5871 matches found
Uninitialized memory exposure in string reading functions
Multiple string reading functions expose uninitialized memory by setting length to capacity when no null terminator is found. This allows reading uninitialized memory which may contain sensitive data from previous allocations. The ncurses-rs repository is archived and unmaintained...
Uninitialized memory exposure in any_as_u8_slice
The safe function anyasu8slice can create byte slices that reference uninitialized memory when used with types containing padding bytes. The function uses slice::fromrawparts to create a &u8 covering the entire size of a type, including padding bytes. According to Rust's documentation, fromrawpar...
RUSTSEC-2025-0105 Uninitialized memory exposure in create_ring_buffer
The safe function createringbuffer allocates a buffer using Vec::withcapacity followed by setlen, creating a Box containing uninitialized memory. This leads to undefined behavior when functions like writeslices create typed slices e.g., &mut bool over the uninitialized memory, violating Rust's...
RUSTSEC-2025-0107 Uninitialized memory exposure in any_as_u8_slice
The safe function anyasu8slice can create byte slices that reference uninitialized memory when used with types containing padding bytes. The function uses slice::fromrawparts to create a &u8 covering the entire size of a type, including padding bytes. According to Rust's documentation, fromrawpar...
RUSTSEC-2025-0108 Uninitialized memory exposure in string reading functions
Multiple string reading functions expose uninitialized memory by setting length to capacity when no null terminator is found. This allows reading uninitialized memory which may contain sensitive data from previous allocations. The ncurses-rs repository is archived and unmaintained...
PT-2025-46132
The safe function any as u8 slice can create byte slices that reference uninitialized memory when used with types containing padding bytes. The function uses slice::from raw parts to create a &u8 covering the entire size of a type, including padding bytes. According to Rust's documentation, from...
PT-2025-46133
Multiple string reading functions expose uninitialized memory by setting length to capacity when no null terminator is found. This allows reading uninitialized memory which may contain sensitive data from previous allocations. The ncurses-rs repository is archived and unmaintained...
PT-2025-45714
The safe function create ring buffer allocates a buffer using Vec::with capacity followed by set len, creating a Box containing uninitialized memory. This leads to undefined behavior when functions like write slices create typed slices e.g., &mut bool over the uninitialized memory, violating Rust...
PT-2025-46130
The safe function create ring buffer allocates a buffer using Vec::with capacity followed by set len, creating a Box containing uninitialized memory. This leads to undefined behavior when functions like write slices create typed slices e.g., &mut bool over the uninitialized memory, violating Rust...
SUSE-SU-2025:3677-1 Security update for samba
This update for samba fixes the following issues: - CVE-2025-9640: Fixed vfsstreamsxattr uninitialized memory write bsc1251279. - CVE-2025-10230: Fixed command Injection in WINS Server Hook Script bsc1251280...
PT-2025-52921
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's NTFS3 implementation related to uninitialized memory after a failed mi read operation within mi format new. The issue stems from the ntfs get bh...
DEBIAN-CVE-2025-9640
A flaw was found in Samba, in the vfsstreamsxattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure vulnerability...
AZL-68936 CVE-2025-9640 affecting package samba 4.18.3-2
A flaw was found in Samba, in the vfsstreamsxattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure vulnerability...
CVE-2025-9640
A flaw was found in Samba, in the vfsstreamsxattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure vulnerability...
CVE-2025-9640
A flaw was found in Samba, in the vfsstreamsxattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure vulnerability...
CVE-2025-9640
The CVE-2025-9640 advisory concerns Samba’s vfs_streams_xattr module, where uninitialized heap memory can be written to alternate data streams, enabling an authenticated user to read residual memory and disclose sensitive data. Public references in Debian LTS (DLA-4384-1) state a fix in Samba 2:4...
CVE-2025-9640 Samba: vfs_streams_xattr uninitialized memory write possible
A flaw was found in Samba, in the vfsstreamsxattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure vulnerability...
PT-2025-42317
Name of the Vulnerable Software and Affected Versions Samba affected versions not specified Description An issue exists in Samba’s vfs streams xattr module where uninitialized heap memory can be written into alternate data streams. This can allow an authenticated user to read residual memory...
Samba 安全漏洞
Samba is a Samba open source suite of standard Windows interoperability programs for Linux and Unix. A security vulnerability exists in Samba that stems from an uninitialized heap memory in the vfsstreamsxattr module, which could lead to information disclosure...
uninitialized memory disclosure via vfs_streams_xattr
Description An authenticated user can read an unlimited number of samples of discarded heap memory, due to a failure to initialise memory in streamsxattrpwrite in the vfsstreamsxattr file server module. This is achieved by issuing write requests that creates holes in the file. Samba erases known...