cargo-c vulnerabilities (openSUSE)
22 vulnerabilities.
-
cargo-copenSUSE gitoxide gix-packetline before 0.21.5 Denial of Service 7.1 High -
cargo-copenSUSE gitoxide before 0.37.1 HTTP Basic credential leak via URL parsing 8.7 High -
cargo-copenSUSE rust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers 5.1 Medium -
cargo-copenSUSE rust-openssl: Heap buffer overflow when encrypting with AES key-wrap-with-padding 5.1 Medium -
cargo-copenSUSE rust-openssl: undefined behavior in X509Ref::ocsp_responders for certificates with non-UTF-8 OCSP URLs 8.7 High -
cargo-copenSUSE gitoxide before 0.52.1 Path Traversal via Submodule Name 8.7 High -
cargo-copenSUSE gitoxide before 0.69.0 Denial of Service via gix-pack 8.7 High -
cargo-copenSUSE gitoxide before 0.82.0 Path Traversal via Submodule Name Validation Bypass 8.7 High -
cargo-copenSUSE rust-openssl: Deriver::derive and PkeyCtxRef::derive can overflow short buffers on OpenSSL 1.1.1 7.2 High -
cargo-copenSUSE rust-openssl: Out-of-bounds read in PEM password callback when user callback returns an oversized length 1.7 Low -
cargo-copenSUSE rust-openssl: Incorrect bounds assertion in aes key wrap 7.2 High -
cargo-copenSUSE rust-openssl: MdCtxRef::digest_final() writes past caller buffer with no length check 8.1 High -
cargo-copenSUSE rust-openssl: Unchecked callback-returned length in PSK and cookie generate trampolines can cause OpenSSL to leak adjacent memory to the network peer 8.3 High -
cargo-copenSUSE time affected by a stack exhaustion denial of service attack 6.8 Medium -
cargo-copenSUSE Bytes is vulnerable to integer overflow in BytesMut::reserve 5.5 Medium -
cargo-copenSUSE Tracing logging user input may result in poisoning logs with ANSI escape sequences 2.3 Low -
cargo-copenSUSE Rust-openssl: rust-openssl use-after-free in `md::fetch` and `cipher::fetch` 3.7 Low -
cargo-copenSUSE Crossbeam-channel: crossbeam-channel vulnerable to double free on drop 6.5 Medium -
cargo-copenSUSE idna accepts Punycode labels that do not produce any non-ASCII when decoded 5.1 Medium -
cargo-copenSUSE gix-path improperly resolves configuration path reported by Git 6.0 Medium -
cargo-copenSUSE Race Condition in tokio 8.1 High -
cargo-copenSUSE Use of Uninitialized Resource in smallvec 7.5 High