Lucene search
+L

174 matches found

OSV
OSV
added 2025/05/13 10:15 p.m.7 views

AZL-61848 CVE-2025-4574 affecting package azl-compliance for versions less than 1.0.2-2

In crossbeam-channel rust crate, the internal Channel type's Drop method has a race condition which could, in some circumstances, lead to a double-free that could result in memory corruption...

6.5CVSS5.8AI score0.00484EPSS
Exploits0References1
OSV
OSV
added 2025/05/13 10:15 p.m.4 views

UBUNTU-CVE-2025-4574

In crossbeam-channel rust crate, the internal Channel type's Drop method has a race condition which could, in some circumstances, lead to a double-free that could result in memory corruption...

6.5CVSS6.6AI score0.00484EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2025/05/13 9:47 p.m.15 views

CVE-2025-4574

In crossbeam-channel rust crate, the internal Channel type's Drop method has a race condition which could, in some circumstances, lead to a double-free that could result in memory corruption. Mitigation Mitigation for this issue is either not available or the currently available options do not me...

6.5CVSS6.3AI score0.00484EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/05/13 9:47 p.m.7 views

CVE-2025-4574 Crossbeam-channel: crossbeam-channel vulnerable to double free on drop

In crossbeam-channel rust crate, the internal Channel type's Drop method has a race condition which could, in some circumstances, lead to a double-free that could result in memory corruption...

6.5CVSS6.4AI score0.00484EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/05/13 9:47 p.m.27 views

CVE-2025-4574 Crossbeam-channel: crossbeam-channel vulnerable to double free on drop

In crossbeam-channel rust crate, the internal Channel type's Drop method has a race condition which could, in some circumstances, lead to a double-free that could result in memory corruption...

6.5CVSS0.00484EPSS
Exploits0References4
Debian CVE
Debian CVE
added 2025/05/13 9:47 p.m.6 views

CVE-2025-4574

In crossbeam-channel rust crate, the internal Channel type's Drop method has a race condition which could, in some circumstances, lead to a double-free that could result in memory corruption...

6.5CVSS6.3AI score0.00484EPSS
Exploits0
CVE
CVE
added 2025/05/13 9:47 p.m.103 views

CVE-2025-4574

CVE-2025-4574 affects IBM Edge Data Collector.根 In the crossbeam-channel Rust crate, the Channel type’s Drop method has a race condition that can lead to a double-free and memory corruption (CVSS 6.5). Affected IBM Edge Data Collector versions: 9.0, 8.11, 9.1. Remediations are available: upgrade ...

6.5CVSS6.4AI score0.00484EPSS
Exploits0References4
OSV
OSV
added 2025/05/13 9:47 p.m.7 views

CVE-2025-4574 Crossbeam-channel: crossbeam-channel vulnerable to double free on drop

In crossbeam-channel rust crate, the internal Channel type's Drop method has a race condition which could, in some circumstances, lead to a double-free that could result in memory corruption...

6.5CVSS6.6AI score0.00484EPSS
Exploits0References8
CNNVD
CNNVD
added 2025/05/13 12:0 a.m.2 views

Crossbeam 资源管理错误漏洞

Crossbeam is a Crossbeam open source tool for concurrent programming applications. A resource management error vulnerability exists in Crossbeam that stems from a contention condition in the Drop method of the Channel type, which could lead to a double release and memory corruption...

6.5CVSS6.4AI score0.00484EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2025/04/10 2:30 p.m.20 views

crossbeam-channel Vulnerable to Double Free on Drop

The internal Channel type's Drop method has a race which could, in some circumstances, lead to a double-free. This could result in memory corruption. Quoting from the upstream description in merge request \1187: The problem lies in the fact that dicardallmessages contained two paths that could le...

6.5CVSS6.9AI score0.00484EPSS
Exploits0References6Affected Software1
OSV
OSV
added 2025/04/08 12:0 p.m.6 views

RUSTSEC-2025-0024 crossbeam-channel: double free on Drop

The internal Channel type's Drop method has a race which could, in some circumstances, lead to a double-free. This could result in memory corruption. Quoting from the upstream description in merge request \1187: The problem lies in the fact that dicardallmessages contained two paths that could le...

6.5CVSS6.9AI score0.00484EPSS
Exploits0References3
RustSec
RustSec
added 2025/04/08 12:0 p.m.8 views

crossbeam-channel: double free on Drop

The internal Channel type's Drop method has a race which could, in some circumstances, lead to a double-free. This could result in memory corruption. Quoting from the upstream description in merge request \1187: The problem lies in the fact that dicardallmessages contained two paths that could le...

6.5CVSS6.9AI score0.00484EPSS
Exploits0Affected Software1
Positive Technologies
Positive Technologies
added 2025/04/08 12:0 a.m.5 views

PT-2025-21128

Name of the Vulnerable Software and Affected Versions: crossbeam-channel affected versions not specified Description: The issue is related to a race condition in the internal Channel type's Drop method in the crossbeam-channel rust crate. This could lead to a double-free, resulting in memory...

6.5CVSS6.1AI score0.00484EPSS
Exploits0References49
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2022-23639

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crossbeam-utils provides atomics, synchronization primitives, scoped threads, and other utilities for concurrent programming in Rust. crossbeam-utils prior to...

8.1CVSS6.9AI score0.01239EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2021-32810

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crossbeam-deque is a package of work-stealing deques for building task schedulers when programming in Rust. In versions prior to 0.7.4 and 0.8.0, the result of...

9.8CVSS8AI score0.01923EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2024/09/10 12:0 a.m.16 views

NewStart CGSL MAIN 6.02 : firefox Multiple Vulnerabilities (NS-SA-2024-0066)

The remote NewStart CGSL host, running version MAIN 6.02, has firefox packages installed that are affected by multiple vulnerabilities: - In Expat aka libexpat before 2.4.5, there is an integer overflow in storeRawNames. CVE-2022-25315 - It was possible to construct specific XSLT markup that woul...

10CVSS8.2AI score0.99735EPSS
Exploits37References387
Microsoft CVE
Microsoft CVE
added 2024/06/30 2:0 p.m.6 views

Improper Restriction of Operations within the Bounds of a Memory Buffer and Race Condition in crossbeam-utils

...

8.1CVSS8AI score0.01239EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2024/05/11 12:0 a.m.24 views

RHEL 6 : rust-crossbeam-deque (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - rust-crossbeam-deque: race condition may lead to double free CVE-2021-32810 Note that Nessus has not tested for thi...

9.8AI score0.01923EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2023/04/11 12:0 a.m.17 views

NewStart CGSL CORE 5.05 / MAIN 5.05 : firefox Multiple Vulnerabilities (NS-SA-2023-0009)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has firefox packages installed that are affected by multiple vulnerabilities: - crossbeam-deque is a package of work-stealing deques for building task schedulers when programming in Rust. In versions prior to 0.7.4 and 0.8.0, t...

10CVSS7.6AI score0.0383EPSS
Exploits0References29
SUSE CVE
SUSE CVE
added 2023/02/15 4:20 a.m.5 views

SUSE CVE-2018-20996

An issue was discovered in the crossbeam crate before 0.4.1 for Rust. There is a double free because of destructor mishandling...

9.8CVSS9.4AI score0.01744EPSS
Exploits0References3
Rows per page
Query Builder