Rust 安全漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in sodiumoxide crate for Rust versions prior to 0.2.5, which stems from generichash::Digest::eq comparing itself and thus has degenerate security properties. No details of the...

Rust Code Issues Vulnerabilities

Rust is a general-purpose, compiled programming language. A security vulnerability exists in Rust versions prior to 0.4.8 and versions prior to 1.1.0 of the 1.x series, which stems from the use of arc swap::access::Map and the Constant test helper or the use of a user-supplied implementation of t...

Mozilla Rust Input Validation Error Vulnerability (CNVD-2021-30574)

Rust is a general-purpose, compiled programming language. An input validation error vulnerability exists in Mozilla Rust version 0.6.2, which can be exploited by an attacker to cause an error in the Chunk implementation when constructing arrays using without checking the array size...

UBUNTU-CVE-2020-25791

An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, the array size is not checked when constructed with unit...

CVE-2020-25573

An issue was discovered in the linked-hash-map crate before 0.5.3 for Rust. It creates an uninitialized NonNull pointer, which violates a non-null constraint...

The vulnerability of the “Error::type_id” method in the Rust programming language allows a perpetrator to execute arbitrary code.

The vulnerability of the “Error::typeid” method in the Rust programming language is related to improper restrictions on operations within memory buffers. Exploiting this vulnerability allows an attacker to execute arbitrary code...

DEBIAN-CVE-2018-1000657

Rust Programming Language Rust standard library version Commit bfa0e1f58acf1c28d500c34ed258f09ae021893e and later; stable release 1.3.0 and later contains a Buffer Overflow vulnerability in std::collections::vecdeque::VecDeque::reserve function that can result in Arbitrary code execution, but no...