chromium-rust vulnerabilities (Alpine)
14 vulnerabilities.
-
chromium-rustAlpine libssh2 - Heap Buffer Over-read via sftp_symlink() in sftp.c 8.3 High -
chromium-rustAlpine libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c 9.2 Critical -
chromium-rustAlpine libssh2 - Pre-Authentication DoS via SSH_MSG_EXT_INFO Handler 8.2 High -
chromium-rustAlpine Crates in third party registries can override the cached source of other crates 6.5 Medium -
chromium-rustAlpine Cargo can be coerced to share credentials between registries 2.3 Low -
chromium-rustAlpine tar-rs: unpack_in can chmod arbitrary directories by following symlinks 5.1 Medium -
chromium-rustAlpine Cargo not respecting umask when extracting crate archives 7.8 High -
chromium-rustAlpine Cargo did not verify SSH host keys 5.3 Medium -
chromium-rustAlpine Moderate: gcc-toolset-10-gcc security update 8.3 High -
chromium-rustAlpine library/std/src/net/parser.rs in Rust before 1.53.0 does not properly consider extraneous zero... 9.1 Critical -
chromium-rustAlpine In the standard library in Rust before 1.50.3, there is an optimization for joining strings that... 8.2 High -
chromium-rustAlpine In the standard library in Rust before 1.53.0, a double free can occur in the Vec::from_iter... 9.8 Critical -
chromium-rustAlpine Cargo prior to Rust 1.26.0 may download the wrong dependency 4.6 Medium -
chromium-rustAlpine The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method... 8.1 High