Unspecified vulnerability in Mozilla Rust crayon crate

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in crayon crate in Mozilla Rust version 2020-08-31, which stems from a memory security violation via a handle-like handle. No details of the vulnerability are provided at this tim...

Mozilla Rust Buffer Overflow Vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A buffer overflow vulnerability exists in chacha20 crate in Mozilla Rust versions prior to 0.2.3, which stems from a ChaCha20 counter overflow that can be exploited by an attacker to determine plaintext...

Mozilla Rust post-release reuse vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. futures-task crate before 0.3.6 for Rust contains a security vulnerability that can be exploited by an attacker to potentially cause use-after-free in the case of non-static types...

Unspecified vulnerability in Mozilla Rust arr crate

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in Mozilla Rust versions prior to 2020-08-25 in arr crate, which stems from a buffer overflow in Index and IndexMut. No details of the vulnerability are provided at this time...

Unspecified Vulnerability in Rust (CNVD-2021-38322)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in mio crate for Rust prior to version 0.7.6, which stems from an incorrect expectation of the std::net::SocketAddr memory representation. No details of the vulnerability are...

Mozilla Rust traitobject crate buffer overflow vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A buffer overflow vulnerability exists in traitobject crate in versions of Mozilla Rust prior to 2020-06-01, which stems from the fact that it incorrectly expects a fat pointer, and can be exploited by an attack...

Unspecified Vulnerability in Mozilla Rust

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in flatbuffers crate in versions of Mozilla Rust prior to 0.6.1, which stems from the fact that an arbitrary byte can be reinterpreted as a bool.No details of the vulnerability ar...

Unspecified Vulnerability in Rust (CNVD-2021-39165)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in socket2 crate for Rust prior to version 0.3.16, which stems from its incorrect expectation of the std::net::SocketAddr memory representation. No details of the vulnerability ar...

Mozilla Rust Resource Management Error Vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in http crate in versions of Mozilla Rust prior to 0.1.20, which stems from HeaderMap:: The Drain API can use raw pointers to corrupt sound effects. No details of the vulnerabilit...

Mozilla Rust tiny_http crate environment issue vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. An environmental issue vulnerability exists in tinyhttp crate in versions of Mozilla Rust prior to 2020-06-16, which stems from an HTTP request smuggling can occur via a misformatted transport encoding header. N...

Unspecified Vulnerability in Mozilla Rust (CNVD-2021-30443)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in streebog crate in versions of Mozilla Rust prior to 0.8.0, which stems from a Streebog hash function that produces incorrect answers. No details of the vulnerability are provid...

Unspecified Vulnerability in Mozilla Rust (CNVD-2021-30442)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in streebog crate in versions of Mozilla Rust prior to 0.8.0, which stems from the Streebog hash function causing a panic. No details of the vulnerability are provided at this tim...

Mozilla Rust ozone crate buffer overflow vulnerability (CNVD-2021-30433)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A buffer overflow vulnerability exists in ozone crate in versions of Mozilla Rust prior to 2020-07-04, which stems from a memory safety violation by deleting uninitialized memory. No details of the vulnerability...

CVE-2020-26297

CVE-2020-26297 affects mdBook, a Rust-based tool for building online books. The vulnerability is a cross-site scripting flaw in the search feature (introduced in 0.1.4) that could allow an attacker to execute arbitrary JavaScript in a user’s browser via a malicious search query or a crafted link....

RUSTSEC-2021-0001 XSS in mdBook's search page

This is a cross-post of the official security advisoryml. The official post contains a signed version with our PGP key, as well. ml: https://groups.google.com/g/rustlang-security-announcements/c/3-sO6of29O0 The Rust Security Response Working Group was recently notified of a security issue affecti...

Rust Mdmook Cross-Site Scripting Vulnerability

Rust Mdmook is a Rust-based software for building online book applications from Markdown files from the Rust Organization. Rust Mdmook suffers from a cross-site scripting vulnerability that allows an attacker to execute arbitrary JavaScript code on a page...

RUSTSEC-2021-0008 reading on uninitialized buffer can cause UB (`impl<R> BufRead for GreedyAccessReader<R>`)

Affected versions of this crate creates an uninitialized buffer and passes it to user-provided Read implementation. This is unsound, because it allows safe Rust code to exhibit an undefined behavior read from uninitialized memory. The flaw was corrected in version 0.1.1 by zero-initializing a new...

reading on uninitialized buffer can cause UB (`impl<R> BufRead for GreedyAccessReader<R>`)

Affected versions of this crate creates an uninitialized buffer and passes it to user-provided Read implementation. This is unsound, because it allows safe Rust code to exhibit an undefined behavior read from uninitialized memory. The flaw was corrected in version 0.1.1 by zero-initializing a new...

RUSTSEC-2020-0103 `impl Random` on arrays can lead to dropping uninitialized memory

Affected versions of this crate had a panic safety issue to drop partially uninitialized array of T upon panic in a user provided function T::random. Dropping uninitialized T can potentially cause memory corruption or undefined behavior. The flaw was corrected in commit 565d508 by using MaybeUnin...

RUSTSEC-2020-0153 `read` on uninitialized buffer may cause UB (bite::read::BiteReadExpandedExt::read_framed_max)

Affected versions of this crate calls a user provided Read implementation on an uninitialized buffer. Read on uninitialized buffer is defined as undefined behavior in Rust...