9410 matches found
`mio` invalidly assumes the memory layout of std::net::SocketAddr
The mio crate has assumed std::net::SocketAddrV4 and std::net::SocketAddrV6 have the same memory layout as the system C representation sockaddr. It has simply casted the pointers to convert the socket addresses to the system representation. The standard library does not say anything about the...
[ASA-202011-1] firefox: multiple issues
Arch Linux Security Advisory ASA-202011-1 ========================================= Severity: Critical Date : 2020-11-02 CVE-ID : CVE-2020-15254 CVE-2020-15680 CVE-2020-15681 CVE-2020-15682 CVE-2020-15683 CVE-2020-15684 CVE-2020-15969 Package : firefox Type : multiple issues Remote : Yes Link :...
RUSTSEC-2020-0122 beef::Cow lacks a Sync bound on its Send trait allowing for data races
Affected versions of this crate did not have a T: Sync bound in the Send impl for Cow. This allows users to create data races by making Cow contain types that are Send && !Sync like Cell or RefCell. Such data races can lead to memory corruption. The flaw was corrected in commit d1c7658 by adding...
Remote Code Execution (RCE)
firefox is vulnerable to remote code execution RCE. The vulnerability exists through an undefined behavior in bounded channel of crossbeam rust crate...
RUSTSEC-2020-0059 MutexGuard::map can cause a data race in safe code
Affected versions of the crate had a Send/Sync implementation for MappedMutexGuard that only considered variance on T, while MappedMutexGuard dereferenced to U. This could of led to data races in safe Rust code when a closure used in MutexGuard::map returns U that is unrelated to T. The issue was...
Security Vulnerabilities fixed in Firefox 82 — Mozilla
A use-after-free bug in the usersctp library was reported upstream. We assume this could have led to memory corruption and a potentially exploitable crash. In the crossbeam rust crate, the bounded channel incorrectly assumed that Vec::fromiter had allocated capacity that was the same as the numbe...
CVE-2020-15254
Crossbeam is a set of tools for concurrent programming. In crossbeam-channel before version 0.4.4, the bounded channel incorrectly assumes that Vec::fromiter has allocated capacity that same as the number of iterator elements. Vec::fromiter does not actually guarantee that and may allocate extra...
An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the InlineArray implementation an unaligned reference may be generated for a type that has a large alignment requirement.
...
An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation the array size is not checked when constructed with From<InlineArray<A T>>.
...
An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation insert_from can have a memory-safety issue upon a panic.
...
An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation the array size is not checked when constructed with unit().
...
An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation clone can have a memory-safety issue upon a panic.
...
Mozilla Rust Input Validation Error Vulnerability (CNVD-2021-30571)
Rust is a general-purpose, compiled programming language. An input validation error vulnerability exists in Mozilla Rust version 0.6.2. The vulnerability stems from the Chunk implementation, where unit is executed without checking the size of the array. No details of the vulnerability are availab...
Unspecified Vulnerability in Mozilla Rust (CNVD-2021-30573)
Rust is a general-purpose, compiled programming language. A security vulnerability exists in Mozilla Rust version 0.6.2, which stems from a memory safety issue in the Chunk implementation, clone. No details of the vulnerability are available at this time...
Mozilla Rust Input Validation Error Vulnerability (CNVD-2021-30572)
Rust is a general-purpose, compiled programming language. An input validation error vulnerability exists in Mozilla Rust version 0.6.2, which stems from a failure to check the array size when pair is executed in the Chunk implementation. No details of the vulnerability are available at this time...
Mozilla Rust Input Validation Error Vulnerability (CNVD-2021-30574)
Rust is a general-purpose, compiled programming language. An input validation error vulnerability exists in Mozilla Rust version 0.6.2, which can be exploited by an attacker to cause an error in the Chunk implementation when constructing arrays using without checking the array size...
Mozilla Rust Resource Management Error Vulnerability (CNVD-2021-30575)
Rust is a general-purpose, compiled programming language. A resource management error vulnerability exists in Mozilla Rust version 0.6.2, which stems from a memory safety issue that occurs with insert in the Chunk implementation and can be exploited by an attacker to perform unauthorized operatio...
Mozilla Rust Input Validation Error Vulnerability
Rust is a general-purpose, compiled programming language. An input validation error vulnerability exists in Mozilla Rust version 0.6.2, which originates in the nonlinearray implementation and can be exploited by an attacker to generate unaligned references for types with large alignment...
