Lucene search
+L

3 matches found

osv_azl
osv_azl
•added 2026/04/24 6:16 p.m.•12 views

AZL-83615 CVE-2026-41678 affecting package 389-ds-base 3.1.1-12

rust-openssl provides OpenSSL bindings for the Rust programming language. From to before 0.10.78, aes::unwrapkey contains an incorrect assertion: it checks that out.len + 8 = in.len - 8, ensuring the output buffer is large enough. Because of the inverted check, the function only accepts buffers a...

9.2CVSS8.3AI score0.00251EPSS
SaveExploits0References1
Mend
Mend
•added 2026/04/24 5:18 p.m.•5 views

CVE-2026-41678

rust-openssl provides OpenSSL bindings for the Rust programming language. From to before 0.10.78, aes::unwrapkey contains an incorrect assertion: it checks that out.len + 8 = in.len - 8, ensuring the output buffer is large enough. Because of the inverted check, the function only accepts buffers a...

9.8CVSS8.3AI score0.00251EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/24 12:00 a.m.•4 views

CVE-2026-41678: Out-of-bounds Write

rust-openssl provides OpenSSL bindings for the Rust programming language. From to before 0.10.78, aes::unwrapkey contains an incorrect assertion: it checks that out.len + 8 = in.len - 8, ensuring the output buffer is large enough. Because of the inverted check, the function only accepts buffers a...

9.2CVSS8.4AI score0.00251EPSS
SaveExploits0References3
Rows per page
Query Builder