59 matches found
Queue<T> should have a Send bound on its Send/Sync traits
Affected versions of this crate unconditionally implements Send/Sync for Queue. This allows 1 creating data races to a T: !Sync and 2 sending T: !Send to other threads, resulting in memory corruption or other undefined behavior...
PT-2020-17587
Name of the Vulnerable Software and Affected Versions hashconsing versions prior to 1.1.0 Description The issue arises from the hashconsing crate's implementation of Send and Sync traits for its HConsed type without proper restrictions. This allows non-Sync types, such as Cell, to be shared acros...
RUSTSEC-2020-0070 Some lock_api lock guard objects can cause data races
Affected versions of lockapi had unsound implementations of the Send or Sync traits for some guard objects, namely: MappedMutexGuard MappedRwLockReadGuard MappedRwLockWriteGuard RwLockReadGuard RwLockWriteGuard These guards could allow data races through types that are not safe to Send across...
crate has been renamed to `cipher`
This crate has been renamed from stream-cipher to cipher. The new repository location is at:...
OSV-2020-1645 Use-of-uninitialized-value in std::__1::char_traits<char>::length
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25076 Crash type: Use-of-uninitialized-value Crash state: std::1::chartraits::length std::1::basicstring, std::1::allocatorch Magick::formatExceptionMessage...
crate has been renamed to `block-cipher`
This crate has been renamed from block-cipher-trait to block-cipher. The new repository location is at:...
`array!` macro is unsound in presence of traits that implement methods it calls internally
Affected versions of this crate called some methods using auto-ref. The affected code looked like this. rust let mut arr = $crate::core::mem::MaybeUninit::uninit; let mut vec = $crate::ArrayVec::::newarr.asmutptr as mut T; In this case, the problem is that asmutptr is a method of &mut MaybeUninit...
RUSTSEC-2020-0161 `array!` macro is unsound in presence of traits that implement methods it calls internally
Affected versions of this crate called some methods using auto-ref. The affected code looked like this. rust let mut arr = $crate::core::mem::MaybeUninit::uninit; let mut vec = $crate::ArrayVec::::newarr.asmutptr as mut T; In this case, the problem is that asmutptr is a method of &mut MaybeUninit...
CVE-2018-1999009: Exposure of Sensitive Information to an Unauthorized Actor
October CMS version prior to Build 437 contains a Local File Inclusion vulnerability in modules/system/traits/ViewMaker.php244 makeFileContents function that can result in Sensitive information disclosure and remote code execution. This attack appear to be exploitable remotely if the /backend pat...
Adobe Flash - Invoke Accesses Trait Out-of-Bounds
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1320 The attached fuzzed swf file causes the traits of an ActionScript object to be accessed out of bounds. This can probably lead to exploitable type confusion. Proof of Concept:...
dlplibs: Index-out-of-bounds in boost::spirit::traits::pow10_helper<double, void>::call
Detailed report: https://oss-fuzz.com/testcase?key=4891413823094784 Project: dlplibs Fuzzer: libFuzzerdlplibsvdxfuzzer Fuzz target binary: vdxfuzzer Job Type: libfuzzerubsandlplibs Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...
dlplibs: Global-buffer-overflow in boost::spirit::traits::pow10_helper<double, void>::call
Detailed report: https://oss-fuzz.com/testcase?key=5309012033667072 Project: dlplibs Fuzzer: afldlplibsvsdxfuzzer Fuzz target binary: vsdxfuzzer Job Type: aflasandlplibs Platform Id: linux Crash Type: Global-buffer-overflow READ 8 Crash Address: 0x0000009b69c8 Crash State:...
llvm_libcxxabi: Negative-size-param in std::__1::char_traits<char>::copy
Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=6519608255184896 Project: llvmlibcxxabi Fuzzer: aflllvmlibcxxabicxademanglefuzzer Fuzz target binary: cxademanglefuzzer Job Type: aflasanllvmlibcxxabi Platform Id: linux Crash Type:...
Phan - Static Analyzer For PHP
Phan is a static analyzer for PHP. Getting it running Phan requires PHP 7+ with the php-ast extension loaded. The code you analyze can be written for any version of PHP. To get phan running; 1. Clone the repo 2. Run composer install to load dependencies 3. Run ./test to run the test suite 4. Test...
PT-2013-2189
Name of the Vulnerable Software and Affected Versions Boost versions 1.48 through 1.52 Description The issue is related to the boost::locale::utf::utf traits in the Boost.Locale library, which fails to properly detect certain invalid UTF-8 sequences. This could potentially allow remote attackers ...
Mozilla: Heap memory corruption issues found using Address Sanitizer (MFSA 2012-86)
Buffer overflow in the nsCharTraits::length function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service heap memory...
GFI SandBox - Powerful automated malware analysis
GFI SandBox - Powerful automated malware analysis GFI SandBox™ formerly CWSandbox is an industry leading dynamic malware analysis tool. It gives you the power to analyze virtually any Windows application or file including infected: Office documents, PDFs, malicious URLs, Flash ads and custom...
GFI SandBox - Powerful automated malware analysis
GFI SandBox - Powerful automated malware analysis GFI SandBox™ formerly CWSandbox is an industry leading dynamic malware analysis tool. It gives you the power to analyze virtually any Windows application or file including infected: Office documents, PDFs, malicious URLs, Flash ads and custom...
