Lucene search
+L

4 matches found

OSV
OSV
•added 2024/11/05 10:06 p.m.•21 views

CVE-2024-51756 cap-std doesn't fully sandbox all the Windows device filenames

The cap-std project is organized around the eponymous cap-std crate, and develops libraries to make it easy to write capability-based code. cap-std's filesystem sandbox implementation on Windows blocks access to special device filenames such as "COM1", "COM2", "LPT0", "LPT1", and so on, however i...

2.3CVSS6.5AI score
SaveExploits0References7
Debian CVE
Debian CVE
•added 2024/11/05 10:06 p.m.•15 views

CVE-2024-51756

The cap-std project is organized around the eponymous cap-std crate, and develops libraries to make it easy to write capability-based code. cap-std's filesystem sandbox implementation on Windows blocks access to special device filenames such as "COM1", "COM2", "LPT0", "LPT1", and so on, however i...

2.3CVSS5.2AI score0.00583EPSS
SaveExploits0
OSV
OSV
•added 2024/11/05 12:00 p.m.•11 views

RUSTSEC-2024-0445 cap-primitives doesn't fully sandbox all the Windows device filenames

Impact cap-primitives's filesystem sandbox implementation on Windows blocks access to special device filenames such as "COM1", "COM2", "LPT0", "LPT1", and so on, however it did not block access to the special device filenames which use superscript digits, such as "COM¹", "COM²", "LPT⁰", "LPT¹", a...

2.3CVSS6.7AI score0.00583EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/05 12:00 a.m.•1 views

CVE-2024-51756: Improper Limitation of a Pathname to a Restricted Directory

The cap-std project is organized around the eponymous cap-std crate, and develops libraries to make it easy to write capability-based code. cap-std's filesystem sandbox implementation on Windows blocks access to special device filenames such as "COM1", "COM2", "LPT0", "LPT1", and so on, however i...

2.3CVSS5.9AI score0.00583EPSS
SaveExploits0References1
Rows per page
Query Builder