rust vulnerabilities (Alpaquita)
8 vulnerabilities.
-
rustAlpaquita libssh2 - Heap Buffer Over-read via sftp_symlink() in sftp.c 8.3 High -
rustAlpaquita libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c 9.2 Critical -
rustAlpaquita libssh2 - Pre-Authentication DoS via SSH_MSG_EXT_INFO Handler 8.2 High -
rustAlpaquita Crates in third party registries can override the cached source of other crates 6.5 Medium -
rustAlpaquita Cargo can be coerced to share credentials between registries 2.3 Low -
rustAlpaquita tar-rs: unpack_in can chmod arbitrary directories by following symlinks 5.1 Medium -
rustAlpaquita tar-rs incorrectly ignores PAX size headers if header size is nonzero 5.1 Medium -
rustAlpaquita Malicious dependencies can inject arbitrary JavaScript into cargo-generated timing reports 6.1 Medium