rust vulnerabilities (Azure Linux)
161 vulnerabilities.
rustAzure LinuxPostgreSQL libpq undersizes allocations, via integer wraparound5.9 MediumrustAzure LinuxTracing logging user input may result in poisoning logs with ANSI escape sequences2.3 LowrustAzure Linuxslab allows out-of-bounds access in `get_disjoint_mut` due to incorrect bounds check5.1 MediumrustAzure LinuxPostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation5.9 MediumrustAzure LinuxCrossbeam-channel: crossbeam-channel vulnerable to double free on drop6.5 MediumrustAzure LinuxCrash due to uncontrolled recursion in protobuf crate5.9 MediumrustAzure LinuxRustls: rustls network-reachable panic in `acceptor::accept`5.3 MediumrustAzure LinuxHSTS subdomain overwrites parent cache entry6.5 MediumrustAzure LinuxASN.1 date parser overread6.5 MediumrustAzure Linuxgix-transport indirect code execution via malicious username6.4 MediumrustAzure LinuxLLVM before 18.1.3 generates code in which the LR register can be overwritten without data being...5.9 MediumrustAzure LinuxReading unbounded number of HTTP/2 CONTINUATION frames to cause excessive CPU usage5.3 MediumrustAzure LinuxMultiple issues involving quote API in shlex3.2 LowrustAzure LinuxPrefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin5.9 MediumrustAzure Linux`rustix::fs::Dir` iterator with the `linux_raw` backend can cause memory explosion6.5 MediumrustAzure Linuxpyminizip affected by zlib's integer overflow/heap based buffer overflow vulnerability due to vulnerable dependency9.8 CriticalrustAzure Linuxgix-transport code execution vulnerability4.1 MediumrustAzure LinuxMalicious dependencies can inject arbitrary JavaScript into cargo-generated timing reports6.1 MediumrustAzure LinuxCargo not respecting umask when extracting crate archives7.8 HighrustAzure LinuxExcessive time spent checking DH q parameter value5.3 MediumrustAzure LinuxA denial of service vulnerability exists in curl <v8.1.0 in the way libcurl provides several...5.9 MediumrustAzure LinuxAn improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports...5.9 MediumrustAzure LinuxA use after free vulnerability exists in curl <v8.1.0 in the way libcurl offers a feature to...7.5 HighrustAzure Linuxllvm-project commit a0138390 was discovered to contain a segmentation fault via the component...5.5 MediumrustAzure Linuxllvm-project commit a0138390 was discovered to contain an assertion failure at !replacements...5.5 MediumrustAzure Linuxllvm-project commit fdbc55a5 was discovered to contain a segmentation fault via the component...5.5 MediumrustAzure Linuxh2 vulnerable to denial of service7.5 HighrustAzure LinuxExcessive Resource Usage Verifying X.509 Policy Constraints7.5 HighrustAzure LinuxA double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate ...5.9 MediumrustAzure LinuxAn authentication bypass vulnerability exists in libcurl v8.0.0 where it reuses a previously...5.5 MediumrustAzure LinuxAn authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature...5.9 MediumrustAzure LinuxAn authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse...5.9 MediumrustAzure LinuxA path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~)...8.8 HighrustAzure LinuxA vulnerability in input validation exists in curl <8.0 during communication using the TELNET...8.8 HighrustAzure Linuxwasmtime vulnerable to miscompilation of `i8x16.select` with the same inputs on x86_643.1 LowrustAzure LinuxHyperium Hyper before 0.14.19 does not allow for customization of the max_header_list_size method...7.5 HighrustAzure LinuxAn allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0...6.5 MediumrustAzure LinuxA cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that...6.5 MediumrustAzure Linuxlibgit2 fails to verify SSH keys by default5.3 MediumrustAzure LinuxCargo did not verify SSH host keys5.3 MediumrustAzure LinuxA use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually...5.9 MediumrustAzure LinuxThe llhttp parser in the http module in Node v18.7.0 does not correctly handle header fields that...6.5 MediumrustAzure LinuxThe llhttp parser in the http module in Node v17.6.0 does not correctly handle multi-line...6.5 MediumrustAzure Linuxllhttp allows HTTP Request Smuggling via Improper Delimiting of Header Fields6.5 MediumrustAzure Linuxllhttp allows HTTP Request Smuggling via Flawed Parsing of Transfer-Encoding6.5 MediumrustAzure LinuxNULL Pointer Dereference in mrb_vm_exec with super in mruby/mruby7.1 HighrustAzure LinuxNULL Pointer Dereference in mruby/mruby5.5 MediumrustAzure LinuxRegular expression denial of service in Rust's regex crate7.5 HighrustAzure LinuxNULL Pointer Dereference in mruby/mruby5.5 MediumrustAzure LinuxUse of Out-of-range Pointer Offset in mruby/mruby8.4 High- Show moreLoading…