CVE-2021-38194

An issue was discovered in the ark-r1cs-std crate before 0.3.1 for Rust. It does not enforce any constraints in the FieldVar::mulbyinverse method. Thus, a prover can produce a proof that is unsound but is nonetheless verified...

CVE-2021-38194

An issue was discovered in the ark-r1cs-std crate before 0.3.1 for Rust. It does not enforce any constraints in the FieldVar::mulbyinverse method. Thus, a prover can produce a proof that is unsound but is nonetheless verified...

CVE-2021-38194

An issue was discovered in the ark-r1cs-std crate before 0.3.1 for Rust. It does not enforce any constraints in the FieldVar::mulbyinverse method. Thus, a prover can produce a proof that is unsound but is nonetheless verified...

Design/Logic Flaw

An issue was discovered in the ark-r1cs-std crate before 0.3.1 for Rust. It does not enforce any constraints in the FieldVar::mulbyinverse method. Thus, a prover can produce a proof that is unsound but is nonetheless verified...

CVE-2021-38194

An issue was discovered in the ark-r1cs-std crate before 0.3.1 for Rust. It does not enforce any constraints in the FieldVar::mulbyinverse method. Thus, a prover can produce a proof that is unsound but is nonetheless verified...

CVE-2021-38194

The CVE-2021-38194 issue affects the ark-r1cs-std crate for Rust (versions before 0.3.1). FieldVar::mul_by_inverse does not enforce constraints, allowing a malicious prover to produce an unsound proof that still verifies. The problem is caused by missing constraint checks in this method, compromi...

Rust 安全漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. a security vulnerability in ark-r1cs-std crate in Mozilla Rust before 0.3.1, which stems from FieldVar:: the mulbyinverse method does not enforce any constraints and can be exploited by an attacker to launch...

The vulnerability of the Job::onEntry function in the jobs.cpp file of the Ark archive viewer is related to deficiencies in the pathname restriction mechanism for the directory. This vulnerability allows an attacker to compromise the integrity of the protected information.

The vulnerability in the Job::onEntry function in the jobs.cpp file of the Ark archive viewer is related to an incorrect restriction on the path name to the directory. Exploiting this vulnerability could allow a remote attacker to compromise the integrity of the protected information...

ark-bls12-377 (=0.2.0), ark-crypto-primitives (=0.2.0) +19 more potentially affected by CVE-2021-38194 via ark-r1cs-std (=0.2.0)

ark-r1cs-std CARGO version =0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on ark-r1cs-std and may be impacted: - ark-bls12-377 =0.2.0 - ark-crypto-primitives =0.2.0 - ark-curve-constraint-tests =0.2.0 - ark-ed-on-bls12-377 =0.2.0 -...

RUSTSEC-2021-0075 Flaw in `FieldVar::mul_by_inverse` allows unsound R1CS constraint systems

Versions 0.2.0 to 0.3.0 of ark-r1cs-std did not enforce any constraints in the FieldVar::mulbyinverse method, allowing a malicious prover to produce an unsound proof that passes all verifier checks. This method was used primarily in scalar multiplication for shortweierstrass::ProjectiveVar. This...

Flaw in `FieldVar::mul_by_inverse` allows unsound R1CS constraint systems

Versions 0.2.0 to 0.3.0 of ark-r1cs-std did not enforce any constraints in the FieldVar::mulbyinverse method, allowing a malicious prover to produce an unsound proof that passes all verifier checks. This method was used primarily in scalar multiplication for shortweierstrass::ProjectiveVar. This...

kennnyshiwa-cogs code injection vulnerability

kennnyshiwa-cogs is a software application. Retrieves CPU information from Intel's ARK database. A code injection vulnerability exists in the Tickets module of kennyshiwa -cogs. An attacker could exploit this vulnerability to obtain sensitive information...

SUSE: Security Advisory (SUSE-SU-2012:0329-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

kennnyshiwa-cogs 代码注入漏洞

kennnyshiwa-cogs is a software application. Retrieves CPU information from Intel's ARK database. A code injection vulnerability exists in the Tickets module of kennyshiwa -cogs. An attacker could exploit this vulnerability to obtain sensitive information...

The vulnerability in the `emitEntryFromArchiveEntry` function in the `libarchiveplugin.cpp` of the Ark archiver, related to incorrect definition of references before accessing the file, allows a attacker to compromise data integrity.

The vulnerability in the emitEntryFromArchiveEntry function in the libarchiveplugin.cpp of the Ark archiver is related to an incorrect definition of the reference before accessing the file. Exploiting this vulnerability could allow a remote attacker to compromise data integrity through a speciall...

GLSA-202101-06 : Ark: Symlink vulnerability

The remote host is affected by the vulnerability described in GLSA-202101-06 Ark: Symlink vulnerability KDE Ark did not fully verify symlinks contained within tar archives. Impact : A remote attacker could entice a user to open a specially crafted tar archive using KDE Ark, possibly resulting in...

GLSA-202010-06 : Ark: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-202010-06 Ark: Arbitrary code execution It was discovered that Ark incorrectly handled symbolic links in tar archive files. Impact : A remote attacker could entice a user to open a specially crafted archive using Ark, possibly...

Ark: Arbitrary code execution

Background Ark is a graphical file compression/decompression utility with support for multiple formats. Description It was discovered that Ark incorrectly handled symbolic links in tar archive files. Impact A remote attacker could entice a user to open a specially crafted archive using Ark,...

Fedora: Security Advisory for ark (FEDORA-2020-f04f41bcc9)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 33 Update: ark-20.04.3-5.fc33

Ark is a program for managing various archive formats. Archives can be viewed, extracted, created and modified from within Ark. The program can handle various formats such as tar, gzip, bzip2, zip, rar and lha if appropriate command-line programs are installed...