Skip to content

Product

crates.io linux-loader vulnerabilities

1 published CVE affecting crates.io linux-loader, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest crates.io linux-loader CVEs

Newest publication first

  1. CVE-2022-23523 rust-vmm linux-loader vulnerable to Out-of-bounds Read

    Published
    MediumCVSS 5.5 EPSS 0.22%

    In versions prior to 0.8.1, the linux-loader crate uses the offsets and sizes provided in the ELF headers to determine the offsets to read from. If those offsets point beyond the end of the file this could lead to Virtual Machine Monitors using the linux-loader crate entering an...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.