Lucene search
+L

268 matches found

OSV
OSV
•added 2022/06/17 12:11 a.m.•27 views

GHSA-QQMC-HWQP-8G2W Use after free in lru crate

Lru crate has use after free vulnerability. Lru crate has two functions for getting an iterator. Both iterators give references to key and value. Calling specific functions, like pop, will remove and free the value, and but it's still possible to access the reference of value which is already...

7.5CVSS7.5AI score0.0118EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2022/01/07 10:37 p.m.•53 views

Use After Free in lru

Lru crate has two functions for getting an iterator. Both iterators give references to key and value. Calling specific functions, like pop, will remove and free the value, and but it's still possible to access the reference of value which is already dropped causing use after free...

7.5CVSS7.4AI score0.0118EPSS
SaveExploits1References5Affected Software1
vulnersOsv
vulnersOsv
•added 2022/01/07 10:37 p.m.•10 views

account-db (0.1.0), akita (>=0.1.0, <=0.4.3) +391 more potentially affected by CVE-2021-45720 via lru (>=0.1.17, <=0.6.6)

lru CARGO version =0.1.17, =0.1.0, =0.3.0, =0.1.0, =0.1.1, =0.1.1, =2.0.0-alpha.22, =2.0.3, =2.0.3, =2.0.3, =0.28.2, =0.7.2, =0.1.0, =0.1.0, =0.9.1 and more Source cves: CVE-2021-45720 Source advisory: OSV:GHSA-V362-2895-H9R2...

7.5CVSS7.2AI score0.0118EPSS
SaveExploits1
OSV
OSV
•added 2022/01/07 10:37 p.m.•19 views

GHSA-V362-2895-H9R2 Use After Free in lru

Lru crate has two functions for getting an iterator. Both iterators give references to key and value. Calling specific functions, like pop, will remove and free the value, and but it's still possible to access the reference of value which is already dropped causing use after free...

7.5CVSS7.4AI score0.0118EPSS
SaveExploits1References5
CNVD
CNVD
•added 2021/12/28 12:00 a.m.•61 views

Mozilla Rust lru crate post-release reuse vulnerability

Mozilla Rust lru crate is an implementation of the LRU cache. a security vulnerability exists in versions of Mozilla Rust lru crate prior to 0.7.1, which can lead to a resource management error. An attacker could exploit this vulnerability to cause memory corruption...

7.5CVSS4.1AI score0.0118EPSS
SaveExploits1References1
OSV
OSV
•added 2021/12/26 10:15 p.m.•9 views

CVE-2021-45720

An issue was discovered in the lru crate before 0.7.1 for Rust. The iterators have a use-after-free, as demonstrated by an access after a pop operation...

7.5CVSS5.8AI score0.0118EPSS
SaveExploits1References2
NVD
NVD
•added 2021/12/26 10:15 p.m.•28 views

CVE-2021-45720

An issue was discovered in the lru crate before 0.7.1 for Rust. The iterators have a use-after-free, as demonstrated by an access after a pop operation...

7.5CVSS0.0118EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2021/12/26 10:15 p.m.•28 views

CVE-2021-45720

An issue was discovered in the lru crate before 0.7.1 for Rust. The iterators have a use-after-free, as demonstrated by an access after a pop operation...

7.5CVSS7.1AI score0.0118EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2021/12/26 9:45 p.m.•31 views

CVE-2021-45720

An issue was discovered in the lru crate before 0.7.1 for Rust. The iterators have a use-after-free, as demonstrated by an access after a pop operation...

7.7AI score0.0118EPSS
SaveExploits1References2
CVE
CVE
•added 2021/12/26 9:45 p.m.•77 views

CVE-2021-45720

The CVE-2021-45720 entry concerns the Rust lru crate (pre-0.7.1). The vulnerability arises in the iterators for the cache: calling operations such as pop() removes and frees a value, yet references to that value may still be accessed, causing a use-after-free. Affected component: lru crate iterat...

7.5CVSS7.3AI score0.0118EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2021/12/26 9:45 p.m.•2 views

CVE-2021-45720

An issue was discovered in the lru crate before 0.7.1 for Rust. The iterators have a use-after-free, as demonstrated by an access after a pop operation...

8.7CVSS0.0118EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/26 12:00 a.m.•3 views

CVE-2021-45720: Use After Free

An issue was discovered in the lru crate before 0.7.1 for Rust. The iterators have a use-after-free, as demonstrated by an access after a pop operation...

7.5CVSS5.8AI score0.0118EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/12/26 12:00 a.m.•17 views

Rust lru crate 资源管理错误漏洞

Mozilla Rust lru crate is an implementation of the LRU cache. a security vulnerability exists in versions of Mozilla Rust lru crate prior to 0.7.1, which can lead to a resource management error. An attacker could exploit this vulnerability to cause memory corruption...

7.5CVSS5.7AI score0.0118EPSS
SaveExploits1References4
vulnersOsv
vulnersOsv
•added 2021/12/21 12:00 p.m.•9 views

account-db (0.1.0), akita (>=0.1.0, <=0.4.3) +391 more potentially affected by CVE-2021-45720 via lru (>=0.1.17, <=0.6.6)

lru CARGO version =0.1.17, =0.1.0, =0.3.0, =0.1.0, =0.1.1, =0.1.1, =2.0.0-alpha.22, =2.0.3, =2.0.3, =2.0.3, =0.28.2, =0.7.2, =0.1.0, =0.1.0, =0.9.1 and more Source cves: CVE-2021-45720 Source advisory: OSV:RUSTSEC-2021-0130...

7.5CVSS7.2AI score0.0118EPSS
SaveExploits1
RustSec
RustSec
•added 2021/12/21 12:00 p.m.•24 views

Use after free in lru crate

Lru crate has use after free vulnerability. Lru crate has two functions for getting an iterator. Both iterators give references to key and value. Calling specific functions, like pop, will remove and free the value, and but it's still possible to access the reference of value which is already...

7.5CVSS3AI score0.0118EPSS
SaveExploits1Affected Software1
OSV
OSV
•added 2021/12/21 12:00 p.m.•21 views

RUSTSEC-2021-0130 Use after free in lru crate

Lru crate has use after free vulnerability. Lru crate has two functions for getting an iterator. Both iterators give references to key and value. Calling specific functions, like pop, will remove and free the value, and but it's still possible to access the reference of value which is already...

7.5CVSS7.5AI score0.0118EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2021/12/21 12:00 a.m.•4 views

PT-2021-24294

Name of the Vulnerable Software and Affected Versions: lru crate versions prior to 0.7.1 Description: The issue is related to a use-after-free problem in the iterators of the lru crate. This occurs when specific functions, such as pop, are called, which remove and free the value, but it is still...

7.5CVSS0.0118EPSS
SaveExploits1References11
Oracle linux
Oracle linux
•added 2020/05/05 12:00 a.m.•36 views

memcached security update

0:1.5.9-3 - fix null-pointer dereference in 'lru mode' and 'lru tempttl' 1709408 - CVE-2019-11596...

7.5CVSS1AI score0.02958EPSS
SaveExploits1
Veracode
Veracode
•added 2020/04/29 2:45 a.m.•27 views

Denial Of Service (DoS)

memcached is vulnerable to denial of service DoS. The vulnerability exists through a null-pointer dereference in "lru mode" and "lru tempttl" causing denial of service...

7.5CVSS2.5AI score0.02958EPSS
SaveExploits1References12Affected Software1
RedHat Linux
RedHat Linux
•added 2020/04/28 3:27 p.m.•11 views

memcached: null-pointer dereference in "lru mode" and "lru temp_ttl" causing denial of service

In memcached before 1.5.14, a NULL pointer dereference was found in the "lru mode" and "lru tempttl" commands. This causes a denial of service when parsing crafted lru command messages in processlrucommand in memcached.c...

7.5CVSS7.1AI score0.02958EPSS
SaveExploits1References4
Rows per page
Query Builder