9409 matches found
UBUNTU-CVE-2019-15547
An issue was discovered in the ncurses crate through 5.99.0 for Rust. There are format string issues in printw functions because C format arguments are mishandled...
CVE-2017-18588
The CVE targets the Rust security-framework crate (before 0.1.12). When ClientBuilder uses custom root certificates, hostname verification for TLS certificates does not occur. The issue is caused by hostname validation not being performed in that scenario. A fix is available by upgrading to 0.1.1...
CVE-2017-18588
An issue was discovered in the security-framework crate before 0.1.12 for Rust. Hostname verification for certificates does not occur if ClientBuilder uses custom root certificates...
CVE-2017-18588
An issue was discovered in the security-framework crate before 0.1.12 for Rust. Hostname verification for certificates does not occur if ClientBuilder uses custom root certificates...
CVE-2018-20989
An issue was discovered in the untrusted crate before 0.6.2 for Rust. Error handling can trigger an integer underflow and panic...
CVE-2018-20989
An issue was discovered in the untrusted crate before 0.6.2 for Rust. Error handling can trigger an integer underflow and panic...
CVE-2018-20989
CVE-2018-20989 affects the Rust crate named untrusted (pre-0.6.2). The issue is a flaw in error handling that can trigger an integer underflow and cause a panic. The vulnerability is documented across multiple sources (NVD entry, Red Hat, Debian, Ubuntu, Nessus plugin, GHSA advisory) consistently...
CVE-2019-15549
An issue was discovered in the asn1der crate before 0.6.2 for Rust. Attackers can trigger memory exhaustion by supplying a large value in a length field...
Design/Logic Flaw
An issue was discovered in the asn1der crate before 0.6.2 for Rust. Attackers can trigger memory exhaustion by supplying a large value in a length field...
CVE-2017-18589
CVE-2017-18589 affects the Rust cookie crate (pre-0.7.6). The issue arises from using time::Duration::seconds to parse Max-Age; very large integer values trigger a panic, potentially causing DoS. The Red Hat, Debian, GHSA, OSV, and RustSec records corroborate: the vulnerability is caused by Max-A...
CVE-2017-18589
An issue was discovered in the cookie crate before 0.7.6 for Rust. Large integers in the Max-Age of a cookie cause a panic...
CVE-2017-18589
An issue was discovered in the cookie crate before 0.7.6 for Rust. Large integers in the Max-Age of a cookie cause a panic...
CVE-2018-20995
The CVE-2018-20995 issue affects the Rust crate slice-deque prior to 0.1.16. The root cause is move_head_unchecked not updating the deque’s head/tail correctly when updates occur (front insert/remove or mirroring region edge cases), which can lead to memory corruption. Exploitation could cause re...
CVE-2018-20995
An issue was discovered in the slice-deque crate before 0.1.16 for Rust. moveheadunchecked allows memory corruption because deque updates are mishandled...
CVE-2018-20996
An issue was discovered in the crossbeam crate before 0.4.1 for Rust. There is a double free because of destructor mishandling...
CVE-2018-20996
An issue was discovered in the crossbeam crate before 0.4.1 for Rust. There is a double free because of destructor mishandling...
CVE-2018-20996
The CVE-2018-20996 issue affects the Rust crossbeam crate prior to 0.4.1, where a destructor mishandling leads to a double free. Affected component: crossbeam crate (Rust) before 0.4.1. Root cause: explicit double free due to destructor handling in the drop path. Impact stated in sources: high/cr...
CVE-2018-20997
CVE-2018-20997 affects the openssl crate for Rust prior to 0.10.9, describing a use-after-free in CMS Signing. The provided documents do not include patch versions, mitigations, or explicit exploitation details; severity is cited as high/critical in external references (e.g., CVSS), but no exploi...