12747 matches found
Fedora: Security Advisory for rust-sequoia-octopus-librnp (FEDORA-2023-c17427d18a)
The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
streaming-libdeflate-rs (>=0.2.4, <=0.3.1), v_frame (0.3.2) potentially affected by unknown CVE via maligned (0.2.1)
maligned CARGO version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on maligned and may be impacted: - streaming-libdeflate-rs =0.2.4, =0.3.1 - vframe 0.3.2 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0017...
abrute (>=0.1.7, <=0.1.9), alass-cli (>=1.0.0, <=2.0.0) +108 more potentially affected by unknown CVE via ascii (>=0.7.1, <=0.8.7)
ascii CARGO version =0.7.1, =0.1.7, =1.0.0, =0.1.0, =0.1.0, =0.1.4, =0.2.0, =0.0.1, =0.0.0, =0.0.1, =0.0.1, =0.15.7, =2.0.0-beta3, =3.0.0-alpha.5 and more Source cves: unknown CVE Source advisory: OSV:GHSA-MRRW-GRHQ-86GF...
Ascii (crate) allows out-of-bounds array indexing in safe code
Affected version of this crate had implementation of From for &mut u8 and &mut str. This can result in out-of-bounds array indexing in safe code. The flaw was corrected in commit 8a6c779 by removing those impls...
RUSTSEC-2023-0015 Ascii allows out-of-bounds array indexing in safe code
Affected version of this crate had implementation of From for &mut u8 and &mut str. This can result in out-of-bounds array indexing in safe code. The flaw was corrected in commit 8a6c779 by removing those impls...
GHSA-MC8H-8Q98-G5HR Race Condition Enabling Link Following and Time-of-check Time-of-use (TOCTOU) Race Condition in remove_dir_all
The removedirall crate is a Rust library that offers additional features over the Rust standard library fs::removedirall function. It suffers the same class of failure as the code it was layering over: TOCTOU race conditions, with the ability to cause arbitrary paths to be deleted by substituting...
Race Condition Enabling Link Following and Time-of-check Time-of-use (TOCTOU) Race Condition in remove_dir_all
The removedirall crate is a Rust library that offers additional features over the Rust standard library fs::removedirall function. It suffers the same class of failure as the code it was layering over: TOCTOU race conditions, with the ability to cause arbitrary paths to be deleted by substituting...
abd-clam (>=0.22.2, <=0.30.0), abrute (>=0.1.2, <=0.1.9) +1995 more potentially affected by unknown CVE via remove_dir_all (>=0.3.0, <=0.7.0)
removedirall CARGO version =0.3.0, =0.22.2, =0.1.2, =0.1.0, =0.2.0, =2.1.0, =0.1.0-rc1, =0.10.0, =0.11.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-MC8H-8Q98-G5HR...
Google Teams Up with Ecosystem Partners to Enhance Security of SoC Processors
Google said it's working with ecosystem partners to harden the security of firmware that interacts with Android. While the Android operating system runs on what's called the application processor AP, it's just one of the many processors of a system-on-chip SoC that cater to various tasks like...
Google Teams Up with Ecosystem Partners to Enhance Security of SoC Processors
Google said it's working with ecosystem partners to harden the security of firmware that interacts with Android. While the Android operating system runs on what's called the application processor AP, it's just one of the many processors of a system-on-chip SoC that cater to various tasks like...
abd-clam (>=0.22.2, <=0.30.0), abrute (>=0.1.2, <=0.1.9) +1995 more potentially affected by unknown CVE via remove_dir_all (>=0.3.0, <=0.7.0)
removedirall CARGO version =0.3.0, =0.22.2, =0.1.2, =0.1.0, =0.2.0, =2.1.0, =0.1.0-rc1, =0.10.0, =0.11.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0018...
Race Condition Enabling Link Following and Time-of-check Time-of-use (TOCTOU)
The removedirall crate is a Rust library that offers additional features over the Rust standard library fs::removedirall function. It was possible to trick a privileged process doing a recursive delete in an attacker controlled directory into deleting privileged files, on all operating systems. F...
AZL-13660 CVE-2023-23915 affecting package rust for versions less than 1.72.0-2
A cleartext transmission of sensitive information vulnerability exists in curl v7.88.0 that could cause HSTS functionality to behave incorrectly when multiple URLs are requested in parallel. Using its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text HTTP...
Amazon Linux 2 : rust (ALAS-2023-1959)
The version of rust installed on the remote host is prior to 1.66.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-1959 advisory. Cargo is a package manager for the rust programming language. After a package is downloaded, Cargo extracts its source code ...
AZL-61516 CVE-2022-31394 affecting package rust for versions less than hyper-0.14.25
Hyperium Hyper before 0.14.19 does not allow for customization of the maxheaderlistsize method in the H2 third-party software, allowing attackers to perform HTTP2 attacks...
aubio-sys (>=0.2.0, <=0.2.1), bliss-audio-aubio-sys (>=0.2.0, <=0.2.4) +23 more potentially affected by unknown CVE via ftp (3.0.1)
ftp CARGO version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on ftp and may be impacted: - aubio-sys =0.2.0, =0.2.0, =0.0.3, =1.1.1, =0.3.2, =0.5.0, =0.0.1, =0.4.17, =1.0.0, =0.1.0-dev, =0.5.0, =1.2.1, =1.5.0 and more Source cves: unknown CVE...
SUSE CVE-2015-20001
In the standard library in Rust before 1.2.0, BinaryHeap is not panic-safe. The binary heap is left in an inconsistent state when the comparison of generic elements inside siftup or siftdownrange panics. This bug leads to a drop of zeroed memory as an arbitrary type, which can result in a memory...
SUSE CVE-2017-20004
In the standard library in Rust before 1.19.0, there is a synchronization problem in the MutexGuard object. MutexGuards can be used across threads with any types, allowing for memory safety issues through race conditions...