Lucene search
K

6 matches found

Github Security Blog
Github Security Blog
added 2024/01/17 8:31 p.m.12 views

ferris-says has undefined behavior when not using UTF-8

Affected versions receive a &u8 from the caller through a safe API, and pass it directly to the unsafe str::fromutf8unchecked function. The behavior of ferrissays::say is undefined if the bytes from the caller don't happen to be valid UTF-8. The flaw was corrected in ferris-says21 by using the sa...

7AI score
Exploits0References4Affected Software1
vulnersOsv
vulnersOsv
added 2024/01/17 8:31 p.m.5 views

arcon_compiler (>=0.1.0 <=0.1.1), astrology (>=0.1.0 <=0.1.55) +18 more potentially affected by unknown CVE via ferris-says (>=0.1.2 <=0.2.1)

ferris-says CARGO version =0.1.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =10.10.10 and more Source cves: unknown CVE Source advisory: OSV:GHSA-V363-RRF2-5FMJ...

5.8AI score
Exploits0
OSV
OSV
added 2024/01/17 8:31 p.m.2 views

GHSA-V363-RRF2-5FMJ ferris-says has undefined behavior when not using UTF-8

Affected versions receive a &u8 from the caller through a safe API, and pass it directly to the unsafe str::fromutf8unchecked function. The behavior of ferrissays::say is undefined if the bytes from the caller don't happen to be valid UTF-8. The flaw was corrected in ferris-says21 by using the sa...

5.8AI score
Exploits0References4
vulnersOsv
vulnersOsv
added 2024/01/13 12:0 p.m.2 views

crabsay (>=0.1.0 <=0.1.1), craterfinder (>=0.1.0 <=0.1.1) +11 more potentially affected by unknown CVE via ferris-says (=0.2.1)

ferris-says CARGO version =0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on ferris-says and may be impacted: - crabsay =0.1.0, =0.1.0, =0.1.0, =0.1.1 - rs-lean =0.1.0 - rust-study =0.1.0 - rustbyexample =0.2.0 - rusty-grep =0.1.0 - rusty-redis...

5.8AI score
Exploits0
RustSec
RustSec
added 2024/01/13 12:0 p.m.4 views

Unsound use of str::from_utf8_unchecked on bytes which are not UTF-8

Affected versions receive a &u8 from the caller through a safe API, and pass it directly to the unsafe str::fromutf8unchecked function. The behavior of ferrissays::say is undefined if the bytes from the caller don't happen to be valid UTF-8. The flaw was corrected in ferris-says21 by using the sa...

7AI score
Exploits0Affected Software1
OSV
OSV
added 2024/01/13 12:0 p.m.9 views

RUSTSEC-2024-0001 Unsound use of str::from_utf8_unchecked on bytes which are not UTF-8

Affected versions receive a &u8 from the caller through a safe API, and pass it directly to the unsafe str::fromutf8unchecked function. The behavior of ferrissays::say is undefined if the bytes from the caller don't happen to be valid UTF-8. The flaw was corrected in ferris-says21 by using the sa...

7AI score
Exploits0References3
Rows per page
Query Builder