack to guest programs. This can potentially cause data from the embedding host to le...

9.1CVSS9.2AI score0.01505EPSS
SaveExploits0References3
RustSec
RustSec
added 2020/01/24 12:00 p.m.31 views

sigstack allocation bug can cause memory corruption or leak

An embedding using affected versions of lucet-runtime configured to use non-default Wasm globals sizes of more than 4KiB, or compiled in debug mode without optimizations, could leak data from the signal handler stack to guest programs. This can potentially cause data from the embedding host to le...

9.1CVSS1.1AI score0.01505EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder