333 matches found
CBL Mariner 2.0 Security Update: azl-compliance / rust (CVE-2025-4574)
The version of azl-compliance / rust installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-4574 advisory. - In crossbeam-channel rust crate, the internal Channel type's Drop method has a race condition...
CVE-2025-53605
A flaw was found in protobuf. The protobuf::codedinputstream::CodedInputStream::skipgroup function exhibits uncontrolled recursion when parsing unknown fields from untrusted input, potentially leading to excessive resource consumption. This flaw allows a network attacker to trigger this condition...
CVE-2025-53604
The web-push crate before 0.10.3 for Rust allows a denial of service memory consumption in the built-in clients via a large integer in a Content-Length header...
CVE-2025-53605
The protobuf crate before 3.7.2 for Rust allows uncontrolled recursion in the protobuf::codedinputstream::CodedInputStream::skipgroup parsing of unknown fields in untrusted input...
CVE-2025-53604
The web-push crate before 0.10.3 for Rust allows a denial of service memory consumption in the built-in clients via a large integer in a Content-Length header...
CVE-2025-53604
The vulnerability CVE-2025-53604 affects the Rust crate web-push prior to version 0.10.3 . The built-in clients are susceptible to a denial-of-service caused by memory consumption when handling a large integer in a Content-Length header. Impact is described as DoS via memory exhaustion in affecte...
CVE-2025-53604
The web-push crate before 0.10.3 for Rust allows a denial of service memory consumption in the built-in clients via a large integer in a Content-Length header...
SUSE CVE-2025-5791
A flaw was found in the user's crate for Rust. This vulnerability allows privilege escalation via incorrect group listing when a user or process has fewer than exactly 1024 groups, leading to the erroneous inclusion of the root group in the access list...
CVE-2025-5791 Users: `root` appended to group listings
A flaw was found in the user's crate for Rust. This vulnerability allows privilege escalation via incorrect group listing when a user or process has fewer than exactly 1024 groups, leading to the erroneous inclusion of the root group in the access list...
CVE-2025-48751
The processlock crate 0.1.0 for Rust allows data races in unlock...
CVE-2025-48755
In the spiral-rs crate 0.2.0 for Rust, allocation can be attempted for a ZST zero-sized type...
CVE-2025-48754
In the memorypages crate 0.1.0 for Rust, division by zero can occur...
memory_pages division by zero
In the memorypages crate 0.1.0 for Rust, division by zero can occur...
CVE-2025-48754
In the memorypages crate 0.1.0 for Rust, division by zero can occur...
CVE-2025-48751
The processlock crate 0.1.0 for Rust allows data races in unlock...
PT-2025-22831
Name of the Vulnerable Software and Affected Versions memory pages crate version 0.1.0 Description The issue is related to division by zero in the memory pages crate for Rust. Recommendations For memory pages crate version 0.1.0, update to a version that fixes the division by zero issue. At the...
PT-2025-22832
Name of the Vulnerable Software and Affected Versions spiral-rs crate version 0.2.0 Description The issue concerns the spiral-rs crate for Rust, where allocation can be attempted for a ZST zero-sized type. Recommendations For spiral-rs crate version 0.2.0, consider avoiding allocations for...
Rust 安全漏洞
Rust is a general-purpose, compiled programming language from the Mozilla Foundation in the United States. A security vulnerability exists in Rust that stems from a possible overflow in groupnumber, where a hardware device may expect a small number of bits to be used to represent a group number...
CVE-2023-34411
The xml-rs crate before 0.8.14 for Rust and Crab allows a denial of service panic via an invalid ! token such as !DOCTYPEs/%!A nesting in an XML document. The earliest affected version is 0.8.9...