Lucene search
+L

9483 matches found

OSV
OSV
added 2022/03/08 7:15 p.m.10 views

AZL-45021 CVE-2022-24713 affecting package ripgrep 13.0.0-12

regex is an implementation of regular expressions for the Rust language. The regex crate features built-in mitigations to prevent denial of service attacks caused by untrusted regexes, or untrusted input matched by trusted regexes. Those tunable mitigations already provide sane defaults to preven...

7.5CVSS6.9AI score0.1446EPSS
SaveExploits1References1
NVD
NVD
added 2022/03/08 7:15 p.m.27 views

CVE-2022-24713

regex is an implementation of regular expressions for the Rust language. The regex crate features built-in mitigations to prevent denial of service attacks caused by untrusted regexes, or untrusted input matched by trusted regexes. Those tunable mitigations already provide sane defaults to preven...

7.5CVSS0.1446EPSS
SaveExploits1References12
OSV
OSV
added 2022/03/08 7:15 p.m.5 views

DEBIAN-CVE-2022-24713

regex is an implementation of regular expressions for the Rust language. The regex crate features built-in mitigations to prevent denial of service attacks caused by untrusted regexes, or untrusted input matched by trusted regexes. Those tunable mitigations already provide sane defaults to preven...

7.5CVSS7.4AI score0.1446EPSS
SaveExploits1References1
OSV
OSV
added 2022/03/08 7:15 p.m.12 views

AZL-61405 CVE-2022-24713 affecting package rust for versions less than regex-1.8.4

regex is an implementation of regular expressions for the Rust language. The regex crate features built-in mitigations to prevent denial of service attacks caused by untrusted regexes, or untrusted input matched by trusted regexes. Those tunable mitigations already provide sane defaults to preven...

7.5CVSS6.9AI score0.1446EPSS
SaveExploits1References1
OSV
OSV
added 2022/03/08 7:15 p.m.8 views

UBUNTU-CVE-2022-24713

regex is an implementation of regular expressions for the Rust language. The regex crate features built-in mitigations to prevent denial of service attacks caused by untrusted regexes, or untrusted input matched by trusted regexes. Those tunable mitigations already provide sane defaults to preven...

7.5CVSS7AI score0.1446EPSS
SaveExploits1References9
Prion
Prion
added 2022/03/08 7:15 p.m.29 views

Design/Logic Flaw

regex is an implementation of regular expressions for the Rust language. The regex crate features built-in mitigations to prevent denial of service attacks caused by untrusted regexes, or untrusted input matched by trusted regexes. Those tunable mitigations already provide sane defaults to preven...

5CVSS7.9AI score0.1446EPSS
SaveExploits1References12Affected Software3
Cvelist
Cvelist
added 2022/03/08 7:00 p.m.41 views

CVE-2022-24713 Regular expression denial of service in Rust's regex crate

regex is an implementation of regular expressions for the Rust language. The regex crate features built-in mitigations to prevent denial of service attacks caused by untrusted regexes, or untrusted input matched by trusted regexes. Those tunable mitigations already provide sane defaults to preven...

7.5CVSS8.3AI score0.1446EPSS
SaveExploits1References12
Vulnrichment
Vulnrichment
added 2022/03/08 7:00 p.m.6 views

CVE-2022-24713 Regular expression denial of service in Rust's regex crate

regex is an implementation of regular expressions for the Rust language. The regex crate features built-in mitigations to prevent denial of service attacks caused by untrusted regexes, or untrusted input matched by trusted regexes. Those tunable mitigations already provide sane defaults to preven...

7.5CVSS7.6AI score0.1446EPSS
SaveExploits1References12
CVE
CVE
added 2022/03/08 7:00 p.m.431 views

CVE-2022-24713

CVE-2022-24713 affects the Rust regex crate. A bug in the mitigations for untrusted regexes may allow denial-of-service via specially crafted regexes executed against user-controlled input. All versions ≤ 1.5.4 are affected; the fix starts with regex 1.5.5. Upgrading to a newer regex crate versio...

7.5CVSS8.3AI score0.1446EPSS
SaveExploits1References12Affected Software1
OSV
OSV
added 2022/03/08 7:00 p.m.32 views

CVE-2022-24713 Regular expression denial of service in Rust's regex crate

regex is an implementation of regular expressions for the Rust language. The regex crate features built-in mitigations to prevent denial of service attacks caused by untrusted regexes, or untrusted input matched by trusted regexes. Those tunable mitigations already provide sane defaults to preven...

7.5CVSS8.2AI score
SaveExploits0References14
AlpineLinux
AlpineLinux
added 2022/03/08 7:00 p.m.54 views

CVE-2022-24713

regex is an implementation of regular expressions for the Rust language. The regex crate features built-in mitigations to prevent denial of service attacks caused by untrusted regexes, or untrusted input matched by trusted regexes. Those tunable mitigations already provide sane defaults to preven...

7.5CVSS8.4AI score0.1446EPSS
SaveExploits1
OSV
OSV
added 2022/03/08 12:00 p.m.12 views

RUSTSEC-2022-0013 Regexes with large repetitions on empty sub-expressions take a very long time to parse

The Rust Security Response WG was notified that the regex crate did not properly limit the complexity of the regular expressions regex it parses. An attacker could use this security issue to perform a denial of service, by sending a specially crafted regex to a service accepting untrusted regexes...

7.5CVSS6.7AI score0.1446EPSS
SaveExploits1References3
RustSec
RustSec
added 2022/03/08 12:00 p.m.47 views

Regexes with large repetitions on empty sub-expressions take a very long time to parse

The Rust Security Response WG was notified that the regex crate did not properly limit the complexity of the regular expressions regex it parses. An attacker could use this security issue to perform a denial of service, by sending a specially crafted regex to a service accepting untrusted regexes...

7.5CVSS2.9AI score0.1446EPSS
SaveExploits1Affected Software1
GithubExploit
GithubExploit
added 2022/03/04 3:47 a.m.440 views

Exploit for Out-of-bounds Write in Polkit_Project Polkit

CVE-2021-4034 exploit but in rust, cause why not ? Based on...

7.8CVSS7.5AI score0.94921EPSS
SaveExploits154
OSV
OSV
added 2022/02/28 12:00 p.m.65 views

RUSTSEC-2022-0011 Miscomputation when performing AES encryption in rust-crypto

The following Rust program demonstrates some strangeness in AES encryption - if you have an immutable key slice and then operate on that slice, you get different encryption output than if you operate on a copy of that key. For these functions, we expect that extending a 16 byte key to a 32 byte k...

7.3AI score
SaveExploits0References2
RustSec
RustSec
added 2022/02/28 12:00 p.m.20 views

Miscomputation when performing AES encryption in rust-crypto

The following Rust program demonstrates some strangeness in AES encryption - if you have an immutable key slice and then operate on that slice, you get different encryption output than if you operate on a copy of that key. For these functions, we expect that extending a 16 byte key to a 32 byte k...

7.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2022/02/22 12:00 a.m.26 views

openSUSE 15 Security Update : rust (openSUSE-SU-2022:0491-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2022:0491-1 advisory. - Rust is a multi-paradigm, general-purpose programming language designed for performance and safety, especially safe concurrency. The Rust Security...

7.3CVSS7.1AI score0.01376EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2022/02/22 12:00 a.m.13 views

openSUSE: Security Advisory for rust (openSUSE-SU-2022:0491-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.3CVSS7.4AI score0.01376EPSS
SaveExploits1References2
OSV
OSV
added 2022/02/19 2:15 p.m.10 views

AZL-41314 CVE-2022-0632 affecting package rust for versions less than 1.75.0-1

NULL Pointer Dereference in Homebrew mruby prior to 3.2...

5.5CVSS6AI score0.00813EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2022/02/19 12:00 a.m.25 views

SUSE SLES15 Security Update : rust (SUSE-SU-2022:0491-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:0491-1 advisory. - Rust is a multi-paradigm, general-purpose programming language designed for performance and safety, especially safe concurrency. The Rust...

7.3CVSS7.1AI score0.01376EPSS
SaveExploits1References4
Rows per page
Query Builder