Security Vulnerabilities - CVEs Published In 2020
An issue was discovered in the lucet-runtime-internals crate before 0.5.1 for Rust. It mishandles sigstack allocation. Guest programs may be able to obtain sensitive information, or guest programs can experience memory corruption.
CVSS Score
9.1
EPSS Score
0.004
Published
2020-12-31
An issue was discovered in the cbox crate through 2020-03-19 for Rust. The CBox API allows dereferencing raw pointers without a requirement for unsafe code.
CVSS Score
9.8
EPSS Score
0.004
Published
2020-12-31
An issue was discovered in the bumpalo crate before 3.2.1 for Rust. The realloc feature allows the reading of unknown memory. Attackers can potentially read cryptographic keys.
CVSS Score
7.5
EPSS Score
0.003
Published
2020-12-31
An issue was discovered in the libpulse-binding crate before 2.5.0 for Rust. proplist::Iterator can cause a use-after-free.
CVSS Score
6.5
EPSS Score
0.002
Published
2020-12-31
An issue was discovered in the socket2 crate before 0.3.16 for Rust. It has false expectations about the std::net::SocketAddr memory representation.
CVSS Score
5.5
EPSS Score
0.001
Published
2020-12-31
An issue was discovered in the miow crate before 0.3.6 for Rust. It has false expectations about the std::net::SocketAddr memory representation.
CVSS Score
5.5
EPSS Score
0.001
Published
2020-12-31
An issue was discovered in the mio crate before 0.7.6 for Rust. It has false expectations about the std::net::SocketAddr memory representation.
CVSS Score
5.5
EPSS Score
0.001
Published
2020-12-31
An issue was discovered in the ordered-float crate before 1.1.1 and 2.x before 2.0.1 for Rust. A NotNan value can contain a NaN.
CVSS Score
5.5
EPSS Score
0.001
Published
2020-12-31
An issue was discovered in the try-mutex crate before 0.3.0 for Rust. TryMutex<T> allows cross-thread sending of a non-Send type.
CVSS Score
5.5
EPSS Score
0.001
Published
2020-12-31
An issue was discovered in the magnetic crate before 2.0.1 for Rust. MPMCConsumer and MPMCProducer allow cross-thread sending of a non-Send type.
CVSS Score
5.5
EPSS Score
0.001
Published
2020-12-31