Security Vulnerabilities - CVEs Published In 2021
An issue was discovered in the anymap crate through 0.12.1 for Rust. It violates soundness via conversion of a *u8 to a *u64.
CVSS Score
9.8
EPSS Score
0.014
Published
2021-08-08
An issue was discovered in the iced-x86 crate through 1.10.3 for Rust. In Decoder::new(), slice.get_unchecked(slice.length()) is used unsafely.
CVSS Score
9.8
EPSS Score
0.013
Published
2021-08-08
An issue was discovered in the lettre crate before 0.9.6 for Rust. In an e-mail message body, an attacker can place a . character after two <CR><LF> sequences and then inject arbitrary SMTP commands.
CVSS Score
9.8
EPSS Score
0.015
Published
2021-08-08
An issue was discovered in the nalgebra crate before 0.27.1 for Rust. It allows out-of-bounds memory access because it does not ensure that the number of elements is equal to the product of the row count and column count.
CVSS Score
9.8
EPSS Score
0.014
Published
2021-08-08
An issue was discovered in the tokio crate before 1.8.1 for Rust. Upon a JoinHandle::abort, a Task may be dropped in the wrong thread.
CVSS Score
5.9
EPSS Score
0.008
Published
2021-08-08
An issue was discovered in the conqueue crate before 0.4.0 for Rust. There are unconditional implementations of Send and Sync for QueueSender<T>.
CVSS Score
8.1
EPSS Score
0.008
Published
2021-08-08
An issue was discovered in the tiny_future crate before 0.4.0 for Rust. Future<T> does not have bounds on its Send and Sync traits.
CVSS Score
8.1
EPSS Score
0.008
Published
2021-08-08
An issue was discovered in the ticketed_lock crate before 0.3.0 for Rust. There are unconditional implementations of Send for ReadTicket<T> and WriteTicket<T>.
CVSS Score
8.1
EPSS Score
0.008
Published
2021-08-08
An issue was discovered in the libsbc crate before 0.1.5 for Rust. For Decoder<R>, it implements Send for any R: Read.
CVSS Score
8.1
EPSS Score
0.008
Published
2021-08-08
An issue was discovered in the abox crate before 0.4.1 for Rust. It implements Send and Sync for AtomicBox<T> with no requirement for T: Send and T: Sync.
CVSS Score
8.1
EPSS Score
0.008
Published
2021-08-08