Lucene search
+L

277 matches found

Github Security Blog
Github Security Blog
•added 2021/08/25 8:57 p.m.•73 views

Memory corruption in array-tools

An issue was discovered in the array-tools crate before 0.3.2 for Rust. Affected versions of this crate don't guard against panics, so that partially uninitialized buffer is dropped when user-provided T::clone panics in FixedCapacityDequeLike::clone. This causes memory corruption...

9.8CVSS9AI score0.01119EPSS
SaveExploits0References5Affected Software1
Github Security Blog
Github Security Blog
•added 2021/08/25 8:53 p.m.•26 views

Use of Uninitialized Resource in ms3d

Affected versions of this crate passes an uninitialized buffer to a user-provided Read implementation. Arbitrary Read implementations can read from the uninitialized buffer memory exposure and also can return incorrect number of bytes written to the buffer. Reading from uninitialized memory...

7.5CVSS7.2AI score0.01557EPSS
SaveExploits1References5Affected Software1
Github Security Blog
Github Security Blog
•added 2021/08/25 8:53 p.m.•52 views

Uninitialized buffer use in marc

Affected versions of this crate passes an uninitialized buffer to a user-provided Read implementation. Record::read. Arbitrary Read implementations can read from the uninitialized buffer memory exposure and also can return incorrect number of bytes written to the buffer. Reading from uninitialize...

7.5CVSS7.2AI score0.01498EPSS
SaveExploits1References5Affected Software1
OSV
OSV
•added 2021/08/25 8:53 p.m.•66 views

GHSA-3MF3-2GV9-H39J Uninitialized buffer use in marc

Affected versions of this crate passes an uninitialized buffer to a user-provided Read implementation. Record::read. Arbitrary Read implementations can read from the uninitialized buffer memory exposure and also can return incorrect number of bytes written to the buffer. Reading from uninitialize...

7.5CVSS7.3AI score0.01498EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
•added 2021/08/25 8:52 p.m.•32 views

Read on uninitialized buffer in postscript

Affected versions of this crate passes an uninitialized buffer to a user-provided Read implementation. Arbitrary Read implementations can read from the uninitialized buffer memory exposure and also can return incorrect number of bytes written to the buffer. Reading from uninitialized memory...

7.5CVSS7.2AI score0.01489EPSS
SaveExploits1References5Affected Software1
OSV
OSV
•added 2021/08/25 8:52 p.m.•86 views

GHSA-FHVC-GP6C-H2WX Read on uninitialized buffer in postscript

Affected versions of this crate passes an uninitialized buffer to a user-provided Read implementation. Arbitrary Read implementations can read from the uninitialized buffer memory exposure and also can return incorrect number of bytes written to the buffer. Reading from uninitialized memory...

7.5CVSS7.4AI score0.01489EPSS
SaveExploits1References5
OSV
OSV
•added 2021/08/08 6:15 a.m.•12 views

CVE-2020-36443

An issue was discovered in the libp2p-deflate crate before 0.27.1 for Rust. An uninitialized buffer is passed to AsyncRead::pollread, which is a user-provided trait function...

9.8CVSS6AI score0.0123EPSS
SaveExploits0References2
NVD
NVD
•added 2021/08/08 6:15 a.m.•45 views

CVE-2020-36443

An issue was discovered in the libp2p-deflate crate before 0.27.1 for Rust. An uninitialized buffer is passed to AsyncRead::pollread, which is a user-provided trait function...

9.8CVSS0.0123EPSS
SaveExploits0References2
Prion
Prion
•added 2021/08/08 6:15 a.m.•26 views

Code injection

An issue was discovered in the libp2p-deflate crate before 0.27.1 for Rust. An uninitialized buffer is passed to AsyncRead::pollread, which is a user-provided trait function...

7.5CVSS9.4AI score0.0123EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2021/08/08 5:17 a.m.•125 views

CVE-2020-36443

CVE-2020-36443 affects the libp2p-deflate crate prior to 0.27.1 for Rust. Root cause: an uninitialized buffer is passed to AsyncRead::poll_read(), invoked by a user-provided trait implementation. Impact: potential memory exposure from uninitialized memory; CVSS v3.1 base score 9.8 (CRITICAL), net...

9.8CVSS9.4AI score0.0123EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/08 12:00 a.m.•5 views

CVE-2020-36443: Use of Uninitialized Resource

An issue was discovered in the libp2p-deflate crate before 0.27.1 for Rust. An uninitialized buffer is passed to AsyncRead::pollread, which is a user-provided trait function...

9.8CVSS6AI score0.0123EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/07/01 12:00 a.m.•11 views

Huawei EulerOS: Security Advisory for cups (EulerOS-SA-2021-1996)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6AI score0.01037EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2021/05/26 12:00 a.m.•36 views

SUSE SLED15 / SLES15 Security Update : libu2f-host (SUSE-SU-2021:1755-1)

This update for libu2f-host fixes the following issues : This update ships the u2f-host package jscECO-3687 bsc1184648 Version 1.1.10 released 2019-05-15 Add new devices to udev rules. Fix a potentially uninitialized buffer CVE-2019-9578, bsc1128140 Version 1.1.9 released 2019-03-06 Fix CID copyi...

7.5CVSS6.6AI score0.02296EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2021/04/12 12:00 a.m.•17 views

PT-2021-8005 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the mt76 dma tx queue skb raw function in the Linux kernel's mt76 component. It involves a potential DMA mapping leak due to the buf being uninitialized, which...

5.3CVSS4.8AI score0.00768EPSS
SaveExploits0References23
CNNVD
CNNVD
•added 2021/04/07 12:00 a.m.•12 views

Rust 缓冲区错误漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A buffer overflow vulnerability exists in Rust outercgi crate versions prior to 0.2.1, which originates when a user-supplied Read instance receives an uninitialized memory buffer from a KeyValueReader. No detail...

9.8CVSS5.9AI score0.011EPSS
SaveExploits0References2
OSV
OSV
•added 2021/02/17 12:00 p.m.•29 views

RUSTSEC-2021-0112 `Read` on uninitialized buffer may cause UB ('tectonic_xdv' crate)

Affected versions of this crate passes an uninitialized buffer to a user-provided Read implementation. Arbitrary Read implementations can read from the uninitialized buffer memory exposure and also can return incorrect number of bytes written to the buffer. Reading from uninitialized memory...

9.8CVSS9.4AI score0.01191EPSS
SaveExploits0References3
RustSec
RustSec
•added 2021/02/17 12:00 p.m.•39 views

`Read` on uninitialized buffer may cause UB ('tectonic_xdv' crate)

Affected versions of this crate passes an uninitialized buffer to a user-provided Read implementation. Arbitrary Read implementations can read from the uninitialized buffer memory exposure and also can return incorrect number of bytes written to the buffer. Reading from uninitialized memory...

9.8CVSS3.6AI score0.01191EPSS
SaveExploits0Affected Software1
RustSec
RustSec
•added 2021/01/30 12:00 p.m.•32 views

`Read` on uninitialized buffer may cause UB (`impl Walue for Vec<u8>`)

Affected versions of this crate passes an uninitialized buffer to a user-provided Read implementation. Arbitrary Read implementations can read from the uninitialized buffer memory exposure and also can return incorrect number of bytes written to the buffer. Reading from uninitialized memory...

7.5CVSS2.8AI score0.01489EPSS
SaveExploits1Affected Software1
OSV
OSV
•added 2021/01/26 12:00 p.m.•47 views

RUSTSEC-2021-0014 Record::read : Custom `Read` on uninitialized buffer may cause UB

Affected versions of this crate passes an uninitialized buffer to a user-provided Read implementation. Record::read Arbitrary Read implementations can read from the uninitialized buffer memory exposure and also can return incorrect number of bytes written to the buffer. Reading from uninitialized...

7.5CVSS7.4AI score0.01498EPSS
SaveExploits1References3
RustSec
RustSec
•added 2021/01/26 12:00 p.m.•25 views

`IoReader::read()`: user-provided `Read` on uninitialized buffer may cause UB

Affected versions of this crate passes an uninitialized buffer to a user-provided Read implementation. Arbitrary Read implementations can read from the uninitialized buffer memory exposure and also can return incorrect number of bytes written to the buffer. Reading from uninitialized memory...

7.5CVSS3.9AI score0.01557EPSS
SaveExploits1Affected Software1
Rows per page
Query Builder