4 matches found
GHSA-8C75-8MHR-P7R9 rust-openssl has incorrect bounds assertion in aes key wrap
Summary aes::unwrapkey has an incorrect bounds assertion on the out buffer size, which can lead to out-of-bounds write. Details aes::unwrapkey contains an incorrect assertion: it checks that out.len + 8 = in.len - 8, ensuring the output buffer is large enough. Because of the inverted check, the...
aes-keywrap-rs (>=0.1.0 <=0.2.0), shadowsocks (>=1.10.0 <=1.12.3) +1 more potentially affected by CVE-2021-45709 via crypto2 (=0.1.2)
crypto2 CARGO version =0.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on crypto2 and may be impacted: - aes-keywrap-rs =0.1.0, =1.10.0, =0.1.0, =0.2.5 Source cves: CVE-2021-45709 Source advisory: OSV:GHSA-PMCV-MGCF-RVXG...
aes-keywrap-rs (>=0.1.0 <=0.2.0), shadowsocks (>=1.10.0 <=1.12.3) +1 more potentially affected by CVE-2021-45709 via crypto2 (=0.1.2)
crypto2 CARGO version =0.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on crypto2 and may be impacted: - aes-keywrap-rs =0.1.0, =1.10.0, =0.1.0, =0.2.5 Source cves: CVE-2021-45709 Source advisory: OSV:GHSA-9HFG-PXR6-Q4VP...
aes-keywrap-rs (>=0.1.0 <=0.2.0), shadowsocks (>=1.10.0 <=1.12.3) +1 more potentially affected by CVE-2021-45709 via crypto2 (=0.1.2)
crypto2 CARGO version =0.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on crypto2 and may be impacted: - aes-keywrap-rs =0.1.0, =1.10.0, =0.1.0, =0.2.5 Source cves: CVE-2021-45709 Source advisory: OSV:RUSTSEC-2021-0121...