Lucene search
+L

10 matches found

OSV
OSV
•added 2021/08/25 8:49 p.m.•75 views

GHSA-QXJQ-V4WF-PPVH Out of bounds read in dync

VecCopy::data is created as a Vec of u8 but can be used to store and retrieve elements of different types leading to misaligned access. The issue was resolved in v0.5.0 by replacing data being stored by Vec with a custom managed pointer. Elements are now stored and retrieved using types with prop...

5.5CVSS5.3AI score0.00379EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
•added 2021/08/25 8:49 p.m.•46 views

Out of bounds read in dync

VecCopy::data is created as a Vec of u8 but can be used to store and retrieve elements of different types leading to misaligned access. The issue was resolved in v0.5.0 by replacing data being stored by Vec with a custom managed pointer. Elements are now stored and retrieved using types with prop...

5.5CVSS5.4AI score0.00379EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2020/12/31 9:15 a.m.•20 views

CVE-2020-35903

An issue was discovered in the dync crate before 0.5.0 for Rust. VecCopy allows misaligned element access because u8 is not always the type in question...

5.5CVSS6.1AI score0.00379EPSS
SaveExploits1References1
NVD
NVD
•added 2020/12/31 9:15 a.m.•39 views

CVE-2020-35903

An issue was discovered in the dync crate before 0.5.0 for Rust. VecCopy allows misaligned element access because u8 is not always the type in question...

5.5CVSS5.5AI score0.00379EPSS
SaveExploits1References1
Prion
Prion
•added 2020/12/31 9:15 a.m.•27 views

Design/Logic Flaw

An issue was discovered in the dync crate before 0.5.0 for Rust. VecCopy allows misaligned element access because u8 is not always the type in question...

2.1CVSS5.5AI score0.00379EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2020/12/31 8:21 a.m.•195 views

CVE-2020-35903

CVE-2020-35903 affects the Rust dync crate prior to 0.5.0, where VecCopy can misalign elements because Vec may store non-u8 types. This enables misaligned access when reading/writing elements of different types. The issue is documented across multiple sources (e.g., RustSec/RUSTSEC-2020-0050 and ...

5.5CVSS5.4AI score0.00379EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2020/12/31 8:21 a.m.•47 views

CVE-2020-35903

An issue was discovered in the dync crate before 0.5.0 for Rust. VecCopy allows misaligned element access because u8 is not always the type in question...

5.5AI score0.00379EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/31 12:00 a.m.•6 views

CVE-2020-35903: Undefined Security Weakness

An issue was discovered in the dync crate before 0.5.0 for Rust. VecCopy allows misaligned element access because u8 is not always the type in question...

5.5CVSS5.8AI score0.00379EPSS
SaveExploits1References1
RustSec
RustSec
•added 2020/09/27 12:00 p.m.•36 views

VecCopy allows misaligned access to elements

VecCopy::data is created as a Vec of u8 but can be used to store and retrieve elements of different types leading to misaligned access. The issue was resolved in v0.5.0 by replacing data being stored by Vec with a custom managed pointer. Elements are now stored and retrieved using types with prop...

5.5CVSS2.3AI score0.00379EPSS
SaveExploits1Affected Software1
OSV
OSV
•added 2020/09/27 12:00 p.m.•48 views

RUSTSEC-2020-0050 VecCopy allows misaligned access to elements

VecCopy::data is created as a Vec of u8 but can be used to store and retrieve elements of different types leading to misaligned access. The issue was resolved in v0.5.0 by replacing data being stored by Vec with a custom managed pointer. Elements are now stored and retrieved using types with prop...

5.5CVSS5.3AI score0.00379EPSS
SaveExploits1References3
Rows per page
Query Builder