rustsec/advisory-db
1
0
Fork 0
mirror of https://github.com/rustsec/advisory-db.git synced 2025-12-27 01:54:07 -05:00
Code Issues Packages Projects Releases Wiki Activity

Synchronize IDs (2024-04-11) (#1936)

Browse Source 
Co-authored-by: amousset <329388+amousset@users.noreply.github.com>
This commit is contained in:
github-actions[bot]
2024-04-11 17:16:20 +01:00
committed by GitHub
parent 0bc9a77248
commit c9858c0fc6
8 changed files with 9 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
crates/cassandra-cpp/RUSTSEC-2024-0017.md
View File

@@ -7,11 +7,12 @@ url = "https://github.com/Metaswitch/cassandra-rs/security/advisories/GHSA-x9xc-
informational = "unsound"
categories = ["memory-corruption", "memory-exposure"]
keywords = ["memory-safety", "use-after-free"]
aliases = ["GHSA-x9xc-63hg-vcfq"]
aliases = ["CVE-2024-27284", "GHSA-x9xc-63hg-vcfq"]
[versions]
patched = [">= 3.0.0"]
```
# Non-idiomatic use of iterators leads to use after free
Code that attempts to use an item (e.g., a row) returned by an iterator after the iterator has advanced to the next item will be accessing freed memory and experience undefined behaviour. Code that uses the item and then advances the iterator is unaffected. This problem has always existed.

1
crates/crayon/RUSTSEC-2024-0018.md
View File

@@ -6,6 +6,7 @@ date = "2024-02-27"
url = "https://github.com/shawnscode/crayon/issues/109"
categories = ["memory-corruption"]
keywords = ["std::mem::uninitialized", "address-sanitizer"]
aliases = ["GHSA-xfhw-6mc4-mgxf"]
[versions]
patched = []

1
crates/eyre/RUSTSEC-2024-0021.md
View File

@@ -5,6 +5,7 @@ package = "eyre"
date = "2024-03-05"
url = "https://github.com/eyre-rs/eyre/issues/141"
categories = ["memory-corruption"]
aliases = ["GHSA-4v52-7q2x-v4xj"]
[versions]
patched = [">= 0.6.12"]

1
crates/h2/RUSTSEC-2024-0332.md
View File

@@ -6,6 +6,7 @@ date = "2024-04-03"
references = ["https://seanmonstar.com/blog/hyper-http2-continuation-flood/"]
categories = ["denial-of-service"]
keywords = ["http", "http2", "h2"]
aliases = ["GHSA-q6cp-qfwq-4gcv"]
[versions]
patched = ["^0.3.26", ">= 0.4.4"]

1
crates/hpack/RUSTSEC-2023-0085.md
View File

@@ -6,6 +6,7 @@ date = "2023-09-15"
url = "https://github.com/mlalic/hpack-rs/issues/11"
categories = ["denial-of-service"]
references = ["https://github.com/sno2/hpack-rs-patched/commit/d669282924a95311599e9e7dd53869ee96b3a2f5"]
aliases = ["GHSA-w7hm-hmxv-pvhf"]
[versions]
patched = []

1
crates/libdav1d-sys/RUSTSEC-2024-0016.md
View File

@@ -6,6 +6,7 @@ date = "2024-02-19"
url = "https://www.cvedetails.com/cve/CVE-2024-1580/"
categories = ["memory-corruption"]
keywords = ["integer-overflow"]
aliases = ["GHSA-mc39-h54g-pvw6"]
[affected]
[versions]

1
crates/transpose/RUSTSEC-2023-0080.md
View File

@@ -5,6 +5,7 @@ package = "transpose"
date = "2023-12-18"
url = "https://github.com/ejmahler/transpose/issues/11"
categories = ["memory-corruption"]
aliases = ["GHSA-5gmm-6m36-r7jh"]
[versions]
patched = [">= 0.2.3"]

1
crates/whoami/RUSTSEC-2024-0020.md
View File

@@ -6,6 +6,7 @@ date = "2024-02-28"
url = "https://github.com/ardaku/whoami/issues/91"
categories = ["denial-of-service", "memory-corruption"]
keywords = ["buffer-overflow", "stack-buffer-overflow", "cwe-121"]
aliases = ["GHSA-w5w5-8vfh-xcjq"]
[affected]
# Other Unix OSes that aren't Linux or macOS are affected as well.