OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2025-12-30 08:13:58 +01:00
Code Issues Packages Projects Releases Wiki Activity

[portaudio] add build script RCE

Browse Source
This commit is contained in:
Jake McGinty
2019-06-06 16:54:16 +09:00
parent 561a9d6e5b
commit 56350b2803
1 changed files with 15 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
crates/portaudio/RUSTSEC-0000-0000.toml Normal file
View File

@@ -0,0 +1,15 @@
[advisory]
id = "RUSTSEC-0000-0000"
package = "portaudio"
date = "2016-08-01"
title = "HTTP download and execution allows MitM RCE"
description = """
The build script in the portaudio crate will attempt to download via HTTP
the portaudio source and build it.
A Mallory in the middle can intercept the download with their own archive
and get RCE.
"""
patched_versions = []
url = "https://github.com/RustAudio/rust-portaudio/issues/144"
keywords = ["ssl", "mitm"]