Rust code issues and vulnerabilities

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in Rust. The vulnerability stems from the dereference of a program's raw pointer. No details of the vulnerability are available at this time...

Rust code issues and vulnerabilities

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability existed in Rust prior to version 0.3.0. The vulnerability stemmed from a dereference of a raw pointer, which could be exploited by an attacker to cause an arbitrary memory address to be...

CVE-2021-25903

An issue was discovered in the cache crate through 2021-01-01 for Rust. A raw pointer is dereferenced...

CVE-2021-25903

An issue was discovered in the cache crate through 2021-01-01 for Rust. A raw pointer is dereferenced...

CVE-2021-25903

The CVE-2021-25903 entry concerns the Rust cache crate, where a raw pointer is dereferenced. Multiple connected sources (RustSec advisory RUSTSEC-2021-0006, OSV/NVD listings, Red Hat/RH CVE pages, and related advisories) describe a null/dereferenced-pointer issue in versions through 2021-01-01, c...

CVE-2021-25904

An issue was discovered in the av-data crate before 0.3.0 for Rust. A raw pointer is dereferenced, leading to a read of an arbitrary memory address, sometimes causing a segfault...

CVE-2021-25904

An issue was discovered in the av-data crate before 0.3.0 for Rust. A raw pointer is dereferenced, leading to a read of an arbitrary memory address, sometimes causing a segfault...

CVE-2021-25903: NULL Pointer Dereference

An issue was discovered in the cache crate through 2021-01-01 for Rust. A raw pointer is dereferenced...

alexcrichton-cranelift-native (>=0.52.0, <=0.53.0), alexcrichton-cranelift-simplejit (0.53.0) +137 more potentially affected by CVE-2021-45687 via raw-cpuid (>=4.0.0, <=8.1.2)

raw-cpuid CARGO version =4.0.0, =0.52.0, =0.1.0, =0.9.0, =0.26.1, =0.6.2, =0.5.0, =0.2.0, =0.8.0-alpha1, =0.3.2, =0.14.0, =0.69.0 and more Source cves: CVE-2021-45687 Source advisory: OSV:RUSTSEC-2021-0089...

RUSTSEC-2021-0013 Soundness issues in `raw-cpuid`

Undefined behavior in asstring methods VendorInfo::asstring, SoCVendorBrand::asstring, and ExtendedFunctionInfo::processorbrandstring construct byte slices using std::slice::fromrawparts, with data coming from reprRust structs. This is always undefined behavior. See...

PT-2021-24261 · Raw-Cpuid · Raw-Cpuid

Name of the Vulnerable Software and Affected Versions: raw-cpuid crate versions prior to 9.1.1 Description: The issue arises when the non-default serialize feature is activated, allowing most structs to implement serde::Deserialize without sufficient validation. This can lead to breaking invarian...

PT-2021-16993

Name of the Vulnerable Software and Affected Versions raw-cpuid crate versions prior to 9.0.0 Description The issue is related to unsound transmute calls within as string methods in the raw-cpuid crate for Rust. Specifically, VendorInfo::as string, SoCVendorBrand::as string, and...

PT-2021-16994

Name of the Vulnerable Software and Affected Versions raw-cpuid crate versions prior to 9.0.0 Description The issue allows cpuid count calls even if the processor does not support the CPUID instruction, which is unsound and causes a deterministic crash. Additionally, there is undefined behavior i...

PT-2021-27540

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, which occurs during the parsing of raw data. The crash state indicates that the problem arises in th...

PT-2021-27506

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow WRITE crash has been reported, involving functions such as ofpbuf insert, nx put raw, and nx put match. Recommendations: At the...

PT-2021-27621

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 2 crash has been reported. The crash involves the functions tag parse, git tag parse raw, and git object from raw...

PT-2021-27520

Name of the Vulnerable Software and Affected Versions: git affected versions not specified Description: The issue is related to a heap-buffer-overflow read. Technical details about the crash include the prefixcmp and git prefixcmp functions, as well as the git commit parse raw function...

PT-2021-27644

Name of the Vulnerable Software and Affected Versions: git affected versions not specified Description: The issue is related to a heap buffer overflow read. Technical details about the crash include the git strntol64 function, git signature parse function, and git commit parse raw function...

PT-2021-16835

Name of the Vulnerable Software and Affected Versions av-data crate versions prior to 0.3.0 Description An issue in the av-data crate allows a raw pointer to be dereferenced, leading to a read of an arbitrary memory address. This can sometimes cause a segfault. The fn Frame::copy from raw parts...

Mozilla Rust Code Issue Vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A code issue vulnerability exists in cbox crate in versions of Mozilla Rust prior to 2020-03-19, which stems from the CBox API allowing dereferencing of raw pointers. No details of the vulnerability are provided...