rust-analyzer vulnerabilities (Red Hat)
49 vulnerabilities.
-
rust-analyzerRed Hat HTTP/2 upload Use-After-Free 8.1 High -
rust-analyzerRed Hat Gitoxide gix-pack before 0.75.0 Denial of Service via Pack Header Object Count 7.1 High -
rust-analyzerRed Hat Gitoxide gix-pack before 0.75.0 Denial of Service via OFS_DELTA Base Distance 7.1 High -
rust-analyzerRed Hat gix-pack before 0.75.0 Reachable Assertion DoS via Pack Version 3 Header 7.1 High -
rust-analyzerRed Hat Negotiate ambient user conn reuse 9.8 Critical -
rust-analyzerRed Hat HTTP/2 server push UAF 9.1 Critical -
rust-analyzerRed Hat OpenLDAP SASL authentication bypass 7.4 High -
rust-analyzerRed Hat libgit2 - Unauthenticated network-reachable heap out-of-bounds read in transports/smart_pkt.c:set_data 7.5 High -
rust-analyzerRed Hat js-yaml: YAML merge-key chains can force quadratic CPU consumption 7.5 High -
rust-analyzerRed Hat enquirer Public Package API Enquirer.set prototype pollution 5.3 Medium -
rust-analyzerRed Hat HdrHistogram Range Check DoubleHistogram.java org.HdrHistogram.DoubleHistogram.recordValue comparison 4.8 Medium -
rust-analyzerRed Hat HdrHistogram AbstractHistogram AbstractHistogram.java recordValueWithCount state issue 4.8 Medium -
rust-analyzerRed Hat HdrHistogram AbstractHistogram.java memory allocation 4.8 Medium -
rust-analyzerRed Hat HdrHistogram AbstractHistogram.java memory allocation 4.8 Medium -
rust-analyzerRed Hat RustCrypto Cmov/CmovEq on aarch64 can produce wrong results if high-bits of registers are set 2.0 Low -
rust-analyzerRed Hat ruby webrick through v1.9.2 WEBrick reparses trailer Content-Length into canonical request state,... 7.5 High -
rust-analyzerRed Hat linkify-it: Quadratic algorithmic complexity in LinkifyIt#match scan loop 8.7 High -
rust-analyzerRed Hat SSH improper host validation 7.4 High -
rust-analyzerRed Hat sending old referer 7.5 High -
rust-analyzerRed Hat UAF after pause in socket callback 7.3 High -
rust-analyzerRed Hat stale proxy password leak 9.8 Critical -
rust-analyzerRed Hat incomplete mTLS config matching in conn reuse 7.5 High -
rust-analyzerRed Hat env-set cross-proxy Digest auth state leak 9.1 Critical -
rust-analyzerRed Hat password leak with netrc and user in URL 9.1 Critical -
rust-analyzerRed Hat SASL double-free 9.8 Critical -
rust-analyzerRed Hat trailing dot domain super cookie 9.1 Critical -
rust-analyzerRed Hat wrong reuse for different services 6.5 Medium -
rust-analyzerRed Hat wrong STARTTLS connection reuse 8.1 High -
rust-analyzerRed Hat proto-default skips SSH verification 7.5 High -
rust-analyzerRed Hat cross-origin Digest auth state leak 9.8 Critical -
rust-analyzerRed Hat WS Auto-PONG memory exhaustion 7.5 High -
rust-analyzerRed Hat Native CA trust persist 9.1 Critical -
rust-analyzerRed Hat QUIC zero-length UDP datagrams busy-loop 7.5 High -
rust-analyzerRed Hat Crates in third party registries can override the cached source of other crates 6.5 Medium -
rust-analyzerRed Hat postcss-selector-parser AST Serialization container.js toString recursion 5.3 Medium -
rust-analyzerRed Hat urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API 8.9 High -
rust-analyzerRed Hat An issue was discovered in Nix before 2.34.7. Writing to arbitrary files can occur via "nix... 5.3 Medium -
rust-analyzerRed Hat An issue was discovered in Nix before 2.34.7 and Lix before 2.95.2. Unbounded recursion in the... 7.5 High -
rust-analyzerRed Hat libssh2 userauth.c userauth_password integer overflow 6.9 Medium -
rust-analyzerRed Hat Wasmtime: Panic when allocating a table exceeding the size of the host's address space 5.9 Medium -
rust-analyzerRed Hat rustls-webpki before 0.103.13 Panic via empty BIT STRING 8.7 High -
rust-analyzerRed Hat undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent 7.4 High -
rust-analyzerRed Hat undici WebSocket client vulnerable to denial of service via cumulative fragment bypass 7.5 High -
rust-analyzerRed Hat undici vulnerable to cross-origin request routing via SOCKS5 proxy pool reuse 7.5 High -
rust-analyzerRed Hat js-yaml quadratic-complexity denial of service via YAML11_SCHEMA !!omap parsing 7.5 High -
rust-analyzerRed Hat js-yaml: YAML merge-key chains can force quadratic CPU consumption 5.3 Medium -
rust-analyzerRed Hat brace-expansion: Large numeric range defeats documented `max` DoS protection 6.5 Medium -
rust-analyzerRed Hat Rust standard library didn't detect all path separators on Cygwin 6.3 Medium -
rust-analyzerRed Hat Cargo not respecting umask when extracting crate archives 7.8 High