crayon
Activity
- Latest release
- 7y ago
- Total releases
- 17
- Cadence
- ~23 days
- Last 12 months
- 0
Details
- License
- Apache-2.0
- First release
- Mar 07, 2017
| Version | Released | |
|---|---|---|
0.7.1
unknown
2 CVEs
GHSA-xfhw-6mc4-mgxf
RUSTSEC-2024-0018
Apr 05, 2024
crayon: ObjectPool creates uninitialized memory when freeing objects
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
As of version 0.6.0, the ObjectPool explicitly creates an uninitialized instance of its type parameter when it attempts to free an object, and swaps it into the storage. This causes instant undefined behavior due to reading the uninitialized memory in order to write it to the pool storage. Extremely basic usage of the crate can trigger this issue, e.g. this code from a doctest: The Clippy warning for this code was silenced in commit c2fde19caf6149d91faa504263f0bc5cafc35de5. Discovered via https://asan.saethlin.dev/ub?crate=crayon&version=0.7.1 References Updated Apr 11, 2024 · Source: OSV.dev
CVE-2020-35889
GHSA-m833-jv95-mfjh
RUSTSEC-2020-0037
Aug 25, 2021
Memory safety violation in crayon
8.1
/ 10
High
Network
High
None
None
Unchanged
High
High
High
An issue was discovered in the crayon crate through 2020-08-31 for Rust. A TOCTOU issue has a resultant memory safety violation via HandleLike. References Updated Nov 08, 2023 · Source: OSV.dev |
0.7.1
unknown
Dependencies (19)
+ 11 more |
|
0.7.0
unknown
2 CVEs
GHSA-xfhw-6mc4-mgxf
RUSTSEC-2024-0018
Apr 05, 2024
crayon: ObjectPool creates uninitialized memory when freeing objects
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
As of version 0.6.0, the ObjectPool explicitly creates an uninitialized instance of its type parameter when it attempts to free an object, and swaps it into the storage. This causes instant undefined behavior due to reading the uninitialized memory in order to write it to the pool storage. Extremely basic usage of the crate can trigger this issue, e.g. this code from a doctest: The Clippy warning for this code was silenced in commit c2fde19caf6149d91faa504263f0bc5cafc35de5. Discovered via https://asan.saethlin.dev/ub?crate=crayon&version=0.7.1 References Updated Apr 11, 2024 · Source: OSV.dev
CVE-2020-35889
GHSA-m833-jv95-mfjh
RUSTSEC-2020-0037
Aug 25, 2021
Memory safety violation in crayon
8.1
/ 10
High
Network
High
None
None
Unchanged
High
High
High
An issue was discovered in the crayon crate through 2020-08-31 for Rust. A TOCTOU issue has a resultant memory safety violation via HandleLike. References Updated Nov 08, 2023 · Source: OSV.dev |
0.7.0
unknown
Dependencies (19)
+ 11 more |
|
0.6.0
unknown
2 CVEs
GHSA-xfhw-6mc4-mgxf
RUSTSEC-2024-0018
Apr 05, 2024
crayon: ObjectPool creates uninitialized memory when freeing objects
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
As of version 0.6.0, the ObjectPool explicitly creates an uninitialized instance of its type parameter when it attempts to free an object, and swaps it into the storage. This causes instant undefined behavior due to reading the uninitialized memory in order to write it to the pool storage. Extremely basic usage of the crate can trigger this issue, e.g. this code from a doctest: The Clippy warning for this code was silenced in commit c2fde19caf6149d91faa504263f0bc5cafc35de5. Discovered via https://asan.saethlin.dev/ub?crate=crayon&version=0.7.1 References Updated Apr 11, 2024 · Source: OSV.dev
CVE-2020-35889
GHSA-m833-jv95-mfjh
RUSTSEC-2020-0037
Aug 25, 2021
Memory safety violation in crayon
8.1
/ 10
High
Network
High
None
None
Unchanged
High
High
High
An issue was discovered in the crayon crate through 2020-08-31 for Rust. A TOCTOU issue has a resultant memory safety violation via HandleLike. References Updated Nov 08, 2023 · Source: OSV.dev |
0.6.0
unknown
Dependencies (10)
+ 2 more |
|
0.5.1
unknown
1 CVE
CVE-2020-35889
GHSA-m833-jv95-mfjh
RUSTSEC-2020-0037
Aug 25, 2021
Memory safety violation in crayon
8.1
/ 10
High
Network
High
None
None
Unchanged
High
High
High
An issue was discovered in the crayon crate through 2020-08-31 for Rust. A TOCTOU issue has a resultant memory safety violation via HandleLike. References Updated Nov 08, 2023 · Source: OSV.dev |
0.5.1
unknown
Dependencies (10)
+ 2 more |
|
0.5.0
unknown
1 CVE
CVE-2020-35889
GHSA-m833-jv95-mfjh
RUSTSEC-2020-0037
Aug 25, 2021
Memory safety violation in crayon
8.1
/ 10
High
Network
High
None
None
Unchanged
High
High
High
An issue was discovered in the crayon crate through 2020-08-31 for Rust. A TOCTOU issue has a resultant memory safety violation via HandleLike. References Updated Nov 08, 2023 · Source: OSV.dev |
0.5.0
unknown
Dependencies (10)
+ 2 more |
|
0.4.0
unknown
1 CVE
CVE-2020-35889
GHSA-m833-jv95-mfjh
RUSTSEC-2020-0037
Aug 25, 2021
Memory safety violation in crayon
8.1
/ 10
High
Network
High
None
None
Unchanged
High
High
High
An issue was discovered in the crayon crate through 2020-08-31 for Rust. A TOCTOU issue has a resultant memory safety violation via HandleLike. References Updated Nov 08, 2023 · Source: OSV.dev |
0.4.0
unknown
Dependencies (8)
|
|
0.3.0
unknown
1 CVE
CVE-2020-35889
GHSA-m833-jv95-mfjh
RUSTSEC-2020-0037
Aug 25, 2021
Memory safety violation in crayon
8.1
/ 10
High
Network
High
None
None
Unchanged
High
High
High
An issue was discovered in the crayon crate through 2020-08-31 for Rust. A TOCTOU issue has a resultant memory safety violation via HandleLike. References Updated Nov 08, 2023 · Source: OSV.dev |
0.3.0
unknown
Dependencies (9)
+ 1 more |
|
0.2.1
unknown
1 CVE
CVE-2020-35889
GHSA-m833-jv95-mfjh
RUSTSEC-2020-0037
Aug 25, 2021
Memory safety violation in crayon
8.1
/ 10
High
Network
High
None
None
Unchanged
High
High
High
An issue was discovered in the crayon crate through 2020-08-31 for Rust. A TOCTOU issue has a resultant memory safety violation via HandleLike. References Updated Nov 08, 2023 · Source: OSV.dev |
0.2.1
unknown
Dependencies (10)
+ 2 more |
|
0.2.0
unknown
1 CVE
CVE-2020-35889
GHSA-m833-jv95-mfjh
RUSTSEC-2020-0037
Aug 25, 2021
Memory safety violation in crayon
8.1
/ 10
High
Network
High
None
None
Unchanged
High
High
High
An issue was discovered in the crayon crate through 2020-08-31 for Rust. A TOCTOU issue has a resultant memory safety violation via HandleLike. References Updated Nov 08, 2023 · Source: OSV.dev |
0.2.0
unknown
Dependencies (10)
+ 2 more |
|
0.1.0
unknown
1 CVE
CVE-2020-35889
GHSA-m833-jv95-mfjh
RUSTSEC-2020-0037
Aug 25, 2021
Memory safety violation in crayon
8.1
/ 10
High
Network
High
None
None
Unchanged
High
High
High
An issue was discovered in the crayon crate through 2020-08-31 for Rust. A TOCTOU issue has a resultant memory safety violation via HandleLike. References Updated Nov 08, 2023 · Source: OSV.dev |
0.1.0
unknown
Dependencies (10)
+ 2 more |
|
0.0.7
unknown
1 CVE
CVE-2020-35889
GHSA-m833-jv95-mfjh
RUSTSEC-2020-0037
Aug 25, 2021
Memory safety violation in crayon
8.1
/ 10
High
Network
High
None
None
Unchanged
High
High
High
An issue was discovered in the crayon crate through 2020-08-31 for Rust. A TOCTOU issue has a resultant memory safety violation via HandleLike. References Updated Nov 08, 2023 · Source: OSV.dev |
0.0.7
unknown
Dependencies (11)
+ 3 more |
|
0.0.6
unknown
1 CVE
CVE-2020-35889
GHSA-m833-jv95-mfjh
RUSTSEC-2020-0037
Aug 25, 2021
Memory safety violation in crayon
8.1
/ 10
High
Network
High
None
None
Unchanged
High
High
High
An issue was discovered in the crayon crate through 2020-08-31 for Rust. A TOCTOU issue has a resultant memory safety violation via HandleLike. References Updated Nov 08, 2023 · Source: OSV.dev |
0.0.6
unknown
Dependencies (11)
+ 3 more |
|
0.0.5
unknown
1 CVE
CVE-2020-35889
GHSA-m833-jv95-mfjh
RUSTSEC-2020-0037
Aug 25, 2021
Memory safety violation in crayon
8.1
/ 10
High
Network
High
None
None
Unchanged
High
High
High
An issue was discovered in the crayon crate through 2020-08-31 for Rust. A TOCTOU issue has a resultant memory safety violation via HandleLike. References Updated Nov 08, 2023 · Source: OSV.dev |
0.0.5
unknown
Dependencies (14)
+ 6 more |
|
0.0.4
unknown
1 CVE
CVE-2020-35889
GHSA-m833-jv95-mfjh
RUSTSEC-2020-0037
Aug 25, 2021
Memory safety violation in crayon
8.1
/ 10
High
Network
High
None
None
Unchanged
High
High
High
An issue was discovered in the crayon crate through 2020-08-31 for Rust. A TOCTOU issue has a resultant memory safety violation via HandleLike. References Updated Nov 08, 2023 · Source: OSV.dev |
0.0.4
unknown
Dependencies (18)
+ 10 more |
|
0.0.3
unknown
1 CVE
CVE-2020-35889
GHSA-m833-jv95-mfjh
RUSTSEC-2020-0037
Aug 25, 2021
Memory safety violation in crayon
8.1
/ 10
High
Network
High
None
None
Unchanged
High
High
High
An issue was discovered in the crayon crate through 2020-08-31 for Rust. A TOCTOU issue has a resultant memory safety violation via HandleLike. References Updated Nov 08, 2023 · Source: OSV.dev |
0.0.3
unknown
Dependencies (18)
+ 10 more |
|
0.0.2
unknown
1 CVE
CVE-2020-35889
GHSA-m833-jv95-mfjh
RUSTSEC-2020-0037
Aug 25, 2021
Memory safety violation in crayon
8.1
/ 10
High
Network
High
None
None
Unchanged
High
High
High
An issue was discovered in the crayon crate through 2020-08-31 for Rust. A TOCTOU issue has a resultant memory safety violation via HandleLike. References Updated Nov 08, 2023 · Source: OSV.dev |
0.0.2
unknown
Dependencies (21)
+ 13 more |
|
0.0.1
unknown
1 CVE
CVE-2020-35889
GHSA-m833-jv95-mfjh
RUSTSEC-2020-0037
Aug 25, 2021
Memory safety violation in crayon
8.1
/ 10
High
Network
High
None
None
Unchanged
High
High
High
An issue was discovered in the crayon crate through 2020-08-31 for Rust. A TOCTOU issue has a resultant memory safety violation via HandleLike. References Updated Nov 08, 2023 · Source: OSV.dev |
0.0.1
unknown
Dependencies (18)
+ 10 more |