Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
added 2025/05/09 6:30 p.m.32 views

Duplicate Advisory: ring has some AES functions that may panic when overflow checking is enabled in

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-4p46-pwfr-66x6. This link is maintained to preserve external references. Original Description A flaw was found in Rust's Ring package. A panic may be triggered when overflow checking is enabled. In the QUIC...

5.3CVSS7.1AI score0.00986EPSS
SaveExploits0References9Affected Software1
CVE
CVE
added 2025/05/09 4:6 p.m.259 views

CVE-2025-4432

CVE-2025-4432 affects Rust’s Ring crate. A panic can be triggered when overflow checking is enabled; in QUIC, a specially crafted packet can induce this panic, likely ~1 in 2^32 packets. CVSS v3.1 base score 5.3 (Network, Low attack complexity, No privileges, No user interaction; Availability imp...

5.3CVSS5.4AI score0.00986EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2025/05/09 4:6 p.m.51 views

CVE-2025-4432 Ring: some aes functions may panic when overflow checking is enabled in ring

A flaw was found in Rust's Ring package. A panic may be triggered when overflow checking is enabled. In the QUIC protocol, this flaw allows an attacker to induce this panic by sending a specially crafted packet. It will likely occur unintentionally in 1 out of every 232 packets sent or received...

5.3CVSS0.00986EPSS
SaveExploits0References8
Rows per page
Query Builder