Lucene search
+L

10 matches found

OSV
OSV
•added 2022/06/16 11:24 p.m.•45 views

GHSA-HFXP-P695-629X abomonation transmutes &T to and from &[u8] without sufficient constraints

This transmute is at the core of the abomonation crates. It's so easy to use it to violate alignment requirements that no test in the crate's test suite passes under miri. The use of this transmute in serialization/deserialization also incorrectly assumes that the layout of a reprRust type is...

7.5CVSS5.8AI score0.00972EPSS
SaveExploits0References3
OSV
OSV
•added 2021/10/17 12:00 p.m.•46 views

RUSTSEC-2021-0120 abomonation transmutes &T to and from &[u8] without sufficient constraints

This transmute is at the core of the abomonation crates. It's so easy to use it to violate alignment requirements that no test in the crate's test suite passes under miri. The use of this transmute in serialization/deserialization also incorrectly assumes that the layout of a reprRust type is...

7.5CVSS7.2AI score0.00972EPSS
SaveExploits0References3
RustSec
RustSec
•added 2021/10/17 12:00 p.m.•32 views

abomonation transmutes &T to and from &[u8] without sufficient constraints

This transmute is at the core of the abomonation crates. It's so easy to use it to violate alignment requirements that no test in the crate's test suite passes under miri. The use of this transmute in serialization/deserialization also incorrectly assumes that the layout of a reprRust type is...

7.5CVSS1.2AI score0.00972EPSS
SaveExploits0
OSV
OSV
•added 2021/08/25 8:47 p.m.•17 views

GHSA-G4W7-3QR8-5623 Improper type usage in rusqlite

An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via the reprRust type...

9.8CVSS8.9AI score0.01751EPSS
SaveExploits0References5
NVD
NVD
•added 2020/12/31 10:15 a.m.•28 views

CVE-2020-35872

An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via the reprRust type...

9.8CVSS9.6AI score0.01736EPSS
SaveExploits0References2
OSV
OSV
•added 2020/12/31 10:15 a.m.•24 views

CVE-2020-35872

An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via the reprRust type...

9.8CVSS7.3AI score0.01751EPSS
SaveExploits0References2
Prion
Prion
•added 2020/12/31 10:15 a.m.•21 views

Design/Logic Flaw

An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via the reprRust type...

7.5CVSS9.6AI score0.01736EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2020/12/31 8:28 a.m.•33 views

CVE-2020-35872

An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via the reprRust type...

9.7AI score0.01736EPSS
SaveExploits0References2
CVE
CVE
•added 2020/12/31 8:28 a.m.•181 views

CVE-2020-35872

The CVE-2020-35872 entry concerns the rusqlite crate for Rust, before version 0.23.0. The root cause is a memory-safety issue exposed via the repr(Rust) type, which can lead to memory-safety violations. The vulnerability is reflected in high-severity CVSS scores (NVD: CVSS2 7.5; CVSS3.1 9.8) with...

9.8CVSS9.4AI score0.01736EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/31 12:00 a.m.•4 views

CVE-2020-35872: Undefined Security Weakness

An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via the reprRust type...

9.8CVSS5.8AI score0.01736EPSS
SaveExploits0References1
Rows per page
Query Builder