Lucene search
K

7 matches found

Github Security Blog
Github Security Blog
added 2021/08/25 8:48 p.m.22 views

Memory safety violation in crayon

An issue was discovered in the crayon crate through 2020-08-31 for Rust. A TOCTOU issue has a resultant memory safety violation via HandleLike...

8.1CVSS8AI score0.00336EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2021/08/25 8:48 p.m.0 views

GHSA-M833-JV95-MFJH Memory safety violation in crayon

An issue was discovered in the crayon crate through 2020-08-31 for Rust. A TOCTOU issue has a resultant memory safety violation via HandleLike...

8.1CVSS5.9AI score0.00336EPSS
Exploits0References4
OSV
OSV
added 2020/12/31 10:15 a.m.12 views

CVE-2020-35889

An issue was discovered in the crayon crate through 2020-08-31 for Rust. A TOCTOU issue has a resultant memory safety violation via HandleLike...

8.1CVSS7.3AI score
Exploits0References1
Prion
Prion
added 2020/12/31 10:15 a.m.9 views

Design/Logic Flaw

An issue was discovered in the crayon crate through 2020-08-31 for Rust. A TOCTOU issue has a resultant memory safety violation via HandleLike...

6.8CVSS8.1AI score0.00336EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2020/12/31 8:24 a.m.45 views

CVE-2020-35889

CVE-2020-35889 affects the Rust crayon crate. The issue is a time-of-check to time-of-use (TOCTOU) memory-safety vulnerability in the HandleLike handling (ObjectPool/HandlePool) that can enable memory-safety violations. Root cause is a misbehaving HandleLike implementation, documented in the RUST...

8.1CVSS8.1AI score0.00336EPSS
Exploits0References1Affected Software1
RustSec
RustSec
added 2020/08/31 12:0 p.m.23 views

Misbehaving `HandleLike` implementation can lead to memory safety violation

Unsafe code in ObjectPool has time-of-check to time-of-use TOCTOU bug that can eventually lead to a memory safety violation. ObjectPool and HandlePool implicitly assumes that HandleLike trait methods are pure, i.e., they always return the same value. However, this assumption is unsound since...

8.1CVSS1.5AI score0.00336EPSS
Exploits0
OSV
OSV
added 2020/08/31 12:0 p.m.15 views

RUSTSEC-2020-0037 Misbehaving `HandleLike` implementation can lead to memory safety violation

Unsafe code in ObjectPool has time-of-check to time-of-use TOCTOU bug that can eventually lead to a memory safety violation. ObjectPool and HandlePool implicitly assumes that HandleLike trait methods are pure, i.e., they always return the same value. However, this assumption is unsound since...

8.1CVSS8.1AI score0.00336EPSS
Exploits0References3
Rows per page
Query Builder