3847 matches found
CVE-2021-45707
An issue was discovered in the nix crate 0.16.0 and later before 0.20.2, 0.21.x before 0.21.2, and 0.22.x before 0.22.2 for Rust. unistd::getgrouplist has an out-of-bounds write if a user is in more than 16 /etc/groups groups...
CVE-2021-45708
An issue was discovered in the abomonation crate through 2021-10-17 for Rust. Because transmute operations are insufficiently constrained, there can be an information leak or ASLR bypass...
CVE-2021-45709
CVE-2021-45709 affects the crypto2 crate for Rust up to 2021-10-08, where during ChaCha20 encryption/decryption an unaligned read of a u32 may occur. Related sources (OSV/GHSA/RUSTSEC) describe the root cause as incorrect assumptions about 4-byte alignment in an unsafe slice::from_raw_parts_mut c...
CVE-2021-45710
An issue was discovered in the tokio crate before 1.8.4, and 1.9.x through 1.13.x before 1.13.1, for Rust. In certain circumstances involving a closed oneshot channel, there is a data race and memory corruption...
CVE-2021-45710
An issue was discovered in the tokio crate before 1.8.4, and 1.9.x through 1.13.x before 1.13.1, for Rust. In certain circumstances involving a closed oneshot channel, there is a data race and memory corruption...
CVE-2021-45710
CVE-2021-45710 affects the tokio crate for Rust, in versions prior to 1.8.4 and 1.9.x–1.13.x prior to 1.13.1, where a data race in certain conditions involving a closed oneshot channel can cause memory corruption. The provided documents specify the issue and impacted version ranges but do not inc...
CVE-2021-45711
An issue was discovered in the simpleasn1 crate 0.6.0 before 0.6.1 for Rust. There is a panic if UTCTime data, supplied by a remote attacker, has a second character greater than 0x7f...
CVE-2021-45711
The CVE-2021-45711 entry concerns the Rust crate simple_asn1, specifically versions before 0.6.1. The vulnerability arises in parsing UTCTime: if data provided by a remote attacker contains a second character greater than 0x7f, a panic occurs. This is documented as a panic during parsing (e.g., i...
CVE-2021-45713
An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. createscalarfunction has a use-after-free...
CVE-2021-45713
Summary ( CVE-2021-45713 / rusqlite ) : The vulnerability concerns the Rust rusqlite crate versions 0.25.x before 0.25.4 and 0.26.x before 0.26.2, where several closure/callback APIs (including create_scalar_function, create_aggregate_function, create_window_function, and related hooks) have a us...
CVE-2021-45714
Summary: Several OSV and advisory records confirm a use-after-free in the rusqlite crate for Rust, affecting 0.25.x before 0.25.4 and 0.26.x before 0.26.2. The issues concern multiple callback-registration paths and related closures (e.g., create_aggregate_function, create_scalar_function, create...
CVE-2021-45714
An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. createaggregatefunction has a use-after-free...
CVE-2021-45715
An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. createwindowfunction has a use-after-free...
CVE-2021-45715
rusqlite vulnerabilities (CVE-2021-45715) affect Rust crates 0.25.x before 0.25.4 and 0.26.x before 0.26.2 with use-after-free in various callback hooks. OSV/GHSA details show direct issues in create_window_function, create_scalar_function, create_aggregate_function, create_collation, and hooks s...
CVE-2021-45716
The CVE-2021-45716 issue affects the rusqlite crate for Rust, in versions 0.25.x before 0.25.4 and 0.26.x before 0.26.2, where create_collation (and related closure-handling APIs) exhibits a use-after-free condition. The OSV entries for rusqlite (GHSA variants) and related advisories confirm the ...
CVE-2021-45716
An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. createcollation has a use-after-free...
CVE-2021-45717
An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. commithook has a use-after-free...
CVE-2021-45717
The CVE-2021-45717 entry corresponds to an issue in the rusqlite crate (Rust) where use-after-free vulnerabilities exist in multiple callback/hooks. Affected versions are 0.25.x before 0.25.4 and 0.26.x before 0.26.2; the problem affects functions that register or invoke callbacks, including: com...
CVE-2021-45718
The CVE-2021-45718 entry concerns rusqlite for Rust with multiple use-after-free issues in 0.25.x before 0.25.4 and 0.26.x before 0.26.2. Affected components include rollback_hook, commit_hook, update_hook, create_scalar_function, create_aggregate_function, create_window_function, and create_coll...