armory_cli (>=0.3.3, <=0.3.28), armory_lib (>=0.1.0, <=0.3.28) +137 more potentially affected by CVE-2022-46176 via cargo (>=0.4.0, <=0.66.0)

cargo CARGO version =0.4.0, =0.3.3, =0.1.0, =0.10.0, =0.10.0, =0.1.0, =0.3.1, =0.0.1, =0.1.0, =0.1.0, =0.2.2, =0.6.0, =0.1.0, =0.1.2 and more Source cves: CVE-2022-46176 Source advisory: OSV:GHSA-R5W3-XM58-JV6J...

a2s (>=0.1.0, <=0.5.1), abxml (>=0.5.0, <=0.6.2) +227 more potentially affected by CVE-2023-22895 via bzip2 (>=0.2.3, <=0.3.3)

bzip2 CARGO version =0.2.3, =0.1.0, =0.5.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0-alpha.6, =0.1.3, =0.1.0, =0.1.0, =0.3.0, =2020.5.26, =0.1.0, =0.2.0, =1.0.0 and more Source cves: CVE-2023-22895 Source advisory: OSV:GHSA-96JV-R488-C2RJ...

bzip2 allows attackers to cause a denial of service via a large file that triggers an integer overflow

The bzip2 crate before 0.4.4 for Rust allow attackers to cause a denial of service via a large file that triggers an integer overflow in mem.rs. NOTE: this is unrelated to the https://crates.io/crates/bzip2-rs product...

CVE-2023-22895

The bzip2 crate before 0.4.4 for Rust allow attackers to cause a denial of service via a large file that triggers an integer overflow in mem.rs. NOTE: this is unrelated to the https://crates.io/crates/bzip2-rs product...

DEBIAN-CVE-2023-22895

The bzip2 crate before 0.4.4 for Rust allow attackers to cause a denial of service via a large file that triggers an integer overflow in mem.rs. NOTE: this is unrelated to the https://crates.io/crates/bzip2-rs product...

CVE-2023-22895

The bzip2 crate before 0.4.4 for Rust allow attackers to cause a denial of service via a large file that triggers an integer overflow in mem.rs. NOTE: this is unrelated to the https://crates.io/crates/bzip2-rs product...

UBUNTU-CVE-2023-22895

The bzip2 crate before 0.4.4 for Rust allow attackers to cause a denial of service via a large file that triggers an integer overflow in mem.rs. NOTE: this is unrelated to the https://crates.io/crates/bzip2-rs product...

CVE-2023-22895

The bzip2 crate before 0.4.4 for Rust allow attackers to cause a denial of service via a large file that triggers an integer overflow in mem.rs. NOTE: this is unrelated to the https://crates.io/crates/bzip2-rs product...

CVE-2023-22895

CVE-2023-22895 affects the bzip2 crate before 0.4.4 for Rust; vulnerability is an integer overflow in mem.rs that allows denial of service on large input. Note this is unrelated to crates.io/bzip2-rs. Fedora advisories indicate rebuilding for bzip2 0.4.4; no exploit details are provided in the su...

PT-2023-1358

Name of the Vulnerable Software and Affected Versions Rust versions prior to 1.66.1 Description The issue is related to the Cargo package manager in Rust, which does not perform SSH host key verification when cloning indexes and dependencies via SSH. This allows an attacker to perform...

CVE-2023-22895

The bzip2 crate before 0.4.4 for Rust allow attackers to cause a denial of service via a large file that triggers an integer overflow in mem.rs. NOTE: this is unrelated to the https://crates.io/crates/bzip2-rs product...

a2s (>=0.1.0, <=0.5.1), abxml (>=0.5.0, <=0.6.2) +227 more potentially affected by CVE-2023-22895 via bzip2 (>=0.2.3, <=0.3.3)

bzip2 CARGO version =0.2.3, =0.1.0, =0.5.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0-alpha.6, =0.1.3, =0.1.0, =0.1.0, =0.3.0, =2020.5.26, =0.1.0, =0.2.0, =1.0.0 and more Source cves: CVE-2023-22895 Source advisory: OSV:RUSTSEC-2023-0004...

async-debug (>=0.1.0, <=0.1.3), async-http-proxy (>=1.2.1, <=1.2.4) +133 more potentially affected by CVE-2023-22466 via tokio (>=1.7.1, <=1.18.2)

tokio CARGO version =1.7.1, =0.1.0, =1.2.1, =0.2.1, =2.2.0, =0.4.0, =0.16.0, =0.1.0, =0.14.0, =0.33.2 - clashctl 0.2.2 and more Source cves: CVE-2023-22466 Source advisory: OSV:GHSA-7RRJ-XR53-82P7...

askai (0.1.0), doh-client (3.1.2) +25 more potentially affected by CVE-2023-22466 via tokio (>=1.19.2, <=1.20.1)

tokio CARGO version =1.19.2, =2.3.0, =4.1.2, =1.4.0, =1.18.1, =0.2.0, =0.16.0, =0.16.0, =0.16.0, =0.16.0, =0.16.1 and more Source cves: CVE-2023-22466 Source advisory: OSV:GHSA-7RRJ-XR53-82P7...

CVE-2023-22466

Tokio is a runtime for writing applications with Rust. Starting with version 1.7.0 and prior to versions 1.18.4, 1.20.3, and 1.23.1, when configuring a Windows named pipe server, setting pipemode will reset rejectremoteclients to false. If the application has previously configured...

CVE-2023-22466

Tokio (Rust) prior to v1.18.4, v1.20.3, and v1.23.1, and the 1.7.0–1.18.x range, has a Windows named pipe setting bug: when configuring pipe_mode for a named pipe server, reject_remote_clients is reset to false, undoing any prior true setting. This can allow remote clients access to the named pip...

CVE-2023-22466

Tokio is a runtime for writing applications with Rust. Starting with version 1.7.0 and prior to versions 1.18.4, 1.20.3, and 1.23.1, when configuring a Windows named pipe server, setting pipemode will reset rejectremoteclients to false. If the application has previously configured...

CVE-2023-22466 Tokio's reject_remote_clients configuration may get dropped when creating a Windows named pipe

Tokio is a runtime for writing applications with Rust. Starting with version 1.7.0 and prior to versions 1.18.4, 1.20.3, and 1.23.1, when configuring a Windows named pipe server, setting pipemode will reset rejectremoteclients to false. If the application has previously configured...

async-debug (>=0.1.0, <=0.1.3), async-http-proxy (>=1.2.1, <=1.2.4) +133 more potentially affected by CVE-2023-22466 via tokio (>=1.7.1, <=1.18.2)

tokio CARGO version =1.7.1, =0.1.0, =1.2.1, =0.2.1, =2.2.0, =0.4.0, =0.16.0, =0.1.0, =0.14.0, =0.33.2 - clashctl 0.2.2 and more Source cves: CVE-2023-22466 Source advisory: OSV:RUSTSEC-2023-0001...

askai (0.1.0), doh-client (3.1.2) +25 more potentially affected by CVE-2023-22466 via tokio (>=1.19.2, <=1.20.1)

tokio CARGO version =1.19.2, =2.3.0, =4.1.2, =1.4.0, =1.18.1, =0.2.0, =0.16.0, =0.16.0, =0.16.0, =0.16.0, =0.16.1 and more Source cves: CVE-2023-22466 Source advisory: OSV:RUSTSEC-2023-0001...