EUVD-2008-1544

Malware in sbrugna...

EUVD-2021-1729

Malware in sbrugna...

CVE-2021-38192

An issue was discovered in the prost-types crate before 0.8.0 for Rust. An overflow can occur during conversion from Timestamp to SystemTime...

CVE-2020-35858

An issue was discovered in the prost crate before 0.6.1 for Rust. There is stack consumption via a crafted message, causing a denial of service e.g., x86 or possibly remote code execution e.g., ARM...

GHSA-X4QM-MCJQ-V2GF Overflow in prost-types

Affected versions of this crate contained a bug in which untrusted input could cause an overflow and panic when converting a Timestamp to SystemTime. It is recommended to upgrade to prost-types v0.8 and switch the usage of From for SystemTime to TryFrom for SystemTime...

abbegm (>=0.1.0, <=0.2.1), abci-rs (>=0.10.0, <=0.11.1) +594 more potentially affected by CVE-2021-38192 via prost-types (>=0.2.3, <=0.7.0)

prost-types CARGO version =0.2.3, =0.1.0, =0.10.0, =0.0.2, =0.0.0, =0.1.3, =0.1.0, =0.17.0, =0.16.0, =0.1.2-alpha.3, =0.8.0, =0.8.0, =0.8.0, =0.11.0 and more Source cves: CVE-2021-38192 Source advisory: OSV:GHSA-X4QM-MCJQ-V2GF...

Overflow in prost-types

Affected versions of this crate contained a bug in which untrusted input could cause an overflow and panic when converting a Timestamp to SystemTime. It is recommended to upgrade to prost-types v0.8 and switch the usage of From for SystemTime to TryFrom for SystemTime...

GHSA-GV73-9MWV-FWGQ Out of bounds write in prost

Affected versions of this crate contained a bug in which decoding untrusted input could overflow the stack. On architectures with stack probes like x86, this can be used for denial of service attacks, while on architectures without stack probes like ARM overflowing the stack is unsound and can...

actix-protobuf (>=0.4.0, <=0.4.1), arc-cli (0.1.0) +106 more potentially affected by CVE-2020-35858 via prost (>=0.1.0, <=0.5.0)

prost CARGO version =0.1.0, =0.4.0, =0.8.0, =0.8.0, =0.8.0, =0.1.0, =0.1.0-alpha, =0.1.0, =0.1.0, =0.8.0, =0.1.0-alpha.1, =0.1.0-alpha.2 and more Source cves: CVE-2020-35858 Source advisory: OSV:GHSA-GV73-9MWV-FWGQ...

Out of bounds write in prost

Affected versions of this crate contained a bug in which decoding untrusted input could overflow the stack. On architectures with stack probes like x86, this can be used for denial of service attacks, while on architectures without stack probes like ARM overflowing the stack is unsound and can...

CVE-2021-38192

An issue was discovered in the prost-types crate before 0.8.0 for Rust. An overflow can occur during conversion from Timestamp to SystemTime...

CVE-2021-38192

An issue was discovered in the prost-types crate before 0.8.0 for Rust. An overflow can occur during conversion from Timestamp to SystemTime...

Buffer overflow

An issue was discovered in the prost-types crate before 0.8.0 for Rust. An overflow can occur during conversion from Timestamp to SystemTime...

CVE-2021-38192

An issue was discovered in the prost-types crate before 0.8.0 for Rust. An overflow can occur during conversion from Timestamp to SystemTime...

CVE-2021-38192

An issue was discovered in the prost-types crate before 0.8.0 for Rust. An overflow can occur during conversion from Timestamp to SystemTime...

CVE-2021-38192

CVE-2021-38192 affects the Rust crate prost-types prior to 0.8.0, where converting a Timestamp to SystemTime can overflow and panic. The issue is addressed by upgrading to prost-types v0.8 and switching the From for SystemTime usage to TryFrom for SystemTime. The vulnerability is described across...

CVE-2021-38192: Buffer Copy without Checking Size of Input

An issue was discovered in the prost-types crate before 0.8.0 for Rust. An overflow can occur during conversion from Timestamp to SystemTime...

RUSTSEC-2021-0073 Conversion from `prost_types::Timestamp` to `SystemTime` can cause an overflow and panic

Affected versions of this crate contained a bug in which untrusted input could cause an overflow and panic when converting a Timestamp to SystemTime. It is recommended to upgrade to prost-types v0.8 and switch the usage of From for SystemTime to TryFrom for SystemTime. See 438 for more informatio...

abbegm (>=0.1.0, <=0.2.1), abci-rs (>=0.10.0, <=0.11.1) +594 more potentially affected by CVE-2021-38192 via prost-types (>=0.2.3, <=0.7.0)

prost-types CARGO version =0.2.3, =0.1.0, =0.10.0, =0.0.2, =0.0.0, =0.1.3, =0.1.0, =0.17.0, =0.16.0, =0.1.2-alpha.3, =0.8.0, =0.8.0, =0.8.0, =0.11.0 and more Source cves: CVE-2021-38192 Source advisory: OSV:RUSTSEC-2021-0073...

PT-2021-22000

Name of the Vulnerable Software and Affected Versions: prost-types versions prior to 0.8.0 Description: An issue was discovered in the prost-types crate where an overflow can occur during conversion from Timestamp to SystemTime. This is caused by a bug that allows untrusted input to cause an...