rust vulnerabilities (Azure Linux)
161 vulnerabilities.
rustAzure Linuxgix-sec safe.directory protections absent for elevated administrators6.8 MediumrustAzure Linuxdomain-scoped PSL domain cookie8.2 HighrustAzure Linuxsecure cookie attribute bypass with tab7.5 HighrustAzure LinuxOpenSSL pinning bypass7.5 HighrustAzure LinuxOpenSSL provider use-after-free7.5 HighrustAzure LinuxNegotiate ambient user conn reuse9.8 CriticalrustAzure LinuxHTTP/2 server push UAF9.1 CriticalrustAzure LinuxOpenLDAP SASL authentication bypass7.4 HighrustAzure LinuxwolfSSL CA-cache hit overrides callback7.5 HighrustAzure Linuxnative CA store conn reuse7.5 HighrustAzure LinuxDTLS Retransmits Handshake Messages From a Stale Buffer Offset8.2 HighrustAzure Linuxgitoxide gix-packetline before 0.21.5 Denial of Service7.1 HighrustAzure LinuxCapstone SH disassembler `set_reg_n` heap buffer overflow via crafted SH2A FPU bytecode7.3 HighrustAzure LinuxCapstone SH disassembler `sh_disassemble` out-of-bounds read via crafted SH2A bytecode6.8 MediumrustAzure LinuxCapstone WASM `br_table` instruction-size truncation can cause no-progress disassembly and parser desynchronization2.0 LowrustAzure LinuxCapstone M68K and RISCV `cs_insn_name()` invalid IDs can trigger out-of-bounds reads and process crashes5.1 MediumrustAzure Linuxtar-rs 0.4.11 - 0.4.46 Symlink Escape via append_dir_all()7.1 HighrustAzure Linuxlibssh2 Heap Buffer Overflow via ETM Cipher Negotiation7.7 HighrustAzure Linuxlibssh2 Heap Out-of-Bounds Read via publickey subsystem7.7 HighrustAzure Linuxlibssh2 Integer Underflow DoS via AES-GCM Cipher Negotiation8.7 HighrustAzure LinuxVulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON...6.5 MediumrustAzure Linuxammonia allows stored XSS through unsanitized SVG animate and set attributes5.4 MediumrustAzure Linuxlibssh2 - Free of Uninitialized Pointer in publickey List Cleanup8.3 HighrustAzure Linuxlibssh2 - Integer Overflow in publickey Subsystem Attribute Allocation8.3 HighrustAzure Linuxlibssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c9.2 CriticalrustAzure Linuxlibssh2 - Pre-Authentication DoS via SSH_MSG_EXT_INFO Handler8.2 HighrustAzure LinuxCapstone has a NULL Pointer Dereference with 3DNow! opcodes5.1 MediumrustAzure LinuxCrates in third party registries can override the cached source of other crates6.5 MediumrustAzure LinuxCargo can be coerced to share credentials between registries2.3 LowrustAzure Linuxgitoxide before 0.52.1 Path Traversal via Submodule Name8.7 HighrustAzure Linuxgitoxide before 0.52.1 Repository Boundary Violation via symlinked .gitmodules8.7 HighrustAzure Linuxgitoxide before 0.69.0 Denial of Service via gix-pack8.7 HighrustAzure Linuxgitoxide - Command Injection via Partial .gitmodules Override in gix-submodule7.3 HighrustAzure Linuxgitoxide before 0.82.0 Path Traversal via Submodule Name Validation Bypass8.7 HighrustAzure Linuxlibssh2 userauth.c userauth_password integer overflow6.9 MediumrustAzure Linuxrustls-webpki before 0.103.13 Panic via empty BIT STRING8.7 HighrustAzure Linuxrustls webpki 0.101.0 before 0.103.12 Name Constraint Bypass2.1 LowrustAzure Linuxrustls webpki Name Constraints URI Validation Bypass2.1 LowrustAzure LinuxXZ Utils: Buffer overflow in lzma_index_append()1.7 LowrustAzure Linuxrustls-webpki before 0.103.10 CRL Revocation Check Bypass5.9 MediumrustAzure Linuxtar-rs: unpack_in can chmod arbitrary directories by following symlinks5.1 MediumrustAzure Linuxtar-rs incorrectly ignores PAX size headers if header size is nonzero5.1 MediumrustAzure LinuxCompress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib9.8 CriticalrustAzure Linuxzlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because...2.9 LowrustAzure LinuxPostgreSQL missing validation of multibyte character length executes arbitrary code8.8 HighrustAzure Linuxtime affected by a stack exhaustion denial of service attack6.8 MediumrustAzure LinuxBytes is vulnerable to integer overflow in BytesMut::reserve5.5 MediumrustAzure LinuxWasmtime segfault or unused out-of-sandbox load with f64.copysign operator on x86-644.1 MediumrustAzure LinuxCapstone doesn't check vsnprintf return in SStream_concat, allows stack buffer underflow and overflow4.8 MediumrustAzure LinuxCapstone doesn't check Skipdata length, leading to cs_insn.bytes heap buffer overflow4.8 Medium- Show moreLoading…