Lucene search
K

9 matches found

Github Security Blog
Github Security Blog
added 2021/08/25 8:49 p.m.26 views

Out of bounds read in dync

VecCopy::data is created as a Vec of u8 but can be used to store and retrieve elements of different types leading to misaligned access. The issue was resolved in v0.5.0 by replacing data being stored by Vec with a custom managed pointer. Elements are now stored and retrieved using types with prop...

5.5CVSS5.4AI score0.00054EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2021/08/25 8:49 p.m.16 views

GHSA-QXJQ-V4WF-PPVH Out of bounds read in dync

VecCopy::data is created as a Vec of u8 but can be used to store and retrieve elements of different types leading to misaligned access. The issue was resolved in v0.5.0 by replacing data being stored by Vec with a custom managed pointer. Elements are now stored and retrieved using types with prop...

5.5CVSS5.3AI score0.00054EPSS
Exploits1References4
OSV
OSV
added 2020/12/31 9:15 a.m.3 views

CVE-2020-35903

An issue was discovered in the dync crate before 0.5.0 for Rust. VecCopy allows misaligned element access because u8 is not always the type in question...

5.5CVSS6.1AI score0.00054EPSS
Exploits1References1
NVD
NVD
added 2020/12/31 9:15 a.m.13 views

CVE-2020-35903

An issue was discovered in the dync crate before 0.5.0 for Rust. VecCopy allows misaligned element access because u8 is not always the type in question...

5.5CVSS5.5AI score0.00054EPSS
Exploits1References1
Prion
Prion
added 2020/12/31 9:15 a.m.11 views

Design/Logic Flaw

An issue was discovered in the dync crate before 0.5.0 for Rust. VecCopy allows misaligned element access because u8 is not always the type in question...

2.1CVSS5.5AI score0.00054EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2020/12/31 8:21 a.m.170 views

CVE-2020-35903

CVE-2020-35903 affects the Rust dync crate prior to 0.5.0, where VecCopy can misalign elements because Vec may store non-u8 types. This enables misaligned access when reading/writing elements of different types. The issue is documented across multiple sources (e.g., RustSec/RUSTSEC-2020-0050 and ...

5.5CVSS5.4AI score0.00054EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2020/12/31 8:21 a.m.16 views

CVE-2020-35903

An issue was discovered in the dync crate before 0.5.0 for Rust. VecCopy allows misaligned element access because u8 is not always the type in question...

5.5AI score0.00054EPSS
Exploits1References1
OSV
OSV
added 2020/09/27 12:0 p.m.15 views

RUSTSEC-2020-0050 VecCopy allows misaligned access to elements

VecCopy::data is created as a Vec of u8 but can be used to store and retrieve elements of different types leading to misaligned access. The issue was resolved in v0.5.0 by replacing data being stored by Vec with a custom managed pointer. Elements are now stored and retrieved using types with prop...

5.5CVSS5.3AI score0.00054EPSS
Exploits1References3
RustSec
RustSec
added 2020/09/27 12:0 p.m.19 views

VecCopy allows misaligned access to elements

VecCopy::data is created as a Vec of u8 but can be used to store and retrieve elements of different types leading to misaligned access. The issue was resolved in v0.5.0 by replacing data being stored by Vec with a custom managed pointer. Elements are now stored and retrieved using types with prop...

5.5CVSS2.3AI score0.00054EPSS
Exploits1Affected Software1
Rows per page
Query Builder