rust-keylime vulnerabilities (SUSE)
22 vulnerabilities.
-
rust-keylimeSUSE zip: Arbitrary file write outside the extraction directory, because ZipArchive::extract validates symlink targets lexically. (The defense against CVE-2025-29787 was broken in v7.2.0) 7.4 High -
rust-keylimeSUSE zip: legacy Shrink/Reduce/Implode decoder: denial of service from attacker-controlled ZIP64 uncompressed size 7.5 High -
rust-keylimeSUSE zip: AES Entry HMAC Authentication Bypass on Premature EOF 6.5 Medium -
rust-keylimeSUSE zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE 10.0 Critical -
rust-keylimeSUSE zip: Unbounded Symlink-Target Handling Can Abort Or Exhaust Memory During Extraction 7.5 High -
rust-keylimeSUSE rust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers 5.1 Medium -
rust-keylimeSUSE rust-openssl: Heap buffer overflow when encrypting with AES key-wrap-with-padding 5.1 Medium -
rust-keylimeSUSE rust-openssl: undefined behavior in X509Ref::ocsp_responders for certificates with non-UTF-8 OCSP URLs 8.7 High -
rust-keylimeSUSE rust-openssl: Deriver::derive and PkeyCtxRef::derive can overflow short buffers on OpenSSL 1.1.1 7.2 High -
rust-keylimeSUSE rust-openssl: Out-of-bounds read in PEM password callback when user callback returns an oversized length 1.7 Low -
rust-keylimeSUSE rust-openssl: Incorrect bounds assertion in aes key wrap 7.2 High -
rust-keylimeSUSE rust-openssl: MdCtxRef::digest_final() writes past caller buffer with no length check 8.1 High -
rust-keylimeSUSE rust-openssl: Unchecked callback-returned length in PSK and cookie generate trampolines can cause OpenSSL to leak adjacent memory to the network peer 8.3 High -
rust-keylimeSUSE time affected by a stack exhaustion denial of service attack 6.8 Medium -
rust-keylimeSUSE slab allows out-of-bounds access in `get_disjoint_mut` due to incorrect bounds check 5.1 Medium -
rust-keylimeSUSE WordPress Gianism plugin <= 6.0.0 - Cross Site Scripting (XSS) vulnerability 5.9 Medium -
rust-keylimeSUSE Rust-openssl: rust-openssl use-after-free in `md::fetch` and `cipher::fetch` 3.7 Low -
rust-keylimeSUSE idna accepts Punycode labels that do not produce any non-ASCII when decoded 5.1 Medium -
rust-keylimeSUSE Rustls vulnerable to an infinite loop in rustls::conn::ConnectionCommon::complete_io() with proper client input 7.5 High -
rust-keylimeSUSE Multiple issues involving quote API in shlex 3.2 Low -
rust-keylimeSUSE `rustix::fs::Dir` iterator with the `linux_raw` backend can cause memory explosion 6.5 Medium -
rust-keylimeSUSE h2 vulnerable to denial of service 7.5 High