Security Vulnerabilities - CVEs Published In April 2021
An issue was discovered in the reorder crate through 2021-02-24 for Rust. swap_index can return uninitialized values if an iterator returns a len() that is too large.
CVSS Score
7.3
EPSS Score
0.003
Published
2021-04-01
An issue was discovered in the endian_trait crate through 2021-01-04 for Rust. A double drop can occur when a user-provided Endian impl panics.
CVSS Score
7.5
EPSS Score
0.004
Published
2021-04-01
An issue was discovered in the arenavec crate through 2021-01-12 for Rust. A drop of uninitialized memory can sometimes occur upon a panic in T::default().
CVSS Score
7.5
EPSS Score
0.004
Published
2021-04-01
An issue was discovered in the arenavec crate through 2021-01-12 for Rust. A double drop can sometimes occur upon a panic in T::drop().
CVSS Score
7.5
EPSS Score
0.004
Published
2021-04-01
An issue was discovered in the parse_duration crate through 2021-03-18 for Rust. It allows attackers to cause a denial of service (CPU and memory consumption) via a duration string with a large exponent.
CVSS Score
7.5
EPSS Score
0.004
Published
2021-04-01
An issue was discovered in the insert_many crate through 2021-01-26 for Rust. Elements may be dropped twice if a .next() method panics.
CVSS Score
7.5
EPSS Score
0.004
Published
2021-04-01
An issue was discovered in PartialReader in the uu_od crate before 0.0.4 for Rust. Attackers can read the contents of uninitialized memory locations via a user-provided Read operation.
CVSS Score
7.3
EPSS Score
0.003
Published
2021-04-01
An issue was discovered in the rocket crate before 0.4.7 for Rust. uri::Formatter can have a use-after-free if a user-provided function panics.
CVSS Score
7.3
EPSS Score
0.004
Published
2021-04-01
An issue was discovered in the adtensor crate through 2021-01-11 for Rust. There is a drop of uninitialized memory via the FromIterator implementation for Vector and Matrix.
CVSS Score
9.8
EPSS Score
0.005
Published
2021-04-01
An issue was discovered in the telemetry crate through 2021-02-17 for Rust. There is a drop of uninitialized memory if a value.clone() call panics within misc::vec_with_size().
CVSS Score
9.8
EPSS Score
0.005
Published
2021-04-01