CVE-2019-25010

An issue was discovered in the failure crate through 2019-11-13 for Rust. Type confusion can occur when privategettypeid is overridden...

CVE-2019-25010

CVE-2019-25010 affects the Rust failure crate (up to 0.1.5, affected through 2019-11-13). The issue is a type confusion that can occur when private_get_type_id is overridden, enabling potential misbehavior in applications relying on this crate. The NVD CVSS data indicates high to critical impact ...

CVE-2019-25010

An issue was discovered in the failure crate through 2019-11-13 for Rust. Type confusion can occur when privategettypeid is overridden...

CVE-2020-35858

An issue was discovered in the prost crate before 0.6.1 for Rust. There is stack consumption via a crafted message, causing a denial of service e.g., x86 or possibly remote code execution e.g., ARM...

CVE-2020-35858

The CVE-2020-35858 issue affects the prost crate for Rust prior to 0.6.1, where decoding a crafted message can cause stack consumption leading to denial of service (notably on x86) and potentially remote code execution (e.g., on ARM). The root cause is a stack-related flaw in parsing untrusted in...

CVE-2020-35859

CVE-2020-35859 affects the lucet-runtime-internals crate for Rust, before version 0.5.1. The issue is a mishandling of sigstack allocation, which can allow guest programs to obtain sensitive host data or experience memory corruption. Several advisories (including RUSTSEC-2020-0004 and GHSA-3933-W...

CVE-2020-35860

An issue was discovered in the cbox crate through 2020-03-19 for Rust. The CBox API allows dereferencing raw pointers without a requirement for unsafe code...

CVE-2020-35860

CVE-2020-35860 affects the Rust crate cbox (through 2020-03-19). The root cause is described as the CBox API allowing dereferencing raw pointers without requiring unsafe code, which can lead to memory-safety issues. The vulnerability is documented across multiple sources (e.g., RustSec advisory R...

CVE-2020-35861

The CVE-2020-35861 issue affects the bumpalo crate for Rust, specifically before version 3.2.1. The realloc functionality can read unknown memory, potentially allowing attackers to read cryptographic keys. No exploit details are provided in the initial/connected documents beyond this description....

CVE-2020-35861

An issue was discovered in the bumpalo crate before 3.2.1 for Rust. The realloc feature allows the reading of unknown memory. Attackers can potentially read cryptographic keys...

CVE-2020-35862

An issue was discovered in the bitvec crate before 0.17.4 for Rust. BitVec to BitBox conversion leads to a use-after-free or double free...

CVE-2020-35862

The CVE-2020-35862 issue affects the bitvec crate for Rust (pre-0.17.4). The vulnerability arises in BitVec to BitBox conversion, causing use-after-free or double-free due to allocation movement during that conversion. The problem is documented across multiple sources (RustSec/RUSTSEC-2020-0007, ...

CVE-2020-35863

An issue was discovered in the hyper crate before 0.12.34 for Rust. HTTP request smuggling can occur. Remote code execution can occur in certain situations with an HTTP server on the loopback interface...

CVE-2020-35863

The CVE-2020-35863 entry concerns the hyper crate for Rust prior to 0.12.34, where HTTP request smuggling can lead to remote code execution in certain loopback HTTP server scenarios. Affected component: hyper (Rust crate); root cause: unsafe handling of HTTP requests enabling request smuggling an...

CVE-2020-35864

An issue was discovered in the flatbuffers crate through 2020-04-11 for Rust. readscalar and readscalarat can transmute values without unsafe blocks...

CVE-2020-35864

An issue was discovered in the flatbuffers crate through 2020-04-11 for Rust. readscalar and readscalarat can transmute values without unsafe blocks...

CVE-2020-35864

CVE-2020-35864 affects the Rust implementation of the flatbuffers crate up to 2020-04-11. The root cause is that read_scalar and read_scalar_at can transmute values without using unsafe blocks. The available connected sources confirm this behavior but do not provide explicit remediation steps, af...

CVE-2020-35865

An issue was discovered in the osstrbytes crate before 2.0.0 for Rust. It has false expectations about char::fromu32unchecked behavior...

CVE-2020-35865

The CVE-2020-35865 entry concerns the os_str_bytes crate for Rust, prior to version 2.0.0, which contains code that relies on the behavior of std::char::from_u32_unchecked. This reliance constitutes false assumptions about the unchecked conversion in char::from_u32_unchecked and is described acro...

CVE-2020-35867

The CVE-2020-35867 issue affects the rusqlite crate for Rust prior to version 0.23.0, where memory safety can be violated via create_module. Multiple sources (including Red Hat, OSV/GHSA advisories) describe memory-safety vulnerabilities in rusqlite before 0.23.0, with issues such as use-after-fr...