rustc vulnerabilities (Ubuntu)
18 vulnerabilities.
-
rustcUbuntu Crates in third party registries can override the cached source of other crates 6.5 Medium -
rustcUbuntu Cargo can be coerced to share credentials between registries 2.3 Low -
rustcUbuntu tar-rs: unpack_in can chmod arbitrary directories by following symlinks 5.1 Medium -
rustcUbuntu Malicious dependencies can inject arbitrary JavaScript into cargo-generated timing reports 6.1 Medium -
rustcUbuntu Cargo not respecting umask when extracting crate archives 7.8 High -
rustcUbuntu Improper Restriction of Operations within the Bounds of a Memory Buffer and Race Condition in crossbeam-utils 8.1 High -
rustcUbuntu Race condition in std::fs::remove_dir_all in rustlang 7.3 High -
rustcUbuntu Moderate: gcc-toolset-10-gcc security update 8.3 High -
rustcUbuntu library/std/src/net/parser.rs in Rust before 1.53.0 does not properly consider extraneous zero... 9.1 Critical -
rustcUbuntu In the standard library in Rust before 1.50.3, there is an optimization for joining strings that... 8.2 High -
rustcUbuntu In the standard library in Rust before 1.53.0, a double free can occur in the Vec::from_iter... 9.8 Critical -
rustcUbuntu In the standard library in Rust before 1.49.0, String::retain() function has a panic safety... 7.5 High -
rustcUbuntu In the standard library in Rust before 1.49.0, VecDeque::make_contiguous has a bug that pops the... 9.8 Critical -
rustcUbuntu In the standard library in Rust before 1.52.0, the Zip implementation can report an incorrect... 9.8 Critical -
rustcUbuntu In the standard library in Rust before 1.52.0, the Zip implementation calls... 7.5 High -
rustcUbuntu In the standard library in Rust before 1.51.0, the Zip implementation calls... 7.5 High -
rustcUbuntu In the standard library in Rust before 1.52.0, the Zip implementation has a panic safety issue.... 5.3 Medium -
rustcUbuntu In the standard library in Rust before 1.50.0, read_to_end() does not validate the return value... 7.5 High