buffered-reader vulnerable to out-of-bounds array access leading to panic

Affected versions of the crate have a bug where attacker-controlled input can result in the use of an out-of-bound array index. Rust detects the use of the out-of-bound index and causes the application to panic. An attacker may be able to use this to cause a denial-of-service. However, it is not...

Fedora: Security Advisory for rust-buffered-reader (FEDORA-2023-1d0d71b6aa)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 37 Update: rust-buffered-reader-1.2.0-1.fc37

A super-powered Reader...

Fedora 37 : rust-buffered-reader / rust-nettle / rust-nettle-sys / etc (2023-1d0d71b6aa)

The remote Fedora 37 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2023-1d0d71b6aa advisory. - Update the sequoia-openpgp crate to version 1.16.0. - Update the nettle crate to version 7.3.0. - Update the nettle-sys crate to version 2.2.0. - Update th...

libpijul (>=0.12.0 <=0.12.1), pijul (>=0.12.0 <=0.12.1) +7 more potentially affected by CVE-2023-53161 via buffered-reader (>=0.11.0 <=0.5.0)

buffered-reader CARGO version =0.11.0, =0.12.0, =0.12.0, =0.1.0, =0.1.0, =0.17.0, =0.2.0, =0.0.1, =0.1.0, =0.4.0 Source cves: CVE-2023-53161 Source advisory: OSV:RUSTSEC-2023-0039...

sequoia-openpgp (=1.8.1) potentially affected by CVE-2023-53161 via buffered-reader (=1.1.3)

buffered-reader CARGO version =1.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on buffered-reader and may be impacted: - sequoia-openpgp =1.8.1 Source cves: CVE-2023-53161 Source advisory: OSV:RUSTSEC-2023-0039...

PT-2025-31040 · Unknown +1 · Buffered-Reader +1

Name of the Vulnerable Software and Affected Versions: buffered-reader crate versions prior to 1.1.5 buffered-reader crate versions prior to 1.2.0 Description: The buffered-reader crate for Rust contains a flaw that allows out-of-bounds array access and a panic. Recommendations: Update the...