Tagged “rust”

CVEs tagged rust, newest first.

740 CVEsRSS

CVE-2024-52813None

2y ago

Missing facility to signal rotation of a verified cryptographic identity

▾ Sunlitmatrix-sdk-crypto · matrix-sdk-cryptoEPSS 0.49%via OSV

CVE-2023-50711Medium· 5.7

2y ago

`serde` deserialization for `FamStructWrapper` lacks bound checks that could potentially lead to out-of-bounds memory access

▾ Sunlitvmm-sys-util · vmm-sys-utilEPSS 0.65%via OSV

CVE-2023-48795Medium· 5.9PoC

2y ago

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), a…

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), a…

Tagged “rust”

Missing facility to signal rotation of a verified cryptographic identity

`serde` deserialization for `FamStructWrapper` lacks bound checks that could potentially lead to out-of-bounds memory access

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), a…

Unbounded queuing of path validation messages in cloudflare-quiche

tokio-boring vulnerable to resource exhaustion via memory leak

Plaintext exposed in decrypt_in_place_detached even on tag verification failure

Marvin Attack: potential key recovery through timing sidechannels

Malicious code in littest (crates.io)

sudo-rs: Path Traversal vulnerability

Tungstenite allows remote attackers to cause a denial of service

blurhash: panic on parsing crafted blurhash inputs

phonenumber: panic on parsing crafted RF3966 phonenumber inputs

HPACK decoder panics on invalid input

libwebp: OOB write in BuildHuffmanTable

Users vulnerable to unaligned read of `*const *const c_char` pointer

Miscompilation of wasm `i64x2.shr_s` instruction with constant input on x86\_64

lol-html panics on certain HTML inputs

Invalid Slice Split Results in Server Panic

Undefined Behavior in Rust runtime functions

Logs AWS credentials when TRACE-level logging is enabled

Miscompilation of `i8x16.select` with the same inputs on x86\_64

Guest-controlled out-of-bounds read/write on x86\_64

Ascii (crate) allows out-of-bounds array indexing in safe code

Aliasing violation in `OrdSet` insertion

git2-rs fails to verify SSH keys by default

reject_remote_clients Configuration corruption

`aliyun-oss-client` secret exposure

Bug in pooling instance allocator

Out of bounds write in `wasmtime_trap_code` C API function

Out of bounds read/write with zero-memory-pages configuration

Users vulnerable to unaligned read of `const const c_char` pointer