5 matches found
Linux Distros Unpatched Vulnerability : CVE-2019-25001
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the serdecbor crate before 0.10.2 for Rust. The CBOR deserializer can cause stack consumption via nested semantic tags. CVE-2019-2500...
CVE-2019-25001
An issue was discovered in the serdecbor crate before 0.10.2 for Rust. The CBOR deserializer can cause stack consumption via nested semantic tags...
PT-2021-28384
Name of the Vulnerable Software and Affected Versions: serde cbor affected versions not specified Description: The serde cbor crate is unmaintained, and its GitHub repository has been archived by the author. The author suggests using alternative crates, such as ciborium and minicbor...
Rust 缓冲区错误漏洞
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A buffer overflow vulnerability exists in Rust serdecbor crate versions prior to 0.10.2, which stems from the fact that the CBOR deserializer may cause stack consumption via nested semantic tags. No detailed...
PT-2019-16418
Name of the Vulnerable Software and Affected Versions serde cbor crate versions prior to 0.10.2 Description An issue in the CBOR deserializer can cause stack consumption via nested semantic tags, allowing an attacker to craft small CBOR documents that cause a stack overflow. The flaw was correcte...