Open Source Vulnerabilities

image

Use after free in image

chttp

Use-after-free in chttp

blake2

Algorithms compute incorrect results in blake2

once_cell

Improper Input Validation in once_cell

string-interner, string-interner

Use after free in string-interner

linea

Double free in linea

slice-deque

Out of bounds write in slice-deque

libp2p-core

Failure to properly verify ed25519 signatures in libp2p-core

protobuf

Uncontrolled memory consumption in protobuf

ammonia

Uncontrolled recursion in ammonia

memoffset

Exposure of uninitialized memory in memoffset

smallvec

Memory corruption in smallvec

simd-json

Out of bounds read in simd-json

tar

Arbitrary file overwrite in tar-rs

claxon, claxon

Uninitialized memory exposure in claxon

untrusted

Integer underflow in untrusted

openssl

Use after free in openssl

arrayfire, arrayfire

Potential memory corruption in arrayfire

safe-transmute

Heap overflow or corruption in safe-transmute

crossbeam

Double free in crossbeam

orion

Flaw in streaming state in orion

trust-dns-proto

Uncontrolled recursion in trust-dns-proto

yaml-rust

Uncontrolled recursion in rust-yaml

openssl

Improper Certificate Validation in openssl

portaudio

Source code is downloaded over cleartext HTTP in portaudio

hyper

HTTPS MitM vulnerability due to lack of hostname verification

hyper, hyper

Headers containing newline characters can split messages in hyper

cookie

Improper Input Validation in cookie

security-framework

Improper Certificate Validation in security-framework

slice-deque

Memory corruption slice-deque

smallvec

Double free in smallvec

actix-web

Multiple memory safety issues in actix-web

openexr

Security update for openexr

qemu, qemu, qemu