5997 matches found
CVE-2021-26952
An issue was discovered in the ms3d crate before 0.1.3 for Rust. It might allow attackers to obtain sensitive information from uninitialized memory locations via IoReader::read...
CVE-2021-26953
An issue was discovered in the postscript crate before 0.14.0 for Rust. It might allow attackers to obtain sensitive information from uninitialized memory locations via a user-provided Read implementation...
CVE-2021-26952: Use of Uninitialized Resource
An issue was discovered in the ms3d crate before 0.1.3 for Rust. It might allow attackers to obtain sensitive information from uninitialized memory locations via IoReader::read...
CVE-2021-26953: Use of Uninitialized Resource
An issue was discovered in the postscript crate before 0.14.0 for Rust. It might allow attackers to obtain sensitive information from uninitialized memory locations via a user-provided Read implementation...
Rust information leakage vulnerabilities
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. An information disclosure vulnerability exists in versions of Rust prior to 0.14.0, which can be exploited by an attacker to obtain sensitive information from uninitialized memory locations via a user-supplied...
RUSTSEC-2021-0094 Window can read out of bounds if Read instance returns more bytes than buffer size
rdiff performs a diff of two provided strings or files. As part of its reading code it uses the return value of a Read instance to set the length of its internal character vector. If the Read implementation claims that it has read more bytes than the length of the provided buffer, the length of t...
Window can read out of bounds if Read instance returns more bytes than buffer size
rdiff performs a diff of two provided strings or files. As part of its reading code it uses the return value of a Read instance to set the length of its internal character vector. If the Read implementation claims that it has read more bytes than the length of the provided buffer, the length of t...
PT-2021-24268
Name of the Vulnerable Software and Affected Versions: rdiff crate versions through 0.1.2 Description: The issue arises when the rdiff crate uses the return value of a Read instance to set the length of its internal character vector. If the Read implementation claims to have read more bytes than...
Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2021-1135)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Unspecified Vulnerability in Rust (CNVD-2021-13695)
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability existed in Rust prior to version 0.1.1. The vulnerability stems from a lack of program soundness and may read uninitialized memory. No details of the vulnerability are provided at this...
CentOS 8 : libexif (CESA-2020:4766)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4766 advisory. - libexif: out of bounds write in exif-data.c CVE-2019-9278 - libexif: out of bounds read due to a missing bounds check in exifdatasavedataentry functi...
EulerOS 2.0 SP8 : binutils (EulerOS-SA-2021-1135)
According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Null Pointer Dereference in debuggetrealtype could result in DoSCVE-2020-16598 - A use after free issue exists in the Binary File Descriptor B...
RUSTSEC-2021-0051 KeyValueReader passes uninitialized memory to Read instance
The KeyValueReader type in affected versions of this crate set up an uninitialized memory buffer and passed them to be read in to a user-provided Read instance. The Read instance could read uninitialized memory and cause undefined behavior and miscompilations. This issue was fixed in commit dd59b...
KeyValueReader passes uninitialized memory to Read instance
The KeyValueReader type in affected versions of this crate set up an uninitialized memory buffer and passed them to be read in to a user-provided Read instance. The Read instance could read uninitialized memory and cause undefined behavior and miscompilations. This issue was fixed in commit dd59b...
PT-2021-18731
Name of the Vulnerable Software and Affected Versions outer cgi crate versions prior to 0.2.1 Description An issue in the outer cgi crate allows a user-provided Read instance to receive an uninitialized memory buffer from KeyValueReader. This can cause the Read instance to read uninitialized...
h2o -- uninitialised memory access in HTTP3
Emil Lerner reports: When receiving QUIC frames in certain order, HTTP/3 server-side implementation of h2o can be misguided to treat uninitialized memory as HTTP/3 frames that have been received. When h2o is used as a reverse proxy, an attacker can abuse this vulnerability to send internal state ...
PT-2021-17194
Name of the Vulnerable Software and Affected Versions: postscript crate versions prior to 0.14.0 Description: The issue allows attackers to obtain sensitive information from uninitialized memory locations via a user-provided Read implementation. Affected versions of the crate pass an uninitialize...
Rust Memory Corruption Vulnerability
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. Rust has a memory corruption vulnerability in versions prior to 0.2.3. The vulnerability stems from the program's implied randomness to arrays, so that uninitialized memory may be discarded in the event of an...
CentOS 8 : GNOME (CESA-2019:3553)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:3553 advisory. - webkitgtk: HTTP proxy setting deanonymization information disclosure CVE-2019-11070 - evince: uninitialized memory use in function tiffdocumentrender...