CVE-2020-35881

An issue was discovered in the traitobject crate through 2020-06-01 for Rust. It has false expectations about fat pointers, possibly causing memory corruption in, for example, Rust 2.x...

CVE-2020-35881

CVE-2020-35881 affects the traitobject crate in Rust (through 2020-06-01). The issue stems from incorrect fat-pointer layout assumptions, potentially causing out-of-bounds writes and memory corruption (also described in related advisories such as GHSA-J79J-CX3H-G27H).

CVE-2020-35882

CVE-2020-35882 (rocket crate, Rust) : The issue affects the rocket crate prior to 0.4.5. LocalRequest::clone reuses the inner Request pointer and creates more than one mutable reference to the same object, which can lead to a data race in certain API usage. Public sources consistently describe th...

CVE-2020-35883

CVE-2020-35883 affects the Rust crate mozwire (through 2020-08-18). A directory traversal flaw in a parameter used to form local file paths allows overwriting files ending in .conf. Root cause: improper sanitization of user-controlled path data, enabling traversal via "../" sequences. Documented ...

CVE-2020-35884

CVE-2020-35884 affects the Rust tiny_http crate (through 2020-06-16). The issue enables HTTP Request smuggling via a malformed Transfer-Encoding header, as described in the CVE entry. The vulnerability is associated with partial confidentiality and partial integrity impact (per NVD CVSS metrics)....

CVE-2020-35884

An issue was discovered in the tinyhttp crate through 2020-06-16 for Rust. HTTP Request smuggling can occur via a malformed Transfer-Encoding header...

CVE-2020-35885

The CVE-2020-35885 issue affects the Rust alpm-rs crate, where StrcCtx deallocates a memory region it does not own. This memory-safety flaw can lead to double-free or use-after-free conditions, as documented by associated advisories (e.g., RUSTSEC-2020-0032 and GHSA entries) and related OSV/NVD r...

CVE-2020-35885

An issue was discovered in the alpm-rs crate through 2020-08-20 for Rust. StrcCtx performs improper memory deallocation...

CVE-2020-35886

An issue was discovered in the arr crate through 2020-08-25 for Rust. An attacker can smuggle non-Sync/Send types across a thread boundary to cause a data race...

CVE-2020-35886

The CVE-2020-35886 issue concerns the arr crate (Rust) up to 2020-08-25. It describes a data race caused by smuggling non-Sync/Send types across a thread boundary, due to incorrect Sync/Send bounds. The connected records (NVD/NVD mirrors, Red Hat OSV/GHSA advisories, OSVGHSA entries) consistently...

CVE-2020-35887

An issue was discovered in the arr crate through 2020-08-25 for Rust. There is a buffer overflow in Index and IndexMut...

CVE-2020-35887

CVE-2020-35887 affects the Rust arr crate, with a buffer overflow in Index and IndexMut reported through 2020-08-25. The available documents identify the vulnerable code paths in arr’s Index/IndexMut implementations but do not specify affected versions, patches, or mitigations. Other sources desc...

CVE-2020-35888

An issue was discovered in the arr crate through 2020-08-25 for Rust. Uninitialized memory is dropped by Array::newfromtemplate...

CVE-2020-35888

The CVE-2020-35888 entry refers to the Rust arr crate (through 2020-08-25) with a bug where uninitialized memory is dropped by Array::new_from_template. NVD lists high severity (CVSSv2 7.5; CVSSv3.1 9.8) implying critical impact, network attack vector with low complexity and no authentication. Th...

CVE-2020-35889

CVE-2020-35889 affects the Rust crayon crate. The issue is a time-of-check to time-of-use (TOCTOU) memory-safety vulnerability in the HandleLike handling (ObjectPool/HandlePool) that can enable memory-safety violations. Root cause is a misbehaving HandleLike implementation, documented in the RUST...

CVE-2020-35889

An issue was discovered in the crayon crate through 2020-08-31 for Rust. A TOCTOU issue has a resultant memory safety violation via HandleLike...

CVE-2020-35890

The CVE-2020-35890 entry concerns the ordnung crate for Rust, where compact::Vec may violate memory safety via out-of-bounds access when handling large capacity. Related advisories describe additional memory-safety issues, including a remove() path that can double-free and out-of-bounds reads. Pu...

CVE-2020-35891

CVE-2020-35891 concerns the Rust crate ordnung (up to version 0.0.1) where the type compact::Vec can violate memory safety due to a double-free during an emulated remove() operation. The issue is explicitly described as a memory-safety problem in compact::Vec, including a double-free scenario whe...

CVE-2020-35891

An issue was discovered in the ordnung crate through 2020-09-03 for Rust. compact::Vec violates memory safety via a remove double free...

CVE-2020-35892

CVE-2020-35892 : In Rust crate simple-slab , versions before 0.3.3 contain an out-of-bounds read in the index() function. The issue is corroborated by multiple sources (NVD, RH, GHSA/OSV) and is rated CRITICAL (CVSS3.1 base score 9.1; network interaction, no privileges required). The connected do...