9423 matches found
Unspecified Vulnerability in Mozilla Rust (CNVD-2021-30442)
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in streebog crate in versions of Mozilla Rust prior to 0.8.0, which stems from the Streebog hash function causing a panic. No details of the vulnerability are provided at this tim...
Unspecified vulnerability in Mozilla Rust arr crate
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in Mozilla Rust versions prior to 2020-08-25 in arr crate, which stems from a buffer overflow in Index and IndexMut. No details of the vulnerability are provided at this time...
Unspecified Vulnerability in Rust (CNVD-2021-38322)
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in mio crate for Rust prior to version 0.7.6, which stems from an incorrect expectation of the std::net::SocketAddr memory representation. No details of the vulnerability are...
Mozilla Rust tiny_http crate environment issue vulnerability
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. An environmental issue vulnerability exists in tinyhttp crate in versions of Mozilla Rust prior to 2020-06-16, which stems from an HTTP request smuggling can occur via a misformatted transport encoding header. N...
Mozilla Rust traitobject crate buffer overflow vulnerability
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A buffer overflow vulnerability exists in traitobject crate in versions of Mozilla Rust prior to 2020-06-01, which stems from the fact that it incorrectly expects a fat pointer, and can be exploited by an attack...
Unspecified Vulnerability in Mozilla Rust
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in flatbuffers crate in versions of Mozilla Rust prior to 0.6.1, which stems from the fact that an arbitrary byte can be reinterpreted as a bool.No details of the vulnerability ar...
Unspecified Vulnerability in Rust (CNVD-2021-39165)
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in socket2 crate for Rust prior to version 0.3.16, which stems from its incorrect expectation of the std::net::SocketAddr memory representation. No details of the vulnerability ar...
CVE-2020-26297
CVE-2020-26297 affects mdBook, a Rust-based tool for building online books. The vulnerability is a cross-site scripting flaw in the search feature (introduced in 0.1.4) that could allow an attacker to execute arbitrary JavaScript in a user’s browser via a malicious search query or a crafted link....
RUSTSEC-2021-0001 XSS in mdBook's search page
This is a cross-post of the official security advisoryml. The official post contains a signed version with our PGP key, as well. ml: https://groups.google.com/g/rustlang-security-announcements/c/3-sO6of29O0 The Rust Security Response Working Group was recently notified of a security issue affecti...
Rust Mdmook Cross-Site Scripting Vulnerability
Rust Mdmook is a Rust-based software for building online book applications from Markdown files from the Rust Organization. Rust Mdmook suffers from a cross-site scripting vulnerability that allows an attacker to execute arbitrary JavaScript code on a page...
RUSTSEC-2021-0008 reading on uninitialized buffer can cause UB (`impl<R> BufRead for GreedyAccessReader<R>`)
Affected versions of this crate creates an uninitialized buffer and passes it to user-provided Read implementation. This is unsound, because it allows safe Rust code to exhibit an undefined behavior read from uninitialized memory. The flaw was corrected in version 0.1.1 by zero-initializing a new...
reading on uninitialized buffer can cause UB (`impl<R> BufRead for GreedyAccessReader<R>`)
Affected versions of this crate creates an uninitialized buffer and passes it to user-provided Read implementation. This is unsound, because it allows safe Rust code to exhibit an undefined behavior read from uninitialized memory. The flaw was corrected in version 0.1.1 by zero-initializing a new...
RUSTSEC-2020-0103 `impl Random` on arrays can lead to dropping uninitialized memory
Affected versions of this crate had a panic safety issue to drop partially uninitialized array of T upon panic in a user provided function T::random. Dropping uninitialized T can potentially cause memory corruption or undefined behavior. The flaw was corrected in commit 565d508 by using MaybeUnin...
RUSTSEC-2020-0153 `read` on uninitialized buffer may cause UB (bite::read::BiteReadExpandedExt::read_framed_max)
Affected versions of this crate calls a user provided Read implementation on an uninitialized buffer. Read on uninitialized buffer is defined as undefined behavior in Rust...
`read` on uninitialized buffer may cause UB (bite::read::BiteReadExpandedExt::read_framed_max)
Affected versions of this crate calls a user provided Read implementation on an uninitialized buffer. Read on uninitialized buffer is defined as undefined behavior in Rust...
CVE-2020-35897
An issue was discovered in the atom crate before 0.3.6 for Rust. An unsafe Send implementation allows a cross-thread data race...
CVE-2020-35897
An issue was discovered in the atom crate before 0.3.6 for Rust. An unsafe Send implementation allows a cross-thread data race...
CVE-2020-35896
An issue was discovered in the ws crate through 2020-09-25 for Rust. The outgoing buffer is not properly limited, leading to a remote memory-consumption attack...