Lucene search
K

186 matches found

UbuntuCve
UbuntuCve
added 2022/08/16 9:15 p.m.32 views

CVE-2022-35481

OTFCC v0.10.4 was discovered to contain a segmentation violation via /multiarch/memmove-vec-unaligned-erms.S...

6.5CVSS6.6AI score0.00739EPSS
Exploits1References2
Cvelist
Cvelist
added 2022/08/16 8:13 p.m.17 views

CVE-2022-35481

OTFCC v0.10.4 was discovered to contain a segmentation violation via /multiarch/memmove-vec-unaligned-erms.S...

6.7AI score0.00739EPSS
Exploits1References1
Debian CVE
Debian CVE
added 2022/08/16 8:13 p.m.36 views

CVE-2022-35481

OTFCC v0.10.4 was discovered to contain a segmentation violation via /multiarch/memmove-vec-unaligned-erms.S...

6.5CVSS6.5AI score0.00739EPSS
Exploits1
CVE
CVE
added 2022/08/16 8:12 p.m.46 views

CVE-2022-35101

CVE-2022-35101 concerns SWFTools. The vulnerability arises from a segmentation fault in the internal sequence /multiarch/memset-vec-unaligned-erms.S within SWFTools commit 772e55a2. Affected item is the SWFTools package (specific versions not enumerated in provided docs). Impact details from CVSS...

5.5CVSS5.5AI score0.00284EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2022/08/16 8:12 p.m.24 views

CVE-2022-35101

SWFTools commit 772e55a2 was discovered to contain a segmentation violation via /multiarch/memset-vec-unaligned-erms.S...

5.8AI score0.00284EPSS
Exploits1References1
CNNVD
CNNVD
added 2022/08/16 12:0 a.m.2 views

SWFTools 缓冲区错误漏洞

SWFTools is a set of utilities for working with Adobe Flash files SWF files from the individual developer Matthias Kramm. A security vulnerability exists in SWFTools that stems from a segmentation violation in /multiarch/memset-vec-unaligned-erms...

5.5CVSS5.7AI score0.00284EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2022/07/26 12:0 a.m.1 views

PT-2022-6623

Name of the Vulnerable Software and Affected Versions Trend Micro Apex Central on-premise affected versions not specified Description The issue allows authenticated users to perform a SQL injection, potentially leading to remote code execution. An attacker must first obtain authentication on the...

9CVSS9.3AI score0.01721EPSS
Exploits0References14
Github Security Blog
Github Security Blog
added 2022/06/17 12:27 a.m.11 views

vec-const attempts to construct a Vec from a pointer to a const slice

Affected versions of this crate claimed to construct a const Vec with nonzero length and capacity, but that cannot be done because such a Vec requires a pointer from an allocator. The implementation was later changed to just construct a std::borrow::Cow...

3.7AI score
Exploits0References3Affected Software1
OSV
OSV
added 2022/06/17 12:27 a.m.29 views

GHSA-JMWX-R3GQ-QQ3P vec-const attempts to construct a Vec from a pointer to a const slice

Affected versions of this crate claimed to construct a const Vec with nonzero length and capacity, but that cannot be done because such a Vec requires a pointer from an allocator. The implementation was later changed to just construct a std::borrow::Cow...

7.5CVSS7.3AI score0.01053EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2022/05/24 5:41 p.m.14 views

insert_slice_clone can double drop if Clone panics.

Affected versions of this crate used ptr::copy when inserting into the middle of a Vec. When ownership was temporarily duplicated during this copy, it calls the clone method of a user provided element. This issue can result in an element being double-freed if the clone call panics. Commit 20cb73d...

5.3CVSS5.4AI score0.01359EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2022/05/24 5:41 p.m.10 views

GHSA-68P4-PJPF-XWCQ insert_slice_clone can double drop if Clone panics.

Affected versions of this crate used ptr::copy when inserting into the middle of a Vec. When ownership was temporarily duplicated during this copy, it calls the clone method of a user provided element. This issue can result in an element being double-freed if the clone call panics. Commit 20cb73d...

5.3CVSS5AI score0.01359EPSS
Exploits1References5
Github Security Blog
Github Security Blog
added 2022/04/22 8:23 p.m.15 views

Dep Group Remote Memory Exhaustion (Denial of Service) in ckb

Impact A remote attacker could exploit this vulnerability to exhaust ckb process memory of an affected node. Patches Upgrade to 0.43.1 or later. References After resolving the outpoints of one dep group, we put the corresponding content into a vec...

1AI score
Exploits0References3Affected Software1
OSV
OSV
added 2022/01/14 12:0 p.m.12 views

RUSTSEC-2022-0078 Use-after-free due to a lifetime error in `Vec::into_iter()`

In affected versions of this crate, the lifetime of the iterator produced by Vec::intoiter is not constrained to the lifetime of the Bump that allocated the vector's memory. Using the iterator after the Bump is dropped causes use-after-free accesses. The following example demonstrates memory...

7.3AI score
Exploits0References3
RustSec
RustSec
added 2022/01/14 12:0 p.m.12 views

Use-after-free due to a lifetime error in `Vec::into_iter()`

In affected versions of this crate, the lifetime of the iterator produced by Vec::intoiter is not constrained to the lifetime of the Bump that allocated the vector's memory. Using the iterator after the Bump is dropped causes use-after-free accesses. The following example demonstrates memory...

2.8AI score
Exploits0Affected Software1
Github Security Blog
Github Security Blog
added 2022/01/06 10:15 p.m.28 views

Out-of-bounds Write in vec-const

An issue was discovered in the vec-const crate before 2.0.0 for Rust. It tries to construct a Vec from a pointer to a const slice, leading to memory corruption...

7.5CVSS2.5AI score0.01053EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2022/01/06 10:15 p.m.17 views

GHSA-X76R-966H-5QV9 Out-of-bounds Write in vec-const

An issue was discovered in the vec-const crate before 2.0.0 for Rust. It tries to construct a Vec from a pointer to a const slice, leading to memory corruption...

7.5CVSS7.3AI score0.01053EPSS
Exploits0References5
CNVD
CNVD
added 2021/12/28 12:0 a.m.14 views

Rust vec-const crate memory corruption vulnerability

Rust vec-const crate is a program written in the Rust language with specific functionality. security vulnerabilities exist in versions of Rust vec-const crate prior to 2.0.0, which can be exploited by attackers to cause memory corruption...

7.5CVSS4.5AI score0.01053EPSS
Exploits0References1
OSV
OSV
added 2021/12/27 12:15 a.m.2 views

CVE-2021-45680

An issue was discovered in the vec-const crate before 2.0.0 for Rust. It tries to construct a Vec from a pointer to a const slice, leading to memory corruption...

7.5CVSS5.8AI score0.01053EPSS
Exploits0References2
Prion
Prion
added 2021/12/27 12:15 a.m.10 views

Memory corruption

An issue was discovered in the vec-const crate before 2.0.0 for Rust. It tries to construct a Vec from a pointer to a const slice, leading to memory corruption...

5CVSS7.4AI score0.01053EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2021/12/27 12:0 a.m.1 views

Rust vec-const crate 缓冲区错误漏洞

Rust vec-const crate is a program written in the Rust language with specific functionality. security vulnerabilities exist in versions of Rust vec-const crate prior to 2.0.0, which can be exploited by attackers to cause memory corruption...

7.5CVSS5.6AI score0.01053EPSS
Exploits0References3
Rows per page
Query Builder