Read our disclosure policy
The crash is fixed in version **0.4.3** of Rulex. Affected users are advised to update to this version.
The crashes are fixed in version **0.4.3** of Rulex. Affected users are advised to update to this version.
It is possible to provide data to be read that leads the reader to loop in cycles endlessly, consuming CPU. This issue affects Rust applications using Apache Avro Rust SDK prior to 0.14.0 (previously known as avro-rs).
It is possible for a Reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system. This issue affects Rust applications using Apache Avro Rust SDK prior to 0.14.0
It is possible to crash (panic) an application by providing a corrupted data to be read. This issue affects Rust applications using Apache Avro Rust SDK prior to 0.14.0 (previously known as avro-rs)
Rust-WebSocket is a WebSocket (RFC6455) library written in Rust. In versions prior to 0.26.5 untrusted websocket connections can cause an out-of-memory (OOM) process abort in a client or a server. The root cause of the issue is during dataframe parsing. Affected versions would allocate a buffer based on the declared dataframe size, which may come from an untrusted source.
linked_list_allocator is an allocator usable for no_std systems. Prior to version 0.10.2, the heap initialization methods were missing a minimum size check for the given heap size argument, which could lead to out-of-bound writes. Responsibly disclosed by the Mayhem team and patched by the Rust team in 0.10.2.
Six-library is a software library published by the US government's National Geospatial-Intelligence Agency (NGA). The six-library is designed to parse and manipulate satellite imagery and data for both internal and public use.
H2O is an open source HTTP server written in C. H2O is known for its ability to deliver quicker responses to users with less CPU utilization than older generations of web servers.
sthttpd is an open source web server designed for simplicity, a small execution footprint and speed.