Lucene search
+L

3 matches found

OSV
OSV
added 2024/11/05 10:06 p.m.17 views

CVE-2024-51756 cap-std doesn't fully sandbox all the Windows device filenames

The cap-std project is organized around the eponymous cap-std crate, and develops libraries to make it easy to write capability-based code. cap-std's filesystem sandbox implementation on Windows blocks access to special device filenames such as "COM1", "COM2", "LPT0", "LPT1", and so on, however i...

2.3CVSS6.5AI score
SaveExploits0References7
Debian CVE
Debian CVE
added 2024/11/05 10:06 p.m.11 views

CVE-2024-51756

The cap-std project is organized around the eponymous cap-std crate, and develops libraries to make it easy to write capability-based code. cap-std's filesystem sandbox implementation on Windows blocks access to special device filenames such as "COM1", "COM2", "LPT0", "LPT1", and so on, however i...

2.3CVSS5.2AI score0.00583EPSS
SaveExploits0
OSV
OSV
added 2024/11/05 12:00 p.m.8 views

RUSTSEC-2024-0445 cap-primitives doesn't fully sandbox all the Windows device filenames

Impact cap-primitives's filesystem sandbox implementation on Windows blocks access to special device filenames such as "COM1", "COM2", "LPT0", "LPT1", and so on, however it did not block access to the special device filenames which use superscript digits, such as "COM¹", "COM²", "LPT⁰", "LPT¹", a...

2.3CVSS6.7AI score0.00583EPSS
SaveExploits0References5
Rows per page
Query Builder