CVE-2021-21328

Vapor is a web framework for Swift. In Vapor before version 4.40.1, there is a DoS attack against anyone who Bootstraps a metrics backend for their Vapor app. The following is the attack vector: 1. send unlimited requests against a vapor instance with different paths. this will create unlimited...

CVE-2021-23962: Undefined Security Weakness

Incorrect use of the ' ' method could have led to a user-after-poison and a potentially exploitable crash. This vulnerability affects Firefox 85...

Denial of Service

Withdrawn: Duplicate of GHSA-j95h-wmx9-4279. Affected versions of the package are vulnerable to a Denial of Service attack sending an OPTIONS request for an undefined route...

GHSA-J95H-WMX9-4279 Denial of Service

Withdrawn: Duplicate of GHSA-j95h-wmx9-4279. Affected versions of the package are vulnerable to a Denial of Service attack sending an OPTIONS request for an undefined route...

p11-kit:rpc_fuzzer: Crash in p11_rpc_buffer_get_byte_value

Project: https://github.com/p11-glue/p11-kit.git Detailed Report: https://oss-fuzz.com/testcase?key=5966366839537664 Project: p11-kit Fuzzing Engine: libFuzzer Fuzz Target: rpcfuzzer Job Type: libfuzzerubsanp11-kit Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0xffffffffffffffff Cra...

PT-2021-27330

Name of the Vulnerable Software and Affected Versions: tor versions prior to 0.4.4.7 tor versions prior to 0.4.5.6 Description: The issue concerns updates to the tor software, which include various fixes and improvements. These updates introduce a new MetricsPort HTTP interface, support IPv6 in t...

PT-2021-27329

Name of the Vulnerable Software and Affected Versions: tor versions prior to 0.4.5.6 tor versions prior to 0.4.4.7 Description: The issue concerns updates to the tor software, introducing various improvements and fixes, including the introduction of a new MetricsPort HTTP interface, support for...

RUSTSEC-2021-0046 misc::vec_with_size() can drop uninitialized memory if clone panics

misc::vecwithsize creates a vector of the provided size and immediately calls vec.setlensize on it, initially filling it with uninitialized memory. It then inserts elements using veci = value.clone. If the value.clone call panics, uninitialized items in the vector will be dropped leading to...

RUSTSEC-2021-0043 PartialReader passes uninitialized memory to user-provided Read

Affected versions of this crate passed an uniniitalized buffer to a user-provided Read instance in PartialReader::read. This can result in safe Read implementations reading from the uninitialized buffer leading to undefined behavior. The flaw was fixed in commit 39d62c6 by zero-initializing the...

PartialReader passes uninitialized memory to user-provided Read

Affected versions of this crate passed an uniniitalized buffer to a user-provided Read instance in PartialReader::read. This can result in safe Read implementations reading from the uninitialized buffer leading to undefined behavior. The flaw was fixed in commit 39d62c6 by zero-initializing the...

Tape::take_bytes exposes uninitialized memory to a user-provided Read

Affected versions of this crate passed an unininitialized buffer to a user-provided Read instance in Tape::takebytes. This can result in safe Read implementations reading from the uninitialized buffer leading to undefined behavior. The flaw was corrected in commit 1f2dc7f37dd by removing the unsa...

`Read` on uninitialized buffer may cause UB ('tectonic_xdv' crate)

Affected versions of this crate passes an uninitialized buffer to a user-provided Read implementation. Arbitrary Read implementations can read from the uninitialized buffer memory exposure and also can return incorrect number of bytes written to the buffer. Reading from uninitialized memory...

RUSTSEC-2021-0112 `Read` on uninitialized buffer may cause UB ('tectonic_xdv' crate)

Affected versions of this crate passes an uninitialized buffer to a user-provided Read implementation. Arbitrary Read implementations can read from the uninitialized buffer memory exposure and also can return incorrect number of bytes written to the buffer. Reading from uninitialized memory...

RUSTSEC-2021-0029 Tape::take_bytes exposes uninitialized memory to a user-provided Read

Affected versions of this crate passed an unininitialized buffer to a user-provided Read instance in Tape::takebytes. This can result in safe Read implementations reading from the uninitialized buffer leading to undefined behavior. The flaw was corrected in commit 1f2dc7f37dd by removing the unsa...

PT-2021-18550

Name of the Vulnerable Software and Affected Versions telemetry crate versions through 0.1.2 telemetry crate versions through 2021-02-17 Description An issue was discovered in the telemetry crate where there is a drop of uninitialized memory if a value.clone call panics within misc::vec with size...

CVE-2021-26934: Undefined Security Weakness

An issue was discovered in the Linux kernel 4.18 through 5.10.16, as used by Xen. The backend allocation aka be-alloc mode of the drmxenfront drivers was not meant to be a supported configuration, but this wasn't stated accordingly in its support status entry...

PT-2021-24277

Name of the Vulnerable Software and Affected Versions: tectonic xdv crate versions prior to 0.1.12 Description: An issue in the tectonic xdv crate allows XdvParser::::process to read from uninitialized memory locations. Affected versions of this crate pass an uninitialized buffer to a user-provid...

PT-2021-18547

Name of the Vulnerable Software and Affected Versions uu od crate versions prior to 0.0.4 Description An issue in the PartialReader of the uu od crate allows attackers to read the contents of uninitialized memory locations via a user-provided Read operation. This can result in safe Read...

PT-2021-17718

Name of the Vulnerable Software and Affected Versions: truetype crate versions prior to 0.30.1 Description: An issue in the truetype crate allows attackers to read the contents of uninitialized memory locations via a user-provided Read operation within Tape::take bytes. This can result in safe Re...

WS-2021-0027

Affected versions of this crate passed an unininitialized buffer to a user-provided Read instance in Tape::takebytes. This can result in safe Read implementations reading from the uninitialized buffer leading to undefined behavior. The flaw was corrected in commit 1f2dc7f37dd by removing the unsa...