CVE-2018-20996

The CVE-2018-20996 issue affects the Rust crossbeam crate prior to 0.4.1, where a destructor mishandling leads to a double free. Affected component: crossbeam crate (Rust) before 0.4.1. Root cause: explicit double free due to destructor handling in the drop path. Impact stated in sources: high/cr...

CVE-2018-20996

An issue was discovered in the crossbeam crate before 0.4.1 for Rust. There is a double free because of destructor mishandling...

CVE-2018-20997

CVE-2018-20997 affects the openssl crate for Rust prior to 0.10.9, describing a use-after-free in CMS Signing. The provided documents do not include patch versions, mitigations, or explicit exploitation details; severity is cited as high/critical in external references (e.g., CVSS), but no exploi...

CVE-2018-20997

An issue was discovered in the openssl crate before 0.10.9 for Rust. A use-after-free occurs in CMS Signing...

CVE-2018-20998

An issue was discovered in the arrayfire crate before 3.6.0 for Rust. Addition of the repr attribute to an enum is mishandled, leading to memory corruption...

CVE-2018-20998

The CVE-2018-20998 issue affects the arrayfire crate for Rust prior to 3.6.0, where adding repr() to an enum is mishandled and can cause memory corruption. Multiple sources confirm the root cause is the repr() attribute interaction with C-FFI, leading to memory corruption on certain toolchains/Ru...

CVE-2019-15542

An issue in the ammonia crate for Rust (before 2.1.0) causes uncontrolled recursion during HTML DOM tree serialization in the affected component. The documents provide the vulnerability description but do not specify exploit vectors, practical impact beyond potential recursion, or concrete remedi...

CVE-2019-15542

An issue was discovered in the ammonia crate before 2.1.0 for Rust. There is uncontrolled recursion during HTML DOM tree serialization...

CVE-2019-15542

An issue was discovered in the ammonia crate before 2.1.0 for Rust. There is uncontrolled recursion during HTML DOM tree serialization...

CVE-2019-15543

An issue was discovered in the slice-deque crate before 0.2.0 for Rust. There is memory corruption in certain allocation cases...

CVE-2019-15543

CVE-2019-15543 refers to a memory corruption issue in the Rust slice-deque crate prior to 0.2.0. The vulnerability occurs in certain allocation patterns where mem::size_of::() % allocation_granularity() != 0 can cause memory corruption as elements are moved, enabling reading bytes from adjacent e...

CVE-2019-15544

The CVE-2019-15544 issue affects the protobuf crate for Rust (pre-2.6.0). The vulnerability arises from Vec::reserve being fed by user-supplied input, enabling memory exhaustion. Documented impact: Out-of-Memory conditions, potentially affecting affected Rust crates that rely on this protobuf imp...

CVE-2019-15544

An issue was discovered in the protobuf crate before 2.6.0 for Rust. Attackers can exhaust all memory via Vec::reserve calls...

CVE-2019-15545

CVE-2019-15545 affects the libp2p-core crate before 0.8.1 for Rust. The root cause is improper verification of ed25519 signatures, where any signature with a correct length could be treated as valid, allowing an attacker to impersonate any node identity. The vulnerability has multiple publicly li...

CVE-2019-15546

CVE-2019-15546 affects the Rust pancurses crate up to version 0.16.1. The issue resides in printw and mvprintw format handling, where a Rust &str is passed to C, enabling a format-string attack. This can potentially allow writing to stack memory. Publicly documented advisories (RustSEC/RUSTSEC-20...

CVE-2019-15547

The CVE-2019-15547 entry concerns the ncurses crate for Rust, affected up to version 5.99.0. The root cause is improper handling of C format arguments in the printw family of functions, leading to format string issues. The provided documents describe the vulnerability's presence but do not specif...

CVE-2019-15547

An issue was discovered in the ncurses crate through 5.99.0 for Rust. There are format string issues in printw functions because C format arguments are mishandled...

CVE-2019-15547

Removed by vendor...

CVE-2019-15548

An issue was discovered in the ncurses crate through 5.99.0 for Rust. There are instr and mvwinstr buffer overflows because interaction with C functions is mishandled...

CVE-2019-15548

The CVE-2019-15548 issue affects the ncurses crate for Rust (up to version 5.99.0). The vulnerability arises from buffer overflows in instr and mvwinstr when interacting with C functions, caused by mishandling between Rust and C boundaries. Impact is described as potential buffer/heap overflow; C...