8 matches found
WS-2023-0304
mail-internals use-after-free vulnerability in vecinsertbytes...
GHSA-RCX8-48PC-V9Q8 mail-internals use-after-free vulnerability in `vec_insert_bytes`
Incorrect reallocation logic in the function vecinsertbytes causes a use-after-free. This function does not have to be called directly to trigger the vulnerability because many methods on EncodingWriter call this function internally. The mail-\ suite is unmaintained and the upstream sources have...
mail-internals use-after-free vulnerability in `vec_insert_bytes`
Incorrect reallocation logic in the function vecinsertbytes causes a use-after-free. This function does not have to be called directly to trigger the vulnerability because many methods on EncodingWriter call this function internally. The mail-\ suite is unmaintained and the upstream sources have...
feembox (>=0.1.0, <=0.1.1), mail-core (>=0.6.0, <=0.6.2) +2 more potentially affected by unknown CVE via mail-internals (0.2.3)
mail-internals CARGO version 0.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on mail-internals and may be impacted: - feembox =0.1.0, =0.6.0, =0.6.0-wip, =0.6.0, =0.6.1 Source cves: unknown CVE Source advisory: OSV:GHSA-RCX8-48PC-V9Q8...
feembox (>=0.1.0, <=0.1.1), mail-core (>=0.6.0, <=0.6.2) +2 more potentially affected by unknown CVE via mail-internals (0.2.3)
mail-internals CARGO version 0.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on mail-internals and may be impacted: - feembox =0.1.0, =0.6.0, =0.6.0-wip, =0.6.0, =0.6.1 Source cves: unknown CVE Source advisory: GHSA-RCX8-48PC-V9Q8...
RUSTSEC-2023-0054 Use-after-free in `vec_insert_bytes`
Incorrect reallocation logic in the function vecinsertbytes causes a use-after-free. This function does not have to be called directly to trigger the vulnerability because many methods on EncodingWriter call this function internally. The mail-\ suite is unmaintained and the upstream sources have...
feembox (>=0.1.0, <=0.1.1), mail-core (>=0.6.0, <=0.6.2) +2 more potentially affected by unknown CVE via mail-internals (0.2.3)
mail-internals CARGO version 0.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on mail-internals and may be impacted: - feembox =0.1.0, =0.6.0, =0.6.0-wip, =0.6.0, =0.6.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0054...
Use-after-free in `vec_insert_bytes`
Incorrect reallocation logic in the function vecinsertbytes causes a use-after-free. This function does not have to be called directly to trigger the vulnerability because many methods on EncodingWriter call this function internally. The mail-\ suite is unmaintained and the upstream sources have...