Fedora 38 : rust-h2 (2024-c5b42e6462)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-c5b42e6462 advisory. Update to version 0.3.26. Addresses RUSTSEC-2024-0332. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

a2 (>=0.2.0, <=0.5.3), abacuz (>=0.1.0, <=0.1.1) +4569 more potentially affected by unknown CVE via h2 (>=0.1.26, <=0.3.21)

h2 CARGO version =0.1.26, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.0.7-alpha.1, =0.0.7-alpha.3, =0.1.0, =1.0.0, =0.1.0, =0.9.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0332...

RUSTSEC-2024-0441 Panic when using a dropped extenref-typed element segment

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-75hq-h6g9-h4q5. For more information see the GitHub-hosted security advisory...

Amazon Linux 2023 : aws-nitro-enclaves-cli, aws-nitro-enclaves-cli-devel, aws-nitro-enclaves-cli-integration-tests (ALAS2023-2024-575)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-575 advisory. RUSTSEC-2024-0006 NOTE: https://rustsec.org/advisories/RUSTSEC-2024-0006.html NOTE: https://github.com/comex/rust-shlex/security/advisories/GHSA-r7qv-8r2h-pg27 Tenable has extracted the preceding...

Amazon Linux 2023 : cargo, clippy, rust (ALAS2023-2024-574)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-574 advisory. RUSTSEC-2024-0006 NOTE: https://rustsec.org/advisories/RUSTSEC-2024-0006.html NOTE: https://github.com/comex/rust-shlex/security/advisories/GHSA-r7qv-8r2h-pg27 Tenable has extracted the preceding...

Amazon Linux 2 : aws-nitro-enclaves-cli (ALASNITRO-ENCLAVES-2024-039)

The version of aws-nitro-enclaves-cli installed on the remote host is prior to 1.2.3-0. It is, therefore, affected by a vulnerability as referenced in the ALAS2NITRO-ENCLAVES-2024-039 advisory. RUSTSEC-2024-0006 NOTE: https://rustsec.org/advisories/RUSTSEC-2024-0006.html NOTE:...

aide (>=0.1.0, <=0.4.3), bpxe (>=0.1.0, <=0.1.2) +66 more potentially affected by unknown CVE via linkme (>=0.1.6, <=0.2.10)

linkme CARGO version =0.1.6, =0.1.0, =0.1.0, =0.1.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.2-alpha, =0.0.2-alpha, =0.0.4-alpha and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0407...

GHSA-R8W9-5WCG-VFJ7 Mio's tokens for named pipes may be delivered after deregistration

Impact When using named pipes on Windows, mio will under some circumstances return invalid tokens that correspond to named pipes that have already been deregistered from the mio registry. The impact of this vulnerability depends on how mio is used. For some applications, invalid tokens may be...

aaa (>=0.1.0, <=1.1.1), abbegm (0.5.0) +1499 more potentially affected by CVE-2024-27308 via mio (>=0.7.14, <=0.8.8)

mio CARGO version =0.7.14, =0.1.0, =2.0.0-beta.1, =0.9.0, =0.9.0, =0.1.0, =0.1.0, =1.0.9, =1.0.11 - aminograph 0.0.1 and more Source cves: CVE-2024-27308 Source advisory: OSV:RUSTSEC-2024-0019...

aipster (>=1.0.0, <=2.0.0), aki-image-view-gtk (>=0.2.0, <=0.2.10) +304 more potentially affected by unknown CVE via gtk (>=0.0.7, <=0.18.2)

gtk CARGO version =0.0.7, =1.0.0, =0.2.0, =0.1.0, =0.1.2, =0.2.0-alpha, =0.21.0, =0.1.0, =0.1.0, =0.1.0, =0.1.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0415...

aipster (>=1.0.0, <=2.0.0), aki-image-view-gtk (>=0.2.0, <=0.2.10) +388 more potentially affected by unknown CVE via gtk-sys (>=0.3.4, <=0.18.2)

gtk-sys CARGO version =0.3.4, =1.0.0, =0.2.0, =0.1.0, =0.0.1, =0.1.2, =0.2.0-alpha, =0.21.0, =0.30.1 - avr-vm 0.1.0 - awl 0.0.1 - bare-metrics-gui 0.1.0 - battery-savior 0.1.0 - bbfpromix 0.1.0 - beemovie-gui 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0420...

ashpd (>=0.2.0-alpha, <=0.4.0) potentially affected by unknown CVE via gdkx11 (>=0.14.0, <=0.17.0)

gdkx11 CARGO version =0.14.0, =0.2.0-alpha, =0.4.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0417...

ashpd (>=0.2.0-alpha, <=0.4.0), bevy_dioxus (>=0.1.0, <=0.1.1) +62 more potentially affected by unknown CVE via gdkx11-sys (>=0.10.0, <=0.18.2)

gdkx11-sys CARGO version =0.10.0, =0.2.0-alpha, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.2.0, =1.0.0, =0.3.0, =0.1.0, =0.1.0, =0.2.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0414...

ashpd (>=0.2.0-beta-1, <=0.4.0) potentially affected by unknown CVE via gdkwayland (>=0.15.5, <=0.17.0)

gdkwayland CARGO version =0.15.5, =0.2.0-beta-1, =0.4.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0410...

emulsion (>=6.0.0, <=10.0.0), libavif-sys (>=0.8.0, <=0.15.0) +1 more potentially affected by unknown CVE via libdav1d-sys (>=0.2.0, <=0.6.0)

libdav1d-sys CARGO version =0.2.0, =6.0.0, =0.8.0, =0.9.4, =0.10.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0016...

a-gpt (>=0.1.0, <=0.4.0), abacuz (0.1.1) +1149 more potentially affected by CVE-2024-24575 +1 more via libgit2-sys (>=0.1.13, <=0.15.2+1.6.4)

libgit2-sys CARGO version =0.1.13, =0.1.0, =1.1.0, =0.0.1, =0.3.0, =1.0.0, =0.1.0, =0.1.0, =0.3.3 and more Source cves: CVE-2024-24575, CVE-2024-24577 Source advisory: OSV:RUSTSEC-2024-0013...

chimper (>=0.3.0, <=0.4.0), conrod_example_shared (>=0.62.0, <=0.76.1) +26 more potentially affected by unknown CVE via conrod_core (>=0.62.0, <=0.76.1)

conrodcore CARGO version =0.62.0, =0.3.0, =0.62.0, =0.0.1, =0.67.0, =0.62.0, =0.71.0, =0.1.0, =0.1.0, =0.62.0, =0.69.0, =0.62.0, =0.2.1, =0.1.0, =0.24.0, =0.1.0-docfix, =0.25.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0396...

carpo (>=0.1.2, <=0.1.3) potentially affected by unknown CVE via conrod (0.61.1)

conrod CARGO version 0.61.1 is affected by a known vulnerability. The following packages have a transitive dependency on conrod and may be impacted: - carpo =0.1.2, =0.1.3 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0397...

lillinput (>=0.2.1, <=0.3.0), lillinput-cli (0.3.0) potentially affected by CVE-2024-58266 via shlex (1.1.0)

shlex CARGO version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on shlex and may be impacted: - lillinput =0.2.1, =0.3.0 - lillinput-cli 0.3.0 Source cves: CVE-2024-58266 Source advisory: OSV:RUSTSEC-2024-0006...

crabsay (>=0.1.0, <=0.1.1), craterfinder (>=0.1.0, <=0.1.1) +11 more potentially affected by unknown CVE via ferris-says (0.2.1)

ferris-says CARGO version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on ferris-says and may be impacted: - crabsay =0.1.0, =0.1.0, =0.1.0, =0.1.1 - rs-lean 0.1.0 - rust-study 0.1.0 - rustbyexample 0.2.0 - rusty-grep 0.1.0 - rusty-redis 0.1.0...