EUVD-2021-1806

Malware in sbrugna...

GHSA-MP6R-FGW2-RXFX Arbitrary return types in xcb

The function xcb::xproto::GetPropertyReply::value returns a slice of type T where T is an unconstrained type parameter. The raw bytes received from the X11 server are interpreted as the requested type. The users of the xcb crate are advised to only call this function with the intended types. Thes...

Arbitrary return types in xcb

The function xcb::xproto::GetPropertyReply::value returns a slice of type T where T is an unconstrained type parameter. The raw bytes received from the X11 server are interpreted as the requested type. The users of the xcb crate are advised to only call this function with the intended types. Thes...

DEBIAN-CVE-2021-26956

An issue was discovered in the xcb crate through 2021-02-04 for Rust. It has a soundness violation because bytes from an X server can be interpreted as any data type returned by xcb::xproto::GetPropertyReply::value...

Rust 安全漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in versions of Rust prior to 2021-02-04, which stems from the fact that byte-type data returned from an X server can be parsed into an arbitrary data type by...

CVE-2021-26956: Undefined Security Weakness

An issue was discovered in the xcb crate through 2021-02-04 for Rust. It has a soundness violation because bytes from an X server can be interpreted as any data type returned by xcb::xproto::GetPropertyReply::value...

PT-2021-17197

Name of the Vulnerable Software and Affected Versions: xcb crate versions through 2021-02-04 Description: The issue concerns a soundness violation in the xcb crate for Rust, where bytes from an X server can be interpreted as any data type returned by xcb::xproto::GetPropertyReply::value. This is...

PT-2021-17196

Name of the Vulnerable Software and Affected Versions: xcb crate versions through 2021-02-04 Description: The issue concerns a soundness violation in the xcb crate for Rust, where several functions handle data from an X server without proper validation or type constraints. Specifically,...