rust vulnerabilities (Azure Linux)
153 vulnerabilities.
-
rustAzure Linux zip: AES Entry HMAC Authentication Bypass on Premature EOF 6.5 Medium -
rustAzure Linux zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE 10.0 Critical -
rustAzure Linux zip: Unbounded Symlink-Target Handling Can Abort Or Exhaust Memory During Extraction 7.5 High -
rustAzure Linux Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction 9.9 Critical -
rustAzure Linux Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilation 9.9 Critical -
rustAzure Linux wolfSSL public-key pinning bypass 9.1 Critical -
rustAzure Linux password leak in CURLINFO_EFFECTIVE_URL 7.5 High -
rustAzure Linux HTTP/2 upload Use-After-Free 8.1 High -
rustAzure Linux curl_mime_free stack overflow by recursion 7.5 High -
rustAzure Linux -J no-clobber guarantee bypassed with 103 early hints 7.5 High -
rustAzure Linux TFTP direction confusion 8.1 High -
rustAzure Linux FTP wildcard write callback mixup 9.1 Critical -
rustAzure Linux never-ending loop via server response omission 8.1 High -
rustAzure Linux server-set cookie aborts cookie jar load 8.1 High -
rustAzure Linux knownhost callback mismatches key as missing 7.4 High -
rustAzure Linux IMAP APPEND plus CRLF conversion command injection 8.1 High -
rustAzure Linux HSTS response erases persisted entries 8.1 High -
rustAzure Linux HSTS cache import drops longer-lived child 8.1 High -
rustAzure Linux leaking host credentials to HTTP proxy 9.1 Critical -
rustAzure Linux server-set cookie erases cookie jar 8.1 High -
rustAzure Linux redirect to SFTP or SCP bypasses host verification 8.1 High -
rustAzure Linux stale SigV4 headers sent unintended 8.1 High -
rustAzure Linux local interface connection reuse mixup 8.1 High -
rustAzure Linux info leak uploading over WebSockets with GnuTLS 8.1 High -
rustAzure Linux Gitoxide gix-pack before 0.75.0 Denial of Service via Pack Header Object Count 7.1 High -
rustAzure Linux gix-pack before 0.75.0 Reachable Assertion DoS via Pack Version 3 Header 7.1 High -
rustAzure Linux Privasys rustls fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session 9.1 Critical -
rustAzure Linux Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 Stack Buffer Overflow 9.4 Critical -
rustAzure Linux Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 GC Heap Corruption via Tag Imports 5.9 Medium -
rustAzure Linux Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 GC Heap Corruption via try_call 6.9 Medium -
rustAzure Linux PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API... 7.6 High -
rustAzure Linux QUIC STREAM Fragment Metadata DoS 7.5 High -
rustAzure Linux Potential CPU DoS via O(n^2) Fragment Reassembly in QUIC 5.3 Medium -
rustAzure Linux QUIC: Unbounded RETIRE_CONNECTION_ID Backlog 7.5 High -
rustAzure Linux Timing Side-Channel in SM2 Signature Generation 3.7 Low -
rustAzure Linux Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS 5.3 Medium -
rustAzure Linux NULL Pointer Dereference in CMP Client Revocation Response Handling 5.3 Medium -
rustAzure Linux QUIC Connection-Level Flow Control is Not Enforced for Streams 5.3 Medium -
rustAzure Linux Out-of-Bounds Access After SSL_set_SSL_CTX() During a Handshake 7.5 High -
rustAzure Linux Non-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-V 3.7 Low -
rustAzure Linux Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves 3.7 Low -
rustAzure Linux QUIC Unvalidated Amplification Credit may be Over Accounted 3.7 Low -
rustAzure Linux Excessive Memory Allocation in Relative CRLDP Processing 5.3 Medium -
rustAzure Linux gitoxide gix-fs before 0.23.0 Worktree Escape via Symlink 7.3 High -
rustAzure Linux gitoxide gix-transport before 0.59.2 CR/LF/NUL Injection 5.3 Medium -
rustAzure Linux In PCRE2 before 10.48, pcre2_jit_match mishandles a previously copied subject being passed in as... 7.4 High -
rustAzure Linux PCRE2 before 10.48 has a pcre2_match out-of-bounds read during the PCRE2_MATCH_INVALID_UTF... 3.7 Low -
rustAzure Linux PCRE2 before 10.48, on 32-bit platforms, has a pcre2_compile_32 integer overflow and resultant... 6.5 Medium -
rustAzure Linux PCRE2 before 10.48, on 32-bit platforms, has a pcre2_pattern_convert out-of-bounds write when an... 5.7 Medium -
rustAzure Linux PCRE2 before 10.48 has a pcre2_match out-of-bounds read after a JIT fallback when an attacker can... 2.9 Low - Show olderLoading…