Lucene search
+L

9421 matches found

OSV
OSV
added 2023/12/08 3:23 p.m.144 views

GHSA-7787-P7X6-FQ3J Candid infinite decoding loop through specially crafted payload

Impact The Candid library causes a Denial of Service while parsing a specially crafted payload with empty data type. For example, if the payload is record ; empty and the canister interface expects record then the rust candid decoder treats empty as an extra field required by the type. The proble...

7.5CVSS7.5AI score0.01212EPSS
SaveExploits0References9
NVD
NVD
added 2023/12/08 3:15 p.m.52 views

CVE-2023-6245

The Candid library causes a Denial of Service while parsing a specially crafted payload with 'empty' data type. For example, if the payload is record ; empty and the canister interface expects record then the Rust candid decoder treats empty as an extra field required by the type. The problem wit...

7.5CVSS0.01212EPSS
SaveExploits0References5
OSV
OSV
added 2023/12/08 3:15 p.m.9 views

UBUNTU-CVE-2023-6245

The Candid library causes a Denial of Service while parsing a specially crafted payload with 'empty' data type. For example, if the payload is record ; empty and the canister interface expects record then the Rust candid decoder treats empty as an extra field required by the type. The problem wit...

7.5CVSS6AI score0.01212EPSS
SaveExploits0References7
Prion
Prion
added 2023/12/08 3:15 p.m.23 views

Design/Logic Flaw

The Candid library causes a Denial of Service while parsing a specially crafted payload with 'empty' data type. For example, if the payload is record ; empty and the canister interface expects record then the Rust candid decoder treats empty as an extra field required by the type. The problem wit...

5CVSS7.1AI score0.01212EPSS
SaveExploits0References5Affected Software1
UbuntuCve
UbuntuCve
added 2023/12/08 3:15 p.m.43 views

CVE-2023-6245

The Candid library causes a Denial of Service while parsing a specially crafted payload with 'empty' data type. For example, if the payload is record ; empty and the canister interface expects record then the Rust candid decoder treats empty as an extra field required by the type. The problem wit...

7.5CVSS7.2AI score0.01212EPSS
SaveExploits0References6
CVE
CVE
added 2023/12/08 2:26 p.m.65 views

CVE-2023-6245

The CVE-2023-6245 issue affects the Candid library used by Rust candid decoder. A specially crafted payload exploiting the data type empty can cause an infinite decoding loop, effectively triggering a Denial of Service as decoding runs until the execution round instruction limit is reached. Motok...

7.5CVSS7.4AI score0.01212EPSS
SaveExploits0References5Affected Software1
Vulnrichment
Vulnrichment
added 2023/12/08 2:26 p.m.13 views

CVE-2023-6245 Infinite decoding loop through specially crafted payload

The Candid library causes a Denial of Service while parsing a specially crafted payload with 'empty' data type. For example, if the payload is record ; empty and the canister interface expects record then the Rust candid decoder treats empty as an extra field required by the type. The problem wit...

7.5CVSS6.8AI score0.01212EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2023/12/08 2:26 p.m.46 views

CVE-2023-6245 Infinite decoding loop through specially crafted payload

The Candid library causes a Denial of Service while parsing a specially crafted payload with 'empty' data type. For example, if the payload is record ; empty and the canister interface expects record then the Rust candid decoder treats empty as an extra field required by the type. The problem wit...

7.5CVSS7.6AI score0.01212EPSS
SaveExploits0References5
OSV
OSV
added 2023/12/08 12:0 p.m.44 views

RUSTSEC-2023-0073 Infinite decoding loop through specially crafted payload

The Candid library causes a Denial of Service while parsing a specially crafted payload with empty data type. For example, if the payload is record ; empty and the canister interface expects record then the rust candid decoder treats empty as an extra field required by the type. The problem with...

7.5CVSS7.4AI score0.01212EPSS
SaveExploits0References3
Fedora
Fedora
added 2023/12/06 1:47 a.m.20 views

[SECURITY] Fedora 38 Update: rust-sevctl-0.3.2-5.fc38

Administrative utility for AMD SEV...

7.4AI score
SaveExploits0
Fedora
Fedora
added 2023/12/06 1:47 a.m.11 views

[SECURITY] Fedora 38 Update: rust-sequoia-sq-0.26.0-10.fc38

Command-line frontends for Sequoia...

7.4AI score
SaveExploits0
Fedora
Fedora
added 2023/12/06 1:47 a.m.14 views

[SECURITY] Fedora 38 Update: rust-sequoia-wot-0.5.0-4.fc38

An implementation of OpenPGP's web of trust...

7.3AI score
SaveExploits0
Fedora
Fedora
added 2023/12/06 1:47 a.m.15 views

[SECURITY] Fedora 38 Update: rust-bodhi-cli-2.1.1-2.fc38

Bodhi CLI client based on bodhi-rs...

7.3AI score
SaveExploits0
Fedora
Fedora
added 2023/12/06 1:47 a.m.11 views

[SECURITY] Fedora 38 Update: rust-sequoia-policy-config-0.6.0-6.fc38

Configure Sequoia using a configuration file...

7.3AI score
SaveExploits0
Fedora
Fedora
added 2023/12/06 1:47 a.m.18 views

[SECURITY] Fedora 38 Update: rust-pore-0.1.8-5.fc38

Performance oriented reimplementation of repo...

7.3AI score
SaveExploits0
Fedora
Fedora
added 2023/12/06 1:40 a.m.13 views

[SECURITY] Fedora 39 Update: rust-sequoia-octopus-librnp-1.5.0-4.fc39

Reimplementation of RNP's interface using Sequoia for use with Thunderbird...

7.4AI score
SaveExploits0
Fedora
Fedora
added 2023/12/06 1:40 a.m.20 views

[SECURITY] Fedora 39 Update: rust-snphost-0.1.2-2.fc39

Administrative utility for AMD SEV-SNP...

7.4AI score
SaveExploits0
Fedora
Fedora
added 2023/12/06 1:40 a.m.14 views

[SECURITY] Fedora 39 Update: rust-tealdeer-1.6.1-5.fc39

Fetch and show tldr help pages for many CLI commands. Full featured offline client with caching support...

7.4AI score
SaveExploits0
Fedora
Fedora
added 2023/12/06 1:40 a.m.20 views

[SECURITY] Fedora 39 Update: rust-sequoia-wot-0.5.0-4.fc39

An implementation of OpenPGP's web of trust...

7.3AI score
SaveExploits0
Fedora
Fedora
added 2023/12/06 1:40 a.m.12 views

[SECURITY] Fedora 39 Update: rust-sequoia-sq-0.26.0-10.fc39

Command-line frontends for Sequoia...

7.4AI score
SaveExploits0
Rows per page
Query Builder