68 matches found
sequoia-openpgp vulnerable to out-of-bounds array access leading to panic
Affected versions of the crate have several bugs where attacker-controlled input can result in the use of an out-of-bound array index. Rust detects the use of the out-of-bound index and causes the application to panic. An attacker may be able to use this to cause a denial-of-service. However, it ...
GHSA-25MX-8F3V-8WH7 sequoia-openpgp vulnerable to out-of-bounds array access leading to panic
Affected versions of the crate have several bugs where attacker-controlled input can result in the use of an out-of-bound array index. Rust detects the use of the out-of-bound index and causes the application to panic. An attacker may be able to use this to cause a denial-of-service. However, it ...
Fedora: Security Advisory for rust-sequoia-openpgp (FEDORA-2023-1d0d71b6aa)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 37 : rust-buffered-reader / rust-nettle / rust-nettle-sys / etc (2023-1d0d71b6aa)
The remote Fedora 37 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2023-1d0d71b6aa advisory. - Update the sequoia-openpgp crate to version 1.16.0. - Update the nettle crate to version 7.3.0. - Update the nettle-sys crate to version 2.2.0. - Update th...
btctax-store (>=0.1.0, <=0.18.0), did-webkey (0.1.1) +4 more potentially affected by CVE-2023-53160 via sequoia-openpgp (1.14.0)
sequoia-openpgp CARGO version 1.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on sequoia-openpgp and may be impacted: - btctax-store =0.1.0, =0.3.0, =0.4.0-rc.1, =5.0.4 Source cves: CVE-2023-53160 Source advisory: OSV:RUSTSEC-2023-0038...
sequoia-openpgp (1.8.1) potentially affected by CVE-2023-53161 via buffered-reader (1.1.3)
buffered-reader CARGO version 1.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on buffered-reader and may be impacted: - sequoia-openpgp 1.8.1 Source cves: CVE-2023-53161 Source advisory: OSV:RUSTSEC-2023-0039...
PT-2025-31039 · Unknown +1 · Sequoia-Openpgp +1
Name of the Vulnerable Software and Affected Versions: sequoia-openpgp crate versions prior to 1.16.0 Description: The sequoia-openpgp crate contains a flaw that allows out-of-bounds array access, potentially leading to a panic. Recommendations: Update to sequoia-openpgp crate version 1.16.0 or...
