483 matches found
GHSA-8GF5-Q9P9-WVMC Data race in atomic-option
An issue was discovered in the atomic-option crate through 2020-10-31 for Rust. Because AtomicOption implements Sync unconditionally, a data race can occur...
epoll (>=0.4.0, <=0.6.0), hydrogen (>=0.1.0, <=0.1.5) potentially affected by CVE-2020-35892 +1 more via simple-slab (>=0.1.0, <=0.2.3)
simple-slab CARGO version =0.1.0, =0.4.0, =0.1.0, =0.1.5 Source cves: CVE-2020-35892, CVE-2020-35893 Source advisory: OSV:GHSA-438G-FX34-4H9M...
Out of bounds read in simple-slab
An issue was discovered in the simple-slab crate before 0.3.3 for Rust. index allows an out-of-bounds read...
GHSA-3VJM-36RR-7QRQ NULL Pointer Dereference in cbox
An issue was discovered in the cbox crate through 2020-03-19 for Rust. The CBox API allows dereferencing raw pointers without a requirement for unsafe code...
libp2p-dns (>=0.1.0, <=0.4.0), libp2p-floodsub (>=0.1.0, <=0.4.0) +13 more potentially affected by CVE-2019-15545 via libp2p-core (>=0.1.0, <=0.4.0)
libp2p-core CARGO version =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.4.0 Source cves: CVE-2019-15545 Source advisory: OSV:GHSA-4Q4X-67HX-5MPG...
actix (>=0.5.0, <=0.5.8), actix-ogn (0.1.0) +12 more potentially affected by CVE-2018-20994 via trust-dns-proto (>=0.2.0, <=0.3.3)
trust-dns-proto CARGO version =0.2.0, =0.5.0, =1.4.0, =0.2.0, =0.1.0, =0.11.0, =0.7.0, =0.2.2, =0.7.0, =0.8.2 - zicsv-tool 0.1.0 Source cves: CVE-2018-20994 Source advisory: OSV:GHSA-369H-PJR2-6WRH...
Use after free in actix-service
An issue was discovered in the actix-service crate before 1.0.6 for Rust. The Cell implementation allows obtaining more than one mutable reference to the same data...
CVE-2021-38511
An issue was discovered in the tar crate before 0.4.36 for Rust. When symlinks are present in a TAR archive, extraction can create arbitrary directories via .. traversal...
CVE-2020-36468
An issue was discovered in the cgc crate through 2020-12-10 for Rust. Ptr::write performs non-atomic write operations on an underlying pointer...
CVE-2020-36462
An issue was discovered in the syncpool crate before 0.1.6 for Rust. There is an unconditional implementation of Send for Bucket2...
CVE-2020-36444
An issue was discovered in the async-coap crate through 2020-12-08 for Rust. Send and Sync are implemented for ArcGuard without trait bounds on RC...
CVE-2020-36452
An issue was discovered in the array-tools crate before 0.3.2 for Rust. FixedCapacityDequeLike::clone has a drop of uninitialized memory...
CVE-2020-36443
An issue was discovered in the libp2p-deflate crate before 0.27.1 for Rust. An uninitialized buffer is passed to AsyncRead::pollread, which is a user-provided trait function...
CVE-2020-36455
An issue was discovered in the slock crate through 2020-11-17 for Rust. Slock unconditionally implements Send and Sync...
CVE-2020-36449
An issue was discovered in the kekbit crate before 0.3.4 for Rust. For ShmWriter, Send is implemented without requiring H: Send...
CVE-2020-36439
An issue was discovered in the ticketedlock crate before 0.3.0 for Rust. There are unconditional implementations of Send for ReadTicket and WriteTicket...
CVE-2020-36434
An issue was discovered in the sys-info crate before 0.8.0 for Rust. sysinfo::diskinfo calls can trigger a double free...
CVE-2021-38196
An issue was discovered in the better-macro crate through 2021-07-22 for Rust. It intentionally demonstrates that remote attackers can execute arbitrary code via proc-macros, and otherwise has no legitimate purpose...
