Lucene search
K

9 matches found

OSV
OSV
added 2022/06/16 11:24 p.m.1 views

GHSA-HFXP-P695-629X abomonation transmutes &T to and from &[u8] without sufficient constraints

This transmute is at the core of the abomonation crates. It's so easy to use it to violate alignment requirements that no test in the crate's test suite passes under miri. The use of this transmute in serialization/deserialization also incorrectly assumes that the layout of a reprRust type is...

7.5CVSS5.8AI score0.00291EPSS
Exploits0References3
RustSec
RustSec
added 2021/10/17 12:0 p.m.21 views

abomonation transmutes &T to and from &[u8] without sufficient constraints

This transmute is at the core of the abomonation crates. It's so easy to use it to violate alignment requirements that no test in the crate's test suite passes under miri. The use of this transmute in serialization/deserialization also incorrectly assumes that the layout of a reprRust type is...

7.5CVSS1.2AI score0.00291EPSS
Exploits0
OSV
OSV
added 2021/10/17 12:0 p.m.15 views

RUSTSEC-2021-0120 abomonation transmutes &T to and from &[u8] without sufficient constraints

This transmute is at the core of the abomonation crates. It's so easy to use it to violate alignment requirements that no test in the crate's test suite passes under miri. The use of this transmute in serialization/deserialization also incorrectly assumes that the layout of a reprRust type is...

7.5CVSS7.2AI score0.00291EPSS
Exploits0References3
OSV
OSV
added 2021/08/25 8:47 p.m.14 views

GHSA-G4W7-3QR8-5623 Improper type usage in rusqlite

An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via the reprRust type...

9.8CVSS8.9AI score0.00509EPSS
Exploits0References5
NVD
NVD
added 2020/12/31 10:15 a.m.12 views

CVE-2020-35872

An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via the reprRust type...

9.8CVSS9.6AI score0.00433EPSS
Exploits0References2
OSV
OSV
added 2020/12/31 10:15 a.m.10 views

CVE-2020-35872

An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via the reprRust type...

9.8CVSS7.3AI score0.00509EPSS
Exploits0References2
Prion
Prion
added 2020/12/31 10:15 a.m.14 views

Design/Logic Flaw

An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via the reprRust type...

7.5CVSS9.6AI score0.00433EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2020/12/31 8:28 a.m.12 views

CVE-2020-35872

An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via the reprRust type...

9.7AI score0.00433EPSS
Exploits0References2
CVE
CVE
added 2020/12/31 8:28 a.m.166 views

CVE-2020-35872

The CVE-2020-35872 entry concerns the rusqlite crate for Rust, before version 0.23.0. The root cause is a memory-safety issue exposed via the repr(Rust) type, which can lead to memory-safety violations. The vulnerability is reflected in high-severity CVSS scores (NVD: CVSS2 7.5; CVSS3.1 9.8) with...

9.8CVSS9.4AI score0.00433EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder