Lucene search
K

209 matches found

OSV
OSV
added 2022/06/16 11:51 p.m.12 views

GHSA-8GJ8-HV75-GP94 `SegQueue` creates zero value of any type

Affected versions of this crate called mem::zeroed to create values of a user-supplied type T. This is unsound e.g. if T is a reference type which must be non-null. The flaw was corrected by avoiding the use of mem::zeroed, using MaybeUninit instead...

6.9AI score
Exploits0References3
Github Security Blog
Github Security Blog
added 2022/06/16 11:51 p.m.11 views

`SegQueue` creates zero value of any type

Affected versions of this crate called mem::zeroed to create values of a user-supplied type T. This is unsound e.g. if T is a reference type which must be non-null. The flaw was corrected by avoiding the use of mem::zeroed, using MaybeUninit instead...

3.1AI score
Exploits0References3Affected Software1
OSV
OSV
added 2022/06/16 11:50 p.m.11 views

GHSA-6888-WF7J-34JQ `SegQueue` creates zero value of any type

Affected versions of this crate called mem::zeroed to create values of a user-supplied type T. This is unsound e.g. if T is a reference type which must be non-null. The flaw was corrected by avoiding the use of mem::zeroed, using MaybeUninit instead...

6.9AI score
Exploits0References3
OSV
OSV
added 2022/06/16 11:49 p.m.9 views

GHSA-9G55-PG62-M8HH Channel creates zero value of any type

Affected versions of this crate called mem::zeroed to create values of a user-supplied type T. This is unsound e.g. if T is a reference type which must be non-null. The flaw was corrected by avoiding the use of mem::zeroed, using MaybeUninit instead...

6.9AI score
Exploits0References3
RustSec
RustSec
added 2022/05/10 12:0 p.m.16 views

`SegQueue` creates zero value of any type

Affected versions of this crate called mem::zeroed to create values of a user-supplied type T. This is unsound e.g. if T is a reference type which must be non-null. The flaw was corrected by avoiding the use of mem::zeroed, using MaybeUninit instead...

3.1AI score
Exploits0Affected Software1
RustSec
RustSec
added 2022/05/10 12:0 p.m.15 views

Channel creates zero value of any type

Affected versions of this crate called mem::zeroed to create values of a user-supplied type T. This is unsound e.g. if T is a reference type which must be non-null. The flaw was corrected by avoiding the use of mem::zeroed, using MaybeUninit instead...

2.8AI score
Exploits0Affected Software1
OSV
OSV
added 2022/05/10 12:0 p.m.8 views

RUSTSEC-2022-0021 `SegQueue` creates zero value of any type

Affected versions of this crate called mem::zeroed to create values of a user-supplied type T. This is unsound e.g. if T is a reference type which must be non-null. The flaw was corrected by avoiding the use of mem::zeroed, using MaybeUninit instead...

6.9AI score
Exploits0References3
OSV
OSV
added 2022/05/10 12:0 p.m.14 views

RUSTSEC-2022-0020 `SegQueue` creates zero value of any type

Affected versions of this crate called mem::zeroed to create values of a user-supplied type T. This is unsound e.g. if T is a reference type which must be non-null. The flaw was corrected by avoiding the use of mem::zeroed, using MaybeUninit instead...

6.9AI score
Exploits0References3
OSV
OSV
added 2022/04/24 8:35 p.m.10 views

GSD-2022-1000970 mm: fix unexpected zeroed page mapping with zram swap

mm: fix unexpected zeroed page mapping with zram swap This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.4 by commit...

7.2AI score
Exploits0
Positive Technologies
Positive Technologies
added 2022/03/14 12:0 a.m.2 views

PT-2022-7665 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the crypto component of the Linux kernel, specifically the qcom-rng module. The generate function in struct rng alg expects the destination buffer to be...

7.8CVSS6.8AI score0.08555EPSS
Exploits7References1099
CNNVD
CNNVD
added 2021/12/27 12:0 a.m.1 views

Rust 安全漏洞

Rust, a general-purpose, compiled programming language from the Mozilla Foundation, has a security vulnerability in versions prior to Rust zeroizederive crate 1.1.1, which stems from the fact that deleted memory is not set to zero. No details of the vulnerability are currently available...

9.8CVSS5.5AI score0.01191EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2021/11/17 12:0 a.m.28 views

EulerOS Virtualization 2.9.1 : libssh (EulerOS-SA-2021-2753)

According to the versions of the libssh package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw has been found in libssh in versions prior to 0.9.6. The SSH protocol keeps track of two shared secrets during the lifetime...

6.5CVSS6.2AI score0.04596EPSS
Exploits0References2
OSV
OSV
added 2021/04/11 8:15 p.m.3 views

UBUNTU-CVE-2015-20001

In the standard library in Rust before 1.2.0, BinaryHeap is not panic-safe. The binary heap is left in an inconsistent state when the comparison of generic elements inside siftup or siftdownrange panics. This bug leads to a drop of zeroed memory as an arbitrary type, which can result in a memory...

7.5CVSS5.9AI score0.01324EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2018/06/07 4:5 p.m.8 views

OpenJDK: unsynchronized access to encryption key data (Libraries, 8172525)

It was discovered that multiple encryption key classes in the Libraries component of OpenJDK did not properly synchronize access to their internal data. This could possibly cause a multi-threaded Java application to apply weak encryption to data because of the use of a key that was zeroed out...

4.3CVSS7.3AI score0.04105EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2018/05/15 3:30 p.m.4 views

OpenJDK: unsynchronized access to encryption key data (Libraries, 8172525)

It was discovered that multiple encryption key classes in the Libraries component of OpenJDK did not properly synchronize access to their internal data. This could possibly cause a multi-threaded Java application to apply weak encryption to data because of the use of a key that was zeroed out...

4.3CVSS7.3AI score0.04105EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2018/03/07 10:33 a.m.0 views

OpenJDK: unsynchronized access to encryption key data (Libraries, 8172525)

It was discovered that multiple encryption key classes in the Libraries component of OpenJDK did not properly synchronize access to their internal data. This could possibly cause a multi-threaded Java application to apply weak encryption to data because of the use of a key that was zeroed out...

4.3CVSS7.3AI score0.04105EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2018/02/26 10:27 p.m.3 views

OpenJDK: unsynchronized access to encryption key data (Libraries, 8172525)

It was discovered that multiple encryption key classes in the Libraries component of OpenJDK did not properly synchronize access to their internal data. This could possibly cause a multi-threaded Java application to apply weak encryption to data because of the use of a key that was zeroed out...

4.3CVSS7.3AI score0.04105EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2018/01/22 8:40 p.m.4 views

OpenJDK: unsynchronized access to encryption key data (Libraries, 8172525)

It was discovered that multiple encryption key classes in the Libraries component of OpenJDK did not properly synchronize access to their internal data. This could possibly cause a multi-threaded Java application to apply weak encryption to data because of the use of a key that was zeroed out...

4.3CVSS7.3AI score0.04105EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2018/01/18 9:55 p.m.6 views

OpenJDK: unsynchronized access to encryption key data (Libraries, 8172525)

It was discovered that multiple encryption key classes in the Libraries component of OpenJDK did not properly synchronize access to their internal data. This could possibly cause a multi-threaded Java application to apply weak encryption to data because of the use of a key that was zeroed out...

4.3CVSS7.3AI score0.04105EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2018/01/18 9:55 p.m.4 views

OpenJDK: unsynchronized access to encryption key data (Libraries, 8172525)

It was discovered that multiple encryption key classes in the Libraries component of OpenJDK did not properly synchronize access to their internal data. This could possibly cause a multi-threaded Java application to apply weak encryption to data because of the use of a key that was zeroed out...

4.3CVSS7.3AI score0.04105EPSS
Exploits0References4
Rows per page
Query Builder