Lucene search
+L

710 matches found

CVE
CVE
•added 2020/09/19 8:58 p.m.•99 views

CVE-2020-25796

The CVE-2020-25796 entry concerns the sized-chunks crate for Rust (up to version 0.6.2). Affected component: InlineArray/Chunk implementations that may generate unaligned references for types with large alignment requirements, exposing memory-safety risks. Additional issues reported: array size i...

7.5CVSS7.3AI score0.01666EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/19 12:00 a.m.•5 views

CVE-2020-25796: Improper Validation of Array Index

An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the InlineArray implementation, an unaligned reference may be generated for a type that has a large alignment requirement...

7.5CVSS5.8AI score0.01666EPSS
SaveExploits1References2
RustSec
RustSec
•added 2020/09/06 12:00 p.m.•58 views

Multiple soundness issues in Chunk and InlineArray

Chunk: Array size is not checked when constructed with unit and pair. Array size is not checked when constructed with From. Clone and insertfrom are not panic-safe; A panicking iterator causes memory safety issues with them. InlineArray: Generates unaligned references for types with a large...

7.5CVSS2.3AI score0.02897EPSS
SaveExploits6Affected Software1
osv-rustsec
osv-rustsec
•added 2020/09/06 12:00 p.m.•41 views

RUSTSEC-2020-0041 Multiple soundness issues in Chunk and InlineArray

Chunk: Array size is not checked when constructed with unit and pair. Array size is not checked when constructed with From. Clone and insertfrom are not panic-safe; A panicking iterator causes memory safety issues with them. InlineArray: Generates unaligned references for types with a large...

7.5CVSS7.7AI score0.02897EPSS
SaveExploits6References3
Positive Technologies
Positive Technologies
•added 2020/09/06 12:00 a.m.•24 views

PT-2020-16211

Name of the Vulnerable Software and Affected Versions sized-chunks crate versions through 0.6.2 Description An issue was discovered in the sized-chunks crate, where the array size is not checked when constructed with unit, pair, or From in the Chunk implementation. Additionally, the Clone and...

7.5CVSS7AI score0.02897EPSS
SaveExploits6References31
Positive Technologies
Positive Technologies
•added 2020/09/06 12:00 a.m.•20 views

PT-2020-16214

Name of the Vulnerable Software and Affected Versions sized-chunks crate versions through 0.6.2 Description An issue was discovered in the sized-chunks crate, where the Chunk implementation has memory-safety issues. Specifically, the array size is not checked when constructed with unit, pair, or...

7.5CVSS7.1AI score0.02897EPSS
SaveExploits6References31
RustSec
RustSec
•added 2020/09/03 12:00 p.m.•40 views

Obstack generates unaligned references

Obstack generates unaligned references for types that require a large alignment...

7.5CVSS2.3AI score0.01174EPSS
SaveExploits0Affected Software1
OSV
OSV
•added 2020/09/03 12:00 p.m.•50 views

RUSTSEC-2020-0040 Obstack generates unaligned references

Obstack generates unaligned references for types that require a large alignment...

7.5CVSS7.5AI score0.01174EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2020/09/03 12:00 a.m.•8 views

PT-2020-17526

Name of the Vulnerable Software and Affected Versions obstack crate versions prior to 0.1.4 Description The issue is related to the obstack crate generating unaligned references for types that require a large alignment. This can lead to problems when these references are used, potentially causing...

7.5CVSS0.01174EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2020/08/25 12:00 a.m.•6 views

PT-2020-17612

Name of the Vulnerable Software and Affected Versions chunky crate through 2020-08-25 Description The issue concerns the Chunk API not honoring an alignment requirement, which can lead to the creation of unaligned references. This results in undefined behavior. Recommendations For versions of the...

7.5CVSS0.00915EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
•added 2020/08/10 12:00 a.m.•42 views

SUSE SLES12 Security Update : LibVNCServer (SUSE-SU-2020:2167-1)

This update for LibVNCServer fixes the following issues : security update fix CVE-2018-21247 bsc1173874, uninitialized memory contents are vulnerable to Information leak fix CVE-2019-20839 bsc1173875, buffer overflow in ConnectClientToUnixSock fix CVE-2019-20840 bsc1173876, unaligned accesses in...

9.8CVSS6.9AI score0.03589EPSS
SaveExploits0References35
RedhatCVE
RedhatCVE
•added 2020/06/23 6:55 a.m.•40 views

CVE-2019-20840

An issue was discovered in LibVNCServer before 0.9.13. libvncserver/wsdecode.c can lead to a crash because of unaligned accesses in hybiReadAndDecode...

5CVSS1.9AI score0.02615EPSS
SaveExploits0References3
OSV
OSV
•added 2020/06/17 4:15 p.m.•39 views

CVE-2019-20840

An issue was discovered in LibVNCServer before 0.9.13. libvncserver/wsdecode.c can lead to a crash because of unaligned accesses in hybiReadAndDecode...

7.5CVSS6.5AI score
SaveExploits0References8
osv-debian
osv-debian
•added 2020/06/17 4:15 p.m.•10 views

DEBIAN-CVE-2019-20840

An issue was discovered in LibVNCServer before 0.9.13. libvncserver/wsdecode.c can lead to a crash because of unaligned accesses in hybiReadAndDecode...

7.5CVSS7.6AI score0.02615EPSS
SaveExploits0References1
NVD
NVD
•added 2020/06/17 4:15 p.m.•30 views

CVE-2019-20840

An issue was discovered in LibVNCServer before 0.9.13. libvncserver/wsdecode.c can lead to a crash because of unaligned accesses in hybiReadAndDecode...

7.5CVSS0.02615EPSS
SaveExploits0References8
OSV
OSV
•added 2020/06/17 4:15 p.m.•12 views

UBUNTU-CVE-2019-20840

An issue was discovered in LibVNCServer before 0.9.13. libvncserver/wsdecode.c can lead to a crash because of unaligned accesses in hybiReadAndDecode...

7.5CVSS7.1AI score0.02615EPSS
SaveExploits0References4
Prion
Prion
•added 2020/06/17 4:15 p.m.•32 views

Code injection

An issue was discovered in LibVNCServer before 0.9.13. libvncserver/wsdecode.c can lead to a crash because of unaligned accesses in hybiReadAndDecode...

5CVSS7.3AI score0.02615EPSS
SaveExploits0References8Affected Software10
Mend
Mend
•added 2020/06/17 3:11 p.m.•5 views

CVE-2019-20840

An issue was discovered in LibVNCServer before 0.9.13. libvncserver/wsdecode.c can lead to a crash because of unaligned accesses in hybiReadAndDecode...

8.7CVSS0.02615EPSS
SaveExploits0References12
Debian CVE
Debian CVE
•added 2020/06/17 3:11 p.m.•62 views

CVE-2019-20840

An issue was discovered in LibVNCServer before 0.9.13. libvncserver/wsdecode.c can lead to a crash because of unaligned accesses in hybiReadAndDecode...

7.5CVSS7.5AI score0.02615EPSS
SaveExploits0
CVE
CVE
•added 2020/06/17 3:11 p.m.•233 views

CVE-2019-20840

CVE-2019-20840 concerns LibVNCServer prior to 0.9.13. The issue in libvncserver/ws_decode.c causes a crash from unaligned accesses in hybiReadAndDecode, with multiple advisories and patches documenting the fix in LibVNCServer-0.9.13+ (and related vendor advisories). The practical impact is crash/...

7.5CVSS7.2AI score0.02615EPSS
SaveExploits0References8Affected Software1
Rows per page
Query Builder