claxon
Activity
- Latest release
- 6y ago
- Total releases
- 12
- Cadence
- ~5 months
- Last 12 months
- 0
Details
- License
- Apache-2.0
- First release
- Feb 13, 2015
| Version | Released | |
|---|---|---|
0.4.3
unknown
|
0.4.3
unknown
Dependencies (5)
|
|
0.4.2
unknown
|
0.4.2
unknown
Dependencies (5)
|
|
0.3.3
unknown
|
0.3.3
unknown
Dependencies (3)
|
|
0.4.1
unknown
|
0.4.1
unknown
Dependencies (5)
|
|
0.3.2
unknown
|
0.3.2
unknown
Dependencies (3)
|
|
0.4.0
unknown
1 CVE
CVE-2018-20992
GHSA-8c6g-4xc5-w96c
RUSTSEC-2018-0004
Aug 25, 2021
Uninitialized memory exposure in claxon
6.5
/ 10
Medium
Network
Low
None
Required
Unchanged
High
None
None
Affected versions of Claxon made an invalid assumption about the decode buffer size being a multiple of a value read from the bitstream. This could cause parts of the decode buffer to not be overwritten. If the decode buffer was newly allocated and uninitialized, this uninitialized memory could be exposed. This allows an attacker to observe parts of the uninitialized memory in the decoded audio stream. The flaw was corrected by checking that the value read from the bitstream divides the decode buffer size, and returning a format error if it does not. If an error is returned, the decode buffer is not exposed. Regression tests and an additional fuzzer have been added to prevent similar flaws in the future. Fixed in
0.3.2
0.4.1
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.4.0
unknown
Dependencies (5)
|
|
0.3.1
unknown
1 CVE
CVE-2018-20992
GHSA-8c6g-4xc5-w96c
RUSTSEC-2018-0004
Aug 25, 2021
Uninitialized memory exposure in claxon
6.5
/ 10
Medium
Network
Low
None
Required
Unchanged
High
None
None
Affected versions of Claxon made an invalid assumption about the decode buffer size being a multiple of a value read from the bitstream. This could cause parts of the decode buffer to not be overwritten. If the decode buffer was newly allocated and uninitialized, this uninitialized memory could be exposed. This allows an attacker to observe parts of the uninitialized memory in the decoded audio stream. The flaw was corrected by checking that the value read from the bitstream divides the decode buffer size, and returning a format error if it does not. If an error is returned, the decode buffer is not exposed. Regression tests and an additional fuzzer have been added to prevent similar flaws in the future. Fixed in
0.3.2
0.4.1
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.3.1
unknown
Dependencies (3)
|
|
0.3.0
unknown
1 CVE
CVE-2018-20992
GHSA-8c6g-4xc5-w96c
RUSTSEC-2018-0004
Aug 25, 2021
Uninitialized memory exposure in claxon
6.5
/ 10
Medium
Network
Low
None
Required
Unchanged
High
None
None
Affected versions of Claxon made an invalid assumption about the decode buffer size being a multiple of a value read from the bitstream. This could cause parts of the decode buffer to not be overwritten. If the decode buffer was newly allocated and uninitialized, this uninitialized memory could be exposed. This allows an attacker to observe parts of the uninitialized memory in the decoded audio stream. The flaw was corrected by checking that the value read from the bitstream divides the decode buffer size, and returning a format error if it does not. If an error is returned, the decode buffer is not exposed. Regression tests and an additional fuzzer have been added to prevent similar flaws in the future. Fixed in
0.3.2
0.4.1
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.3.0
unknown
Dependencies (2)
|
|
0.2.1
unknown
1 CVE
CVE-2018-20992
GHSA-8c6g-4xc5-w96c
RUSTSEC-2018-0004
Aug 25, 2021
Uninitialized memory exposure in claxon
6.5
/ 10
Medium
Network
Low
None
Required
Unchanged
High
None
None
Affected versions of Claxon made an invalid assumption about the decode buffer size being a multiple of a value read from the bitstream. This could cause parts of the decode buffer to not be overwritten. If the decode buffer was newly allocated and uninitialized, this uninitialized memory could be exposed. This allows an attacker to observe parts of the uninitialized memory in the decoded audio stream. The flaw was corrected by checking that the value read from the bitstream divides the decode buffer size, and returning a format error if it does not. If an error is returned, the decode buffer is not exposed. Regression tests and an additional fuzzer have been added to prevent similar flaws in the future. Fixed in
0.3.2
0.4.1
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.2.1
unknown
Dependencies (1)
|
|
0.2.0
unknown
1 CVE
CVE-2018-20992
GHSA-8c6g-4xc5-w96c
RUSTSEC-2018-0004
Aug 25, 2021
Uninitialized memory exposure in claxon
6.5
/ 10
Medium
Network
Low
None
Required
Unchanged
High
None
None
Affected versions of Claxon made an invalid assumption about the decode buffer size being a multiple of a value read from the bitstream. This could cause parts of the decode buffer to not be overwritten. If the decode buffer was newly allocated and uninitialized, this uninitialized memory could be exposed. This allows an attacker to observe parts of the uninitialized memory in the decoded audio stream. The flaw was corrected by checking that the value read from the bitstream divides the decode buffer size, and returning a format error if it does not. If an error is returned, the decode buffer is not exposed. Regression tests and an additional fuzzer have been added to prevent similar flaws in the future. Fixed in
0.3.2
0.4.1
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.2.0
unknown
Dependencies (1)
|
|
0.1.0
unknown
1 CVE
CVE-2018-20992
GHSA-8c6g-4xc5-w96c
RUSTSEC-2018-0004
Aug 25, 2021
Uninitialized memory exposure in claxon
6.5
/ 10
Medium
Network
Low
None
Required
Unchanged
High
None
None
Affected versions of Claxon made an invalid assumption about the decode buffer size being a multiple of a value read from the bitstream. This could cause parts of the decode buffer to not be overwritten. If the decode buffer was newly allocated and uninitialized, this uninitialized memory could be exposed. This allows an attacker to observe parts of the uninitialized memory in the decoded audio stream. The flaw was corrected by checking that the value read from the bitstream divides the decode buffer size, and returning a format error if it does not. If an error is returned, the decode buffer is not exposed. Regression tests and an additional fuzzer have been added to prevent similar flaws in the future. Fixed in
0.3.2
0.4.1
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.1.0
unknown
Dependencies (1)
|
|
0.0.1
unknown
1 CVE
CVE-2018-20992
GHSA-8c6g-4xc5-w96c
RUSTSEC-2018-0004
Aug 25, 2021
Uninitialized memory exposure in claxon
6.5
/ 10
Medium
Network
Low
None
Required
Unchanged
High
None
None
Affected versions of Claxon made an invalid assumption about the decode buffer size being a multiple of a value read from the bitstream. This could cause parts of the decode buffer to not be overwritten. If the decode buffer was newly allocated and uninitialized, this uninitialized memory could be exposed. This allows an attacker to observe parts of the uninitialized memory in the decoded audio stream. The flaw was corrected by checking that the value read from the bitstream divides the decode buffer size, and returning a format error if it does not. If an error is returned, the decode buffer is not exposed. Regression tests and an additional fuzzer have been added to prevent similar flaws in the future. Fixed in
0.3.2
0.4.1
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.0.1
unknown
|