CVE-2020-35894

An issue was discovered in the obstack crate before 0.1.4 for Rust. Unaligned references can occur...

CVE-2020-35894

An issue was discovered in the obstack crate before 0.1.4 for Rust. Unaligned references can occur...

Design/Logic Flaw

An issue was discovered in the obstack crate before 0.1.4 for Rust. Unaligned references can occur...

CVE-2020-35894

An issue was discovered in the obstack crate before 0.1.4 for Rust. Unaligned references can occur...

CVE-2020-35894

CVE-2020-35894 affects the Rust crate obstack prior to 0.1.4. The underlying issue is unaligned references for types that require a large alignment, as described in the RustSec advisory (RUSTSEC-2020-0040). Reported through multiple feeds, this vulnerability is tied to the obstack crate’s handlin...

CVE-2020-35894

An issue was discovered in the obstack crate before 0.1.4 for Rust. Unaligned references can occur...

CVE-2020-35894: Use of Incorrectly-Resolved Name or Reference

An issue was discovered in the obstack crate before 0.1.4 for Rust. Unaligned references can occur...

Rust Security Vulnerabilities

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in Rust obstack crate before 0.1.4, which stems from possible unaligned references...

RUSTSEC-2020-0040 Obstack generates unaligned references

Obstack generates unaligned references for types that require a large alignment...

Obstack generates unaligned references

Obstack generates unaligned references for types that require a large alignment...

PT-2020-17526

Name of the Vulnerable Software and Affected Versions obstack crate versions prior to 0.1.4 Description The issue is related to the obstack crate generating unaligned references for types that require a large alignment. This can lead to problems when these references are used, potentially causing...

ALPINE-CVE-2020-24240

GNU Bison before 3.7.1 has a use-after-free in obstackfree in lib/obstack.c called from gramlex when a '\0' byte is encountered. NOTE: there is a risk only if Bison is used with untrusted input, and the observed bug happens to cause unsafe behavior with a specific compiler/architecture. The bug...

DEBIAN-CVE-2020-24240

GNU Bison before 3.7.1 has a use-after-free in obstackfree in lib/obstack.c called from gramlex when a '\0' byte is encountered. NOTE: there is a risk only if Bison is used with untrusted input, and the observed bug happens to cause unsafe behavior with a specific compiler/architecture. The bug...

UBUNTU-CVE-2020-24240

GNU Bison before 3.7.1 has a use-after-free in obstackfree in lib/obstack.c called from gramlex when a '\0' byte is encountered. NOTE: there is a risk only if Bison is used with untrusted input, and the observed bug happens to cause unsafe behavior with a specific compiler/architecture. The bug...

CVE-2020-24240

CVE-2020-24240 concerns GNU Bison before 3.7.1, which contains a use-after-free in _obstack_free (lib/obstack.c) when a NULL byte is encountered during gram_lex. The risk is limited to cases where Bison processes untrusted input, and the observed behavior was primarily a crash in Bison itself, no...

PT-2020-15669

Name of the Vulnerable Software and Affected Versions GNU Bison versions prior to 3.7.1 Description The issue arises from a use-after-free in obstack free in lib/obstack.c, which is called from gram lex, when a '0' byte is encountered. This poses a risk only if GNU Bison is used with untrusted...