Lucene search
+L

5 matches found

Github Security Blog
Github Security Blog
•added 2022/06/17 12:14 a.m.•27 views

Window can read out of bounds if Read instance returns more bytes than buffer size

rdiff performs a diff of two provided strings or files. As part of its reading code it uses the return value of a Read instance to set the length of its internal character vector. If the Read implementation claims that it has read more bytes than the length of the provided buffer, the length of t...

6.9AI score
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/07 12:00 a.m.•3 views

CVE-2021-30454: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in the outercgi crate before 0.2.1 for Rust. A user-provided Read instance receives an uninitialized memory buffer from KeyValueReader...

9.8CVSS6AI score0.011EPSS
SaveExploits0References2
OSV
OSV
•added 2021/02/03 12:00 p.m.•53 views

RUSTSEC-2021-0094 Window can read out of bounds if Read instance returns more bytes than buffer size

rdiff performs a diff of two provided strings or files. As part of its reading code it uses the return value of a Read instance to set the length of its internal character vector. If the Read implementation claims that it has read more bytes than the length of the provided buffer, the length of t...

7.5CVSS7.3AI score0.01059EPSS
SaveExploits0References3
OSV
OSV
•added 2021/01/31 12:00 p.m.•59 views

RUSTSEC-2021-0051 KeyValueReader passes uninitialized memory to Read instance

The KeyValueReader type in affected versions of this crate set up an uninitialized memory buffer and passed them to be read in to a user-provided Read instance. The Read instance could read uninitialized memory and cause undefined behavior and miscompilations. This issue was fixed in commit dd59b...

9.8CVSS9.3AI score0.011EPSS
SaveExploits0References3
RustSec
RustSec
•added 2021/01/31 12:00 p.m.•37 views

KeyValueReader passes uninitialized memory to Read instance

The KeyValueReader type in affected versions of this crate set up an uninitialized memory buffer and passed them to be read in to a user-provided Read instance. The Read instance could read uninitialized memory and cause undefined behavior and miscompilations. This issue was fixed in commit dd59b...

9.8CVSS5.2AI score0.011EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder