|
197951
|
9.8 |
CRITICAL
Network
|
rusqlite_project
|
rusqlite
|
An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via VTab / VTabCursor.
|
NVD-CWE-noinfo
|
CVE-2020-35866
|
2024-11-21 14:28 |
2020-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197952
|
7.5 |
HIGH
Network
|
os_str_bytes_project
|
os_str_bytes
|
An issue was discovered in the os_str_bytes crate before 2.0.0 for Rust. It has false expectations about char::from_u32_unchecked behavior.
|
NVD-CWE-noinfo
|
CVE-2020-35865
|
2024-11-21 14:28 |
2020-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197953
|
7.5 |
HIGH
Network
|
google
|
flatbuffers
|
An issue was discovered in the flatbuffers crate through 2020-04-11 for Rust. read_scalar (and read_scalar_at) can transmute values without unsafe blocks.
|
NVD-CWE-noinfo
|
CVE-2020-35864
|
2024-11-21 14:28 |
2020-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197954
|
9.8 |
CRITICAL
Network
|
hyper
|
hyper
|
An issue was discovered in the hyper crate before 0.12.34 for Rust. HTTP request smuggling can occur. Remote code execution can occur in certain situations with an HTTP server on the loopback interfa…
|
CWE-444
HTTP Request Smuggling
|
CVE-2020-35863
|
2024-11-21 14:28 |
2020-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197955
|
9.8 |
CRITICAL
Network
|
bitvec_project
|
bitvec
|
An issue was discovered in the bitvec crate before 0.17.4 for Rust. BitVec to BitBox conversion leads to a use-after-free or double free.
|
CWE-415 CWE-416
Double Free Use After Free
|
CVE-2020-35862
|
2024-11-21 14:28 |
2020-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197956
|
7.5 |
HIGH
Network
|
bumpalo_project
|
bumpalo
|
An issue was discovered in the bumpalo crate before 3.2.1 for Rust. The realloc feature allows the reading of unknown memory. Attackers can potentially read cryptographic keys.
|
CWE-125
Out-of-bounds Read
|
CVE-2020-35861
|
2024-11-21 14:28 |
2020-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197957
|
9.8 |
CRITICAL
Network
|
cbox_project
|
cbox
|
An issue was discovered in the cbox crate through 2020-03-19 for Rust. The CBox API allows dereferencing raw pointers without a requirement for unsafe code.
|
CWE-476
NULL Pointer Dereference
|
CVE-2020-35860
|
2024-11-21 14:28 |
2020-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197958
|
9.1 |
CRITICAL
Network
|
lucet-runtime-internals_project
|
lucet-runtime-internals
|
An issue was discovered in the lucet-runtime-internals crate before 0.5.1 for Rust. It mishandles sigstack allocation. Guest programs may be able to obtain sensitive information, or guest programs ca…
|
CWE-125 CWE-787
Out-of-bounds Read Out-of-bounds Write
|
CVE-2020-35859
|
2024-11-21 14:28 |
2020-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197959
|
9.8 |
CRITICAL
Network
|
prost_project
|
prost
|
An issue was discovered in the prost crate before 0.6.1 for Rust. There is stack consumption via a crafted message, causing a denial of service (e.g., x86) or possibly remote code execution (e.g., AR…
|
CWE-787
Out-of-bounds Write
|
CVE-2020-35858
|
2024-11-21 14:28 |
2020-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197960
|
7.5 |
HIGH
Network
|
trust-dns-server_project
|
trust-dns-server
|
An issue was discovered in the trust-dns-server crate before 0.18.1 for Rust. DNS MX and SRV null targets are mishandled, causing stack consumption.
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2020-35857
|
2024-11-21 14:28 |
2020-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|