afterglow (>=0.1.0, <=0.3.0), aiid_js (0.0.1) +47 more potentially affected by unknown CVE via bumpalo (>=2.6.0, <=3.6.1)

bumpalo CARGO version =2.6.0, =0.1.0, =0.1.0, =3.0.0, =0.1.0, =0.1.0, =0.1.1, =0.1.1, =0.1.0, =0.1.0, =0.1.1, =0.1.10, =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0078...

Use-after-free due to a lifetime error in `Vec::into_iter()`

In affected versions of this crate, the lifetime of the iterator produced by Vec::intoiter is not constrained to the lifetime of the Bump that allocated the vector's memory. Using the iterator after the Bump is dropped causes use-after-free accesses. The following example demonstrates memory...

RUSTSEC-2022-0078 Use-after-free due to a lifetime error in `Vec::into_iter()`

In affected versions of this crate, the lifetime of the iterator produced by Vec::intoiter is not constrained to the lifetime of the Bump that allocated the vector's memory. Using the iterator after the Bump is dropped causes use-after-free accesses. The following example demonstrates memory...

GCC security vulnerabilities

Gcc is a collection of Gnu compilers. It is primarily used to compile the C and C++ languages. A security vulnerability exists in GCC that stems from the discovery that GCC v12.0 contains uncontrolled recursion via the component libiberty/rust-demangle.c. This vulnerability allows an attacker to...

PT-2022-12604

Name of the Vulnerable Software and Affected Versions GCC version 12.0 Description The issue is related to an uncontrolled recursion in the libiberty/rust-demangle.c component, allowing attackers to cause a Denial of Service DoS by consuming excessive CPU and memory resources. Recommendations For...

CVE-2021-46195: Uncontrolled Recursion

GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c. This vulnerability allows attackers to cause a Denial of Service DoS by consuming excessive CPU and memory resources...

Scemu - X86 32bits Emulator, For Securely Emulating Shellcodes

x86 32bits emulator, for securely emulating shellcodes. Features  rust safety, good for malware. All dependencies are in rust. zero unsafe blocks. very fast emulation much faster than unicorn 3,000,000 instructions/second 100,000 instructions/second printing every instruction -vv. powered by...

account-db (0.1.0), anything (>=0.1.0, <=0.1.4) +106 more potentially affected by CVE-2021-45720 via lru (>=0.1.17, <=0.6.6)

lru CARGO version =0.1.17, =0.1.0, =0.1.1, =0.1.1, =0.1.0, =0.1.1, =0.0.1, =0.11.0, =0.3.0-beta.1, =0.1.9, =0.8.0-alpha1, =0.8.1 - cw-erc20 0.4.0 - cw-escrow 0.4.0 and more Source cves: CVE-2021-45720 Source advisory: OSV:GHSA-V362-2895-H9R2...

GHSA-9QJ6-4RFQ-VM84 Out-of-bounds Write in actix-web

An issue was discovered in the actix-web crate before 0.7.19 for Rust. It can unsoundly coerce an immutable reference into a mutable reference, leading to memory corruption...

acto-rs (>=0.2.9, <=0.3.7), alumina (>=0.1.0, <=0.1.1) +154 more potentially affected by CVE-2018-25023 via smallvec (>=0.1.8, <=0.5.1)

smallvec CARGO version =0.1.8, =0.2.9, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =1.1.0, =1.3.0 and more Source cves: CVE-2018-25023 Source advisory: OSV:GHSA-55M5-WHCV-C49C...

GHSA-7X36-H62W-VW65 Out-of-bounds Write in actix-web

An issue was discovered in the actix-web crate before 0.7.15 for Rust. It can add the Send marker trait to an object that cannot be sent between threads safely, leading to memory corruption...

GHSA-FGFM-HQJW-3265 Out-of-bounds Write in actix-web

An issue was discovered in the actix-web crate before 0.7.15 for Rust. It can unsoundly extend the lifetime of a string, leading to memory corruption...

arsdk-rs (>=0.0.2, <=0.0.5), burritun (>=0.1.0, <=0.1.1) +38 more potentially affected by CVE-2019-25054 via pnet (>=0.12.0, <=0.26.0)

pnet CARGO version =0.12.0, =0.0.2, =0.1.0, =1.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.1, =0.0.1, =0.3.0, =0.5.1 - jumpingsumo-rs 0.0.2 - kipa 0.1.2 and more Source cves: CVE-2019-25054 Source advisory: OSV:GHSA-24G6-5RX7-58WJ...

GHSA-24G6-5RX7-58WJ Missing Initialization of Resource in pnet

An issue was discovered in the pnet crate before 0.27.2 for Rust. There is a segmentation fault upon attempted dereference of an uninitialized descriptor because of an erroneous IcmpTransportChannelIterator compiler optimization...

Use of Uninitialized Resource in acc_reader.

An issue was discovered in the accreader crate through 2020-12-27 for Rust. readupto may read from uninitialized memory locations...

GHSA-799F-R78P-GQ9C Use of Uninitialized Resource in acc_reader.

An issue was discovered in the accreader crate through 2020-12-27 for Rust. readupto may read from uninitialized memory locations...

GHSA-P4CR-64X4-F92F Use of Uninitialized Resource in acc_reader.

An issue was discovered in the accreader crate through 2020-12-27 for Rust. fillbuf may read from uninitialized memory locations...

GHSA-V2CH-FC8F-QM33 Use of Uninitialized Resource in bite.

An issue was discovered in the bite crate through 2020-12-31 for Rust. read::BiteReadExpandedExt::readframedmax may read from uninitialized memory locations...

Use of Uninitialized Resource in bite.

An issue was discovered in the bite crate through 2020-12-31 for Rust. read::BiteReadExpandedExt::readframedmax may read from uninitialized memory locations...

Use of Uninitialized Resource in bronzedb-protocol.

An issue was discovered in the bronzedb-protocol crate through 2021-01-03 for Rust. ReadKVExt may read from uninitialized memory locations...