CVE-2021-45711

The CVE-2021-45711 entry concerns the Rust crate simple_asn1, specifically versions before 0.6.1. The vulnerability arises in parsing UTCTime: if data provided by a remote attacker contains a second character greater than 0x7f, a panic occurs. This is documented as a panic during parsing (e.g., i...

CVE-2021-45713

An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. createscalarfunction has a use-after-free...

CVE-2021-45713

Summary ( CVE-2021-45713 / rusqlite ) : The vulnerability concerns the Rust rusqlite crate versions 0.25.x before 0.25.4 and 0.26.x before 0.26.2, where several closure/callback APIs (including create_scalar_function, create_aggregate_function, create_window_function, and related hooks) have a us...

CVE-2021-45714

Summary: Several OSV and advisory records confirm a use-after-free in the rusqlite crate for Rust, affecting 0.25.x before 0.25.4 and 0.26.x before 0.26.2. The issues concern multiple callback-registration paths and related closures (e.g., create_aggregate_function, create_scalar_function, create...

CVE-2021-45714

An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. createaggregatefunction has a use-after-free...

CVE-2021-45715

rusqlite vulnerabilities (CVE-2021-45715) affect Rust crates 0.25.x before 0.25.4 and 0.26.x before 0.26.2 with use-after-free in various callback hooks. OSV/GHSA details show direct issues in create_window_function, create_scalar_function, create_aggregate_function, create_collation, and hooks s...

CVE-2021-45715

An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. createwindowfunction has a use-after-free...

CVE-2021-45716

The CVE-2021-45716 issue affects the rusqlite crate for Rust, in versions 0.25.x before 0.25.4 and 0.26.x before 0.26.2, where create_collation (and related closure-handling APIs) exhibits a use-after-free condition. The OSV entries for rusqlite (GHSA variants) and related advisories confirm the ...

CVE-2021-45716

An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. createcollation has a use-after-free...

CVE-2021-45717

An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. commithook has a use-after-free...

CVE-2021-45717

The CVE-2021-45717 entry corresponds to an issue in the rusqlite crate (Rust) where use-after-free vulnerabilities exist in multiple callback/hooks. Affected versions are 0.25.x before 0.25.4 and 0.26.x before 0.26.2; the problem affects functions that register or invoke callbacks, including: com...

CVE-2021-45718

The CVE-2021-45718 entry concerns rusqlite for Rust with multiple use-after-free issues in 0.25.x before 0.25.4 and 0.26.x before 0.26.2. Affected components include rollback_hook, commit_hook, update_hook, create_scalar_function, create_aggregate_function, create_window_function, and create_coll...

CVE-2021-45718

An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. rollbackhook has a use-after-free...

CVE-2021-45719

The CVE-2021-45719 issue affects rusqlite (Rust) versions 0.25.x before 0.25.4 and 0.26.x before 0.26.2, with use-after-free in update_hook (and related closure hooks) that could compromise safety. Multiple OSV entries and advisories confirm use-after-free in several rusqlite APIs, including crea...

CVE-2021-45720

The CVE-2021-45720 entry concerns the Rust lru crate (pre-0.7.1). The vulnerability arises in the iterators for the cache: calling operations such as pop() removes and frees a value, yet references to that value may still be accessed, causing a use-after-free. Affected component: lru crate iterat...

CVE-2021-45720

An issue was discovered in the lru crate before 0.7.1 for Rust. The iterators have a use-after-free, as demonstrated by an access after a pop operation...

CVE-2018-25023

The CVE-2018-25023 issue affects the Rust smallvec crate prior to 0.6.13. It allows creating an uninitialized value of any type, including references, due to the unsafe handling of uninitialized memory. The vulnerability is documented across OSV/GHSA entries, which note the fix involved avoiding ...

Rust lru crate 资源管理错误漏洞

Mozilla Rust lru crate is an implementation of the LRU cache. a security vulnerability exists in versions of Mozilla Rust lru crate prior to 0.7.1, which can lead to a resource management error. An attacker could exploit this vulnerability to cause memory corruption...

CVE-2018-25023

An issue was discovered in the smallvec crate before 0.6.13 for Rust. It can create an uninitialized value of any type, including a reference type...

Rust rusqlite crate 资源管理错误漏洞

Mozilla Rust rusqlite crate is an ergonomic wrapper for using SQLite from Rust. it attempts to expose a rust-postgres-like interface. mozilla rust rusqlite crate versions 0.25.4 before 0.25.x and 0.26. 2 prior to 0.26.x versions have a security vulnerability that stems from a resource management...