CVE-2021-45710

An issue was discovered in the tokio crate before 1.8.4, and 1.9.x through 1.13.x before 1.13.1, for Rust. In certain circumstances involving a closed oneshot channel, there is a data race and memory corruption...

CVE-2021-45710

CVE-2021-45710 affects the tokio crate for Rust, in versions prior to 1.8.4 and 1.9.x–1.13.x prior to 1.13.1, where a data race in certain conditions involving a closed oneshot channel can cause memory corruption. The provided documents specify the issue and impacted version ranges but do not inc...

CVE-2021-45711

An issue was discovered in the simpleasn1 crate 0.6.0 before 0.6.1 for Rust. There is a panic if UTCTime data, supplied by a remote attacker, has a second character greater than 0x7f...

CVE-2021-45711

The CVE-2021-45711 entry concerns the Rust crate simple_asn1, specifically versions before 0.6.1. The vulnerability arises in parsing UTCTime: if data provided by a remote attacker contains a second character greater than 0x7f, a panic occurs. This is documented as a panic during parsing (e.g., i...

CVE-2021-45712

The CVE-2021-45712 entry affects the rust-embed crate for Rust prior to 6.3.0. In debug mode, the generated Asset::get path traversal vulnerability occurs when the input path isn’t properly constrained, allowing ‘..’ segments to access files outside the assets folder. Documented analyses (OSV/RUS...

CVE-2021-45712

An issue was discovered in the rust-embed crate before 6.3.0 for Rust. A ../ directory traversal can sometimes occur in debug mode...

CVE-2021-45713

An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. createscalarfunction has a use-after-free...

CVE-2021-45713

Summary ( CVE-2021-45713 / rusqlite ) : The vulnerability concerns the Rust rusqlite crate versions 0.25.x before 0.25.4 and 0.26.x before 0.26.2, where several closure/callback APIs (including create_scalar_function, create_aggregate_function, create_window_function, and related hooks) have a us...

CVE-2021-45714

Summary: Several OSV and advisory records confirm a use-after-free in the rusqlite crate for Rust, affecting 0.25.x before 0.25.4 and 0.26.x before 0.26.2. The issues concern multiple callback-registration paths and related closures (e.g., create_aggregate_function, create_scalar_function, create...

CVE-2021-45714

An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. createaggregatefunction has a use-after-free...

CVE-2021-45715

An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. createwindowfunction has a use-after-free...

CVE-2021-45715

rusqlite vulnerabilities (CVE-2021-45715) affect Rust crates 0.25.x before 0.25.4 and 0.26.x before 0.26.2 with use-after-free in various callback hooks. OSV/GHSA details show direct issues in create_window_function, create_scalar_function, create_aggregate_function, create_collation, and hooks s...

CVE-2021-45716

The CVE-2021-45716 issue affects the rusqlite crate for Rust, in versions 0.25.x before 0.25.4 and 0.26.x before 0.26.2, where create_collation (and related closure-handling APIs) exhibits a use-after-free condition. The OSV entries for rusqlite (GHSA variants) and related advisories confirm the ...

CVE-2021-45716

An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. createcollation has a use-after-free...

CVE-2021-45717

The CVE-2021-45717 entry corresponds to an issue in the rusqlite crate (Rust) where use-after-free vulnerabilities exist in multiple callback/hooks. Affected versions are 0.25.x before 0.25.4 and 0.26.x before 0.26.2; the problem affects functions that register or invoke callbacks, including: com...

CVE-2021-45717

An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. commithook has a use-after-free...

CVE-2021-45718

The CVE-2021-45718 entry concerns rusqlite for Rust with multiple use-after-free issues in 0.25.x before 0.25.4 and 0.26.x before 0.26.2. Affected components include rollback_hook, commit_hook, update_hook, create_scalar_function, create_aggregate_function, create_window_function, and create_coll...

CVE-2021-45718

An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. rollbackhook has a use-after-free...

CVE-2021-45719

An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. updatehook has a use-after-free...

CVE-2021-45719

The CVE-2021-45719 issue affects rusqlite (Rust) versions 0.25.x before 0.25.4 and 0.26.x before 0.26.2, with use-after-free in update_hook (and related closure hooks) that could compromise safety. Multiple OSV entries and advisories confirm use-after-free in several rusqlite APIs, including crea...