9409 matches found
CVE-2018-20998
The CVE-2018-20998 issue affects the arrayfire crate for Rust prior to 3.6.0, where adding repr() to an enum is mishandled and can cause memory corruption. Multiple sources confirm the root cause is the repr() attribute interaction with C-FFI, leading to memory corruption on certain toolchains/Ru...
CVE-2019-15542
An issue in the ammonia crate for Rust (before 2.1.0) causes uncontrolled recursion during HTML DOM tree serialization in the affected component. The documents provide the vulnerability description but do not specify exploit vectors, practical impact beyond potential recursion, or concrete remedi...
CVE-2019-15542
An issue was discovered in the ammonia crate before 2.1.0 for Rust. There is uncontrolled recursion during HTML DOM tree serialization...
CVE-2019-15542
An issue was discovered in the ammonia crate before 2.1.0 for Rust. There is uncontrolled recursion during HTML DOM tree serialization...
CVE-2019-15543
An issue was discovered in the slice-deque crate before 0.2.0 for Rust. There is memory corruption in certain allocation cases...
CVE-2019-15543
CVE-2019-15543 refers to a memory corruption issue in the Rust slice-deque crate prior to 0.2.0. The vulnerability occurs in certain allocation patterns where mem::size_of::() % allocation_granularity() != 0 can cause memory corruption as elements are moved, enabling reading bytes from adjacent e...
CVE-2019-15544
The CVE-2019-15544 issue affects the protobuf crate for Rust (pre-2.6.0). The vulnerability arises from Vec::reserve being fed by user-supplied input, enabling memory exhaustion. Documented impact: Out-of-Memory conditions, potentially affecting affected Rust crates that rely on this protobuf imp...
CVE-2019-15544
An issue was discovered in the protobuf crate before 2.6.0 for Rust. Attackers can exhaust all memory via Vec::reserve calls...
CVE-2019-15545
CVE-2019-15545 affects the libp2p-core crate before 0.8.1 for Rust. The root cause is improper verification of ed25519 signatures, where any signature with a correct length could be treated as valid, allowing an attacker to impersonate any node identity. The vulnerability has multiple publicly li...
CVE-2019-15546
CVE-2019-15546 affects the Rust pancurses crate up to version 0.16.1. The issue resides in printw and mvprintw format handling, where a Rust &str is passed to C, enabling a format-string attack. This can potentially allow writing to stack memory. Publicly documented advisories (RustSEC/RUSTSEC-20...
CVE-2019-15547
The CVE-2019-15547 entry concerns the ncurses crate for Rust, affected up to version 5.99.0. The root cause is improper handling of C format arguments in the printw family of functions, leading to format string issues. The provided documents describe the vulnerability's presence but do not specif...
CVE-2019-15547
Removed by vendor...
CVE-2019-15547
An issue was discovered in the ncurses crate through 5.99.0 for Rust. There are format string issues in printw functions because C format arguments are mishandled...
CVE-2019-15548
An issue was discovered in the ncurses crate through 5.99.0 for Rust. There are instr and mvwinstr buffer overflows because interaction with C functions is mishandled...
CVE-2019-15548
The CVE-2019-15548 issue affects the ncurses crate for Rust (up to version 5.99.0). The vulnerability arises from buffer overflows in instr and mvwinstr when interacting with C functions, caused by mishandling between Rust and C boundaries. Impact is described as potential buffer/heap overflow; C...
CVE-2019-15549
CVE-2019-15549 affects the asn1_der crate for Rust prior to 0.6.2. Root cause: it preallocated memory based on a maliciously crafted ASN.1-DER length field, enabling memory exhaustion. Impact: potential denial of service due to memory exhaustion; CVSS information in sources indicates high impact ...
CVE-2019-15549
An issue was discovered in the asn1der crate before 0.6.2 for Rust. Attackers can trigger memory exhaustion by supplying a large value in a length field...
CVE-2019-15554
An issue was discovered in the smallvec crate before 0.6.10 for Rust. There is memory corruption for certain grow attempts with less than the current capacity...
