9844 matches found
baal (>=0.1.0 <=0.4.2), bit_crusher (=0.2.0) +20 more potentially affected by CVE-2016-10933 via portaudio (>=0.4.19 <=0.8.0)
portaudio CARGO version =0.4.19, =0.1.0, =0.1.0, =0.0.1, =0.2.0, =0.1.0, =0.3.0, =0.3.0, =0.5.0, =0.2.0, =0.4.0, =0.1.0, =0.2.0, =0.6.2, =0.11.0 and more Source cves: CVE-2016-10933 Source advisory: OSV:RUSTSEC-2016-0003...
RUSTSEC-2016-0002 HTTPS MitM vulnerability due to lack of hostname verification
When used on Windows platforms, all versions of Hyper prior to 0.9.4 did not perform hostname verification when making HTTPS requests. This allows an attacker to perform MitM attacks by preventing any valid CA-issued certificate, even if there's a hostname mismatch. The problem was addressed by...
HTTPS MitM vulnerability due to lack of hostname verification
When used on Windows platforms, all versions of Hyper prior to 0.9.4 did not perform hostname verification when making HTTPS requests. This allows an attacker to perform MitM attacks by preventing any valid CA-issued certificate, even if there's a hostname mismatch. The problem was addressed by...
