12680 matches found
CVE-2025-64345
CVE-2025-64345 affects Wasmtime (WebAssembly runtime). The Rust embedder API allows an unsound view of shared WebAssembly linear memory as a safe host-access type, enabling potential data races when memories are shared across threads. Fixed in patch releases for all supported versions (notably 24...
CVE-2025-64170
sudo-rs is a memory safe implementation of sudo and su written in Rust. Starting in version 0.2.7 and prior to version 0.2.10, if a user begins entering a password but does not press return for an extended period, a password timeout may occur. When this happens, the keystrokes that were entered a...
CVE-2025-64170 sudo-rs: Partial password reveal is possible after timeout
sudo-rs is a memory safe implementation of sudo and su written in Rust. Starting in version 0.2.7 and prior to version 0.2.10, if a user begins entering a password but does not press return for an extended period, a password timeout may occur. When this happens, the keystrokes that were entered a...
CVE-2025-64170: Missing Password Field Masking
sudo-rs is a memory safe implementation of sudo and su written in Rust. Starting in version 0.2.7 and prior to version 0.2.10, if a user begins entering a password but does not press return for an extended period, a password timeout may occur. When this happens, the keystrokes that were entered a...
CVE-2025-64345: Concurrent Execution using Shared Resource with Improper Synchronization
Wasmtime is a runtime for WebAssembly. Prior to version 38.0.4, 37.0.3, 36.0.3, and 24.0.5, Wasmtime's Rust embedder API contains an unsound interaction where a WebAssembly shared linear memory could be viewed as a type which provides safe access to the host Rust to the contents of the linear...
PT-2025-46704
Ubuntu's Rust Transition Hits Another Bump as sudo-rs Security Vulnerabilities Show Up https://t.co/J0uiXr4DC3 - Ubuntu addresses a critical sudo vulnerability CVE-2023-34996, ur...
Ubuntu: Security Advisory (USN-7867-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DSA-6052-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 6052-1] rust-sudo-rs security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6052-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 11, 2025 https://www.debian.org/security/faq -...
Amazon Linux 2 : amazon-efs-utils, --advisory ALAS2-2025-3076 (ALAS-2025-3076)
The version of amazon-efs-utils installed on the remote host is prior to 2.4.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-3076 advisory. regex is an implementation of regular expressions for the Rust language. The regex crate features built-in...
Debian dsa-6052 : librust-sudo-rs-dev - security update
The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6052 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6052-1 [email protected] https://www.debian.org/security/ Moritz...
PT-2025-51673
Name of the Vulnerable Software and Affected Versions Linux kernel versions 6.18 and later Android Binder driver Rust implementation Description The first Common Vulnerabilities and Exposures CVE has been assigned to Rust code within the Linux kernel. The issue, identified as CVE-2025-68260,...
DSA-6052-1 rust-sudo-rs - security update
Bulletin has no description...
PT-2025-46559
Name of the Vulnerable Software and Affected Versions sudo affected versions not specified Description The rust rewrite of sudo contains a new issue allowing authentication bypass. This does not affect users utilizing nanos unikernels. Recommendations At the moment, there is no information about ...
CVE-2025-53605 affecting package rust for versions less than 1.72.0-11
CVE-2025-53605 affecting package rust for versions less than 1.72.0-11. A patched version of the package is available...
USN-7867-1 rust-sudo-rs vulnerabilities
It was discovered that sudo-rs incorrectly handled passwords when timeouts occurred and the pwfeedback default was not set. This could result in a partially typed password being output to standard input, contrary to expectations. It was discovered that sudo-rs incorrectly handled the targetpw and...
[SECURITY] Fedora 43 Update: rust-reqsign-aws-v4-2.0.1-1.fc43
AWS SigV4 signing implementation for reqsign...
[SECURITY] Fedora 43 Update: rust-reqsign-http-send-reqwest-2.0.1-1.fc43
Reqwest-based HTTP client implementation for reqsign...