CVE-2021-26958: Unchecked Return Value

An issue was discovered in the xcb crate through 2021-02-04 for Rust. It has a soundness violation because transmutation to the wrong type can happen after xcb::base::castevent uses std::mem::transmute to return a reference to an arbitrary type...

CVE-2021-26956: Undefined Security Weakness

An issue was discovered in the xcb crate through 2021-02-04 for Rust. It has a soundness violation because bytes from an X server can be interpreted as any data type returned by xcb::xproto::GetPropertyReply::value...

CVE-2021-26955: Unchecked Return Value

An issue was discovered in the xcb crate through 2021-02-04 for Rust. It has a soundness violation because xcb::xproto::GetAtomNameReply::name calls std::str::fromutf8unchecked on unvalidated bytes from an X server...

CVE-2021-26957: Out-of-bounds Read

An issue was discovered in the xcb crate through 2021-02-04 for Rust. It has a soundness violation because there is an out-of-bounds read in xcb::xproto::changeproperty, as demonstrated by a format=32 T=u8 situation where out-of-bounds bytes are sent to an X server...

Multiple soundness issues

Calls std::str::fromutf8unchecked without any checks The function xcb::xproto::GetAtomNameReply::name calls std::str::fromutf8unchecked on the raw bytes that were received from the X11 server without any validity checks. The X11 server only prevents interior null bytes, but otherwise allows any X...

RUSTSEC-2021-0019 Multiple soundness issues

Calls std::str::fromutf8unchecked without any checks The function xcb::xproto::GetAtomNameReply::name calls std::str::fromutf8unchecked on the raw bytes that were received from the X11 server without any validity checks. The X11 server only prevents interior null bytes, but otherwise allows any X...

PT-2021-17197

Name of the Vulnerable Software and Affected Versions: xcb crate versions through 2021-02-04 Description: The issue concerns a soundness violation in the xcb crate for Rust, where bytes from an X server can be interpreted as any data type returned by xcb::xproto::GetPropertyReply::value. This is...

PT-2021-17196

Name of the Vulnerable Software and Affected Versions: xcb crate versions through 2021-02-04 Description: The issue concerns a soundness violation in the xcb crate for Rust, where several functions handle data from an X server without proper validation or type constraints. Specifically,...

PT-2021-17199

Name of the Vulnerable Software and Affected Versions: xcb crate through 2021-02-04 for Rust Description: The issue concerns a soundness violation in the xcb crate, which can lead to transmutation to the wrong type after using std::mem::transmute to return a reference to an arbitrary type...

PT-2021-17198

Name of the Vulnerable Software and Affected Versions: xcb crate through 2021-02-04 for Rust Description: The issue concerns a soundness violation in the xcb crate, which can lead to out-of-bounds reads and incorrect type transmutations. Specifically, the xcb::xproto::change property function can...

DEBIAN-CVE-2020-36205

An issue was discovered in the xcb crate through 2020-12-10 for Rust. base::Error does not have soundness. Because of the public ptr field, a use-after-free or double-free can occur...

CVE-2020-36205

An issue was discovered in the xcb crate through 2020-12-10 for Rust. base::Error does not have soundness. Because of the public ptr field, a use-after-free or double-free can occur...

CVE-2020-36205

An issue was discovered in the xcb crate through 2020-12-10 for Rust. base::Error does not have soundness. Because of the public ptr field, a use-after-free or double-free can occur...

Double free

An issue was discovered in the xcb crate through 2020-12-10 for Rust. base::Error does not have soundness. Because of the public ptr field, a use-after-free or double-free can occur...

CVE-2020-36205

An issue was discovered in the xcb crate through 2020-12-10 for Rust. base::Error does not have soundness. Because of the public ptr field, a use-after-free or double-free can occur...

UBUNTU-CVE-2020-36205

An issue was discovered in the xcb crate through 2020-12-10 for Rust. base::Error does not have soundness. Because of the public ptr field, a use-after-free or double-free can occur...

Rust Resource Management Error Vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. Rust xcb crate through 2020-12-10 A resource management error vulnerability exists that stems from the presence of the public ptr field and can lead to use-after free or double-free...

CVE-2020-36205

An issue was discovered in the xcb crate through 2020-12-10 for Rust. base::Error does not have soundness. Because of the public ptr field, a use-after-free or double-free can occur...

CVE-2020-36205

An issue was discovered in the xcb crate through 2020-12-10 for Rust. base::Error does not have soundness. Because of the public ptr field, a use-after-free or double-free can occur...

CVE-2020-36205

The CVE-2020-36205 entry concerns the Rust xcb crate (through 2020-12-10). The flaw is in base::Error which does not maintain soundness; a public ptr field enables use-after-free or double-free scenarios. Affected component: xcb crate in Rust. Root cause: misuse of a public pointer field in base:...