12752 matches found
GHSA-G4H2-4WVH-GRC5 Uncontrolled Resource Consumption in simple_asn1
An issue was discovered in the simpleasn1 crate 0.6.0 before 0.6.1 for Rust. There is a panic if UTCTime data, supplied by a remote attacker, has a second character greater than 0x7f...
GHSA-XRG3-HMF3-RVGW Path Traversal in rust-embed
When running in debug mode and the debug-embed off by default feature is not enabled, the generated get method does not check that the input path is a child of the folder given. This allows attackers to read arbitrary files in the file system if they have control over the filename given. The...
Use After Free in rusqlite
An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. createcollation has a use-after-free...
Use After Free in rusqlite
An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. createscalarfunction has a use-after-free...
GHSA-92CX-4XM7-JR9M Use After Free in rusqlite
An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. createscalarfunction has a use-after-free...
Use After Free in rusqlite
An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. createaggregatefunction has a use-after-free...
GHSA-F6F2-3W33-54R9 Use After Free in rusqlite
An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. createaggregatefunction has a use-after-free...
GHSA-G4G4-3PQW-8M7F Use After Free in rusqlite
An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. rollbackhook has a use-after-free...
Use After Free in rusqlite
An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. commithook has a use-after-free...
GHSA-4QR3-M7WW-HH9G Use After Free in rusqlite
An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. commithook has a use-after-free...
Use After Free in rusqlite
An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. createwindowfunction has a use-after-free...
GHSA-87XH-9Q6H-R5CC Use After Free in rusqlite
An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. createwindowfunction has a use-after-free...
GHSA-G87R-23VW-7F87 Use After Free in rusqlite
An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. updatehook has a use-after-free...
Use of Uninitialized Resource in acc_reader.
An issue was discovered in the accreader crate through 2020-12-27 for Rust. readupto may read from uninitialized memory locations...
Abomonation transmutes &T to and from &[u8] without sufficient constraints
An issue was discovered in the abomonation crate through version 0.7.3 for Rust. Because transmute operations are insufficiently constrained, there can be an information leak or ASLR bypass...
azoth (0.1.0), azoth-lmdb (>=0.1.0, <=0.2.5) +18 more potentially affected by unknown CVE via lmdb (>=0.7.2, <=0.8.0)
lmdb CARGO version =0.7.2, =0.1.0, =0.1.0, =0.9.3, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =1.0.5 - mile39 0.1.0 - nostalgia 0.0.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0001...
Rustpad - Multi-Threaded Padding Oracle Attacks Against Any Service
A multi-threaded what now? rustpad is a multi-threaded successor to the classic padbuster, written in Rust. It abuses a Padding Oracle vulnerability to decrypt any cypher text or encrypt arbitrary plain text without knowing the encryption key! Features Decryption of cypher texts Encryption of...
accesskit_windows (>=0.1.0, <=0.3.0), acid_io (0.1.0) +251 more potentially affected by unknown CVE via windows (>=0.2.1, <=0.30.0)
windows CARGO version =0.2.1, =0.1.0, =0.1.5, =0.2.0, =1.0.0, =1.0.0, =1.0.0, =0.0.1, =0.3.0, =0.3.0, =0.1.0, =0.7.0, =0.1.0, =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0008...
RUSTSEC-2022-0004 Stack overflow in rustc_serialize when parsing deeply nested JSON
When parsing JSON using json::Json::fromstr, there is no limit to the depth of the stack, therefore deeply nested objects can cause a stack overflow, which aborts the process. Example code that triggers the vulnerability is rust fn main let = rustcserialize::json::Json::fromstr&"0,".repeat10000;...
