Lucene search
+L

36 matches found

Github Security Blog
Github Security Blog
added 2022/05/24 5:37 p.m.26 views

`net2` invalidly assumes the memory layout of std::net::SocketAddr

The net2 crate has assumed std::net::SocketAddrV4 and std::net::SocketAddrV6 have the same memory layout as the system C representation sockaddr. It has simply casted the pointers to convert the socket addresses to the system representation. The standard library does not say anything about the...

5.5CVSS6.9AI score0.00384EPSS
SaveExploits1References4Affected Software1
NVD
NVD
added 2020/12/31 9:15 a.m.35 views

CVE-2020-35919

An issue was discovered in the net2 crate before 0.2.36 for Rust. It has false expectations about the std::net::SocketAddr memory representation...

5.5CVSS5.4AI score0.00384EPSS
SaveExploits1References1
OSV
OSV
added 2020/12/31 9:15 a.m.33 views

CVE-2020-35919

An issue was discovered in the net2 crate before 0.2.36 for Rust. It has false expectations about the std::net::SocketAddr memory representation...

5.5CVSS7.1AI score0.00398EPSS
SaveExploits1References1
OSV
OSV
added 2020/12/31 9:15 a.m.4 views

DEBIAN-CVE-2020-35919

An issue was discovered in the net2 crate before 0.2.36 for Rust. It has false expectations about the std::net::SocketAddr memory representation...

5.5CVSS5.4AI score0.00384EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2020/12/31 9:15 a.m.30 views

CVE-2020-35919

An issue was discovered in the net2 crate before 0.2.36 for Rust. It has false expectations about the std::net::SocketAddr memory representation...

5.5CVSS6.1AI score0.00384EPSS
SaveExploits1References3
Prion
Prion
added 2020/12/31 9:15 a.m.16 views

Memory corruption

An issue was discovered in the net2 crate before 0.2.36 for Rust. It has false expectations about the std::net::SocketAddr memory representation...

2.1CVSS5.4AI score0.00384EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2020/12/31 9:15 a.m.4 views

UBUNTU-CVE-2020-35919

An issue was discovered in the net2 crate before 0.2.36 for Rust. It has false expectations about the std::net::SocketAddr memory representation...

5.5CVSS6AI score0.00384EPSS
SaveExploits1References4
CVE
CVE
added 2020/12/31 8:18 a.m.57 views

CVE-2020-35919

CVE-2020-35919 affects the Rust net2 crate prior to 0.2.36. Root cause: the crate makes false assumptions about the memory layout of std::net::SocketAddr, casting pointers to the system sockaddr representation. This can lead to invalid memory access if the standard library layout changes. The iss...

5.5CVSS5.3AI score0.00384EPSS
SaveExploits1References1Affected Software1
Debian CVE
Debian CVE
added 2020/12/31 8:18 a.m.83 views

CVE-2020-35919

An issue was discovered in the net2 crate before 0.2.36 for Rust. It has false expectations about the std::net::SocketAddr memory representation...

5.5CVSS5.4AI score0.00384EPSS
SaveExploits1
Cvelist
Cvelist
added 2020/12/31 8:18 a.m.46 views

CVE-2020-35919

An issue was discovered in the net2 crate before 0.2.36 for Rust. It has false expectations about the std::net::SocketAddr memory representation...

5.4AI score0.00384EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2020/12/31 12:0 a.m.10 views

Rust Security Vulnerabilities

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in net2 crate before 0.2.36 for Rust, which stems from its incorrect expectation of the std::net::SocketAddr memory representation...

5.5CVSS5.8AI score0.00384EPSS
SaveExploits1References2
OSV
OSV
added 2020/11/07 12:0 p.m.30 views

RUSTSEC-2020-0078 `net2` invalidly assumes the memory layout of std::net::SocketAddr

The net2 crate has assumed std::net::SocketAddrV4 and std::net::SocketAddrV6 have the same memory layout as the system C representation sockaddr. It has simply casted the pointers to convert the socket addresses to the system representation. The standard library does not say anything about the...

5.5CVSS5.2AI score0.00398EPSS
SaveExploits2References3
RustSec
RustSec
added 2020/11/07 12:0 p.m.22 views

`net2` invalidly assumes the memory layout of std::net::SocketAddr

The net2 crate has assumed std::net::SocketAddrV4 and std::net::SocketAddrV6 have the same memory layout as the system C representation sockaddr. It has simply casted the pointers to convert the socket addresses to the system representation. The standard library does not say anything about the...

2.7AI score
SaveExploits0Affected Software1
vulnersOsv
vulnersOsv
added 2020/05/01 12:0 p.m.6 views

AitSar (=0.1.1), BeerHolderBot (>=0.1.0 <=0.3.6) +7766 more potentially affected by unknown CVE via net2 (=0.2.39)

net2 CARGO version =0.2.39 is affected by a known vulnerability. The following packages have a transitive dependency on net2 and may be impacted: - AitSar =0.1.1 - BeerHolderBot =0.1.0, =0.1.0, =0.1.0, =1.0.0, =0.0.2, =0.1.0, =0.1.0, =0.2.0, =0.5.3 and more Source cves: unknown CVE Source advisor...

5.7AI score
SaveExploits0
OSV
OSV
added 2020/05/01 12:0 p.m.19 views

RUSTSEC-2020-0016 `net2` crate has been deprecated; use `socket2` instead

The net2 crate has been deprecated and users are encouraged to considered socket2 instead...

7.1AI score
SaveExploits0References3
RustSec
RustSec
added 2020/05/01 12:0 p.m.21 views

`net2` crate has been deprecated; use `socket2` instead

The net2 crate has been deprecated and users are encouraged to considered socket2 instead...

2.3AI score
SaveExploits0
Rows per page
Query Builder