Lucene search
K

46 matches found

OSV
OSV
added 2021/12/27 12:15 a.m.15 views

CVE-2019-25055

An issue was discovered in the libpulse-binding crate before 2.6.0 for Rust. It mishandles a panic that crosses a Foreign Function Interface FFI boundary...

7.5CVSS6.8AI score
Exploits0References2
NVD
NVD
added 2021/12/27 12:15 a.m.20 views

CVE-2019-25055

An issue was discovered in the libpulse-binding crate before 2.6.0 for Rust. It mishandles a panic that crosses a Foreign Function Interface FFI boundary...

7.5CVSS0.01177EPSS
Exploits0References2
Prion
Prion
added 2021/12/27 12:15 a.m.13 views

Design/Logic Flaw

An issue was discovered in the libpulse-binding crate before 1.2.1 for Rust. getcontext can cause a use-after-free...

5CVSS7.4AI score0.01091EPSS
Exploits0References2Affected Software1
Prion
Prion
added 2021/12/27 12:15 a.m.13 views

Design/Logic Flaw

An issue was discovered in the libpulse-binding crate before 1.2.1 for Rust. getformatinfo can cause a use-after-free...

5CVSS7.5AI score0.01328EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2021/12/27 12:0 a.m.3 views

Rust libpulse-binding crate 安全漏洞

Rust libpulse-binding crate is the repository that contains sys FFI and binding libraries crates for connecting to PulseAudio PA from the Rust programming language. A security vulnerability exists in Rust libpulse-binding crate versions prior to 2.6.0, which stems from a boundary error in the...

7.5CVSS7.2AI score0.01177EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/12/27 12:0 a.m.3 views

Rust libpulse-binding crate 资源管理错误漏洞

Rust libpulse-binding crate is the repository that contains sys FFI and binding libraries crates for connecting to PulseAudio PA from the Rust programming language. A security vulnerability exists in versions of Rust libpulse-binding crate prior to 1.2.1 that can lead to resource management error...

7.5CVSS7.3AI score0.01328EPSS
Exploits0References3
Cvelist
Cvelist
added 2021/12/26 9:54 p.m.24 views

CVE-2018-25027

An issue was discovered in the libpulse-binding crate before 1.2.1 for Rust. getformatinfo can cause a use-after-free...

7.4AI score0.01328EPSS
Exploits0References2
CVE
CVE
added 2021/12/26 9:54 p.m.50 views

CVE-2018-25027

CVE-2018-25027 affects the Rust libpulse-binding crate prior to 1.2.1. The issue is a use-after-free in objects returned by get_format_info (and get_context per related advisories), leading to potential memory safety problems in PulseAudio bindings. Affected component: libpulse-binding (Rust crat...

7.5CVSS7.3AI score0.01328EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2021/12/26 9:54 p.m.34 views

CVE-2018-25028

An issue was discovered in the libpulse-binding crate before 1.2.1 for Rust. getcontext can cause a use-after-free...

7.4AI score0.01091EPSS
Exploits0References2
CVE
CVE
added 2021/12/26 9:54 p.m.52 views

CVE-2018-25028

CVE-2018-25028 affecting the Rust libpulse-binding crate prior to 1.2.1. The issue is a use-after-free in get_context (memory corruption risk) due to improper handling of underlying C objects. Public sources consistently describe this as a use-after-free vulnerability in the library, with multipl...

7.5CVSS7.3AI score0.01091EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2021/12/26 9:54 p.m.65 views

CVE-2019-25055

The CVE-2019-25055 entry concerns the libpulse-binding crate for Rust (pre-2.6.0). The issue is a panic that is mishandled across an FFI boundary, causing undefined behavior. Affected versions prior to 2.6.0 expose a boundary error in the FFI during panic propagation; this is the underlying root ...

7.5CVSS7.4AI score0.01177EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2021/12/26 9:54 p.m.20 views

CVE-2019-25055

An issue was discovered in the libpulse-binding crate before 2.6.0 for Rust. It mishandles a panic that crosses a Foreign Function Interface FFI boundary...

7.5AI score0.01177EPSS
Exploits0References2
OSV
OSV
added 2021/08/30 4:22 p.m.18 views

GHSA-6GVC-4JVJ-PWQ4 Duplicate Advisory: Use after free in libpulse-binding

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-f56g-chqp-22m9. This link is maintained to preserve external references. Original Description An issue was discovered in the libpulse-binding crate before 2.5.0 for Rust. proplist::Iterator can cause a...

6.5CVSS6.3AI score0.00988EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2021/08/30 4:22 p.m.25 views

Duplicate Advisory: Use after free in libpulse-binding

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-f56g-chqp-22m9. This link is maintained to preserve external references. Original Description An issue was discovered in the libpulse-binding crate before 2.5.0 for Rust. proplist::Iterator can cause a...

6.5CVSS6.3AI score0.00988EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2021/08/25 8:57 p.m.16 views

GHSA-WCXC-JF6C-8RX9 Duplicate Advisory: Uncaught Exception in libpulse-binding

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-xvcg-2q82-r87j. This link is maintained to preserve external references. Original Description Affected versions of this crate failed to catch panics crossing FFI boundaries via callbacks, which is a form of UB...

7.5CVSS7.1AI score0.01177EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2021/08/25 8:57 p.m.13 views

Duplicate Advisory: Uncaught Exception in libpulse-binding

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-xvcg-2q82-r87j. This link is maintained to preserve external references. Original Description Affected versions of this crate failed to catch panics crossing FFI boundaries via callbacks, which is a form of UB...

5.3AI score
Exploits0References3Affected Software1
OSV
OSV
added 2021/08/25 8:56 p.m.16 views

GHSA-GHPQ-VJXW-CH5W Use after free in libpulse-binding

Overview Version 1.2.1 of the libpulse-binding Rust crate, released on the 15th of June 2018, fixed a pair of use-after-free issues with the objects returned by the getformatinfo and getcontext methods of Stream objects. These objects were mistakenly being constructed without setting an important...

7.5CVSS7.6AI score0.01328EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2021/08/25 8:56 p.m.11 views

Use after free in libpulse-binding

Overview Version 1.2.1 of the libpulse-binding Rust crate, released on the 15th of June 2018, fixed a pair of use-after-free issues with the objects returned by the getformatinfo and getcontext methods of Stream objects. These objects were mistakenly being constructed without setting an important...

2AI score
Exploits0References3Affected Software1
CNVD
CNVD
added 2021/01/06 12:0 a.m.7 views

Rust Resource Management Error Vulnerability (CNVD-2021-37532)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A resource management error vulnerability exists in Rust libpulse-binding crate versions prior to 2.5.0, which stems from proplist::Iterator leading to use-after-free.No detailed vulnerability details are provid...

6.5CVSS6.5AI score0.00988EPSS
Exploits1References1
NVD
NVD
added 2020/12/31 10:15 a.m.26 views

CVE-2018-25001

An issue was discovered in the libpulse-binding crate before 2.5.0 for Rust. proplist::Iterator can cause a use-after-free...

6.5CVSS6.4AI score0.00988EPSS
Exploits1References1
Rows per page
Query Builder