Attestkeep
Langue : Français
S'inscrire

Vulnérabilités / CVE-2026-41677

critique

CVE-2026-41677

rust-openssl provides OpenSSL bindings for the Rust programming langua ...

Publiée Modifiée CWE 125, 1284
Dans la Trivy database depuis au moins le 24 oct. 2026, 07:11 UTCLa date d'entrée avant ce build n'est pas enregistrée.

Sévérité par source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
GHSA1.7CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:U

Le label propre à Trivy est CRITICAL. Critique selon NVD. Plus basse selon Ubuntu (moyenne), GHSA (faible).

Description

rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.0 to before 0.10.78, the *_from_pem_callback APIs did not validate the length returned by the user's callback. A password callback that returns a value larger than the buffer it was given can cause some versions of OpenSSL to over-read this buffer. OpenSSL 3.x is not affected by this. This vulnerability is fixed in 0.10.78.

Paquets affectés et versions corrigées

SourcePaquetCorrigé en
cargo::GitHub Security Advisory Rustopenssl0.10.78
chainguardbootc, deno, guestproxyagent et 14 autres1.10.0-r5 et 16 autres
debian 11rust-opensslpas de correctif indiqué
debian 12rust-opensslpas de correctif indiqué
debian 13rust-opensslpas de correctif indiqué
debian 14rust-openssl0.10.78-1
echorust-opensslpas de correctif indiqué
minimospeerdb-server, pgdog, pgdog-fips et 2 autres0.36.25-r0 et 3 autres
rapidfort debian 12rust-openssl0:0.10.78-1
rapidfort debian 13rust-openssl0:0.10.78-1
rapidfort fedora 43afterburn, afterburn-dracut, cargo-vendor-filterer et 60 autres5.10.0-7.fc43 et 12 autres
rapidfort Oracle Linux 10cargo-vendor-filterer, rpki, rust-cargo-vendor-filterer+default-devel et 34 autres0.5.18-5.el10_3 et 3 autres
Afficher les 181 entrées de 19 sources
SourcePaquetCorrigé en
cargo::GitHub Security Advisory Rustopenssl0.10.78
chainguardbootc1.10.0-r5
chainguarddeno2.7.13-r0
chainguardguestproxyagent1.0.43-r0
chainguardkomodo2.1.2-r2
chainguardrpm-sequoia1.10.1-r10
chainguardrustls-openssl-client1.0.0-r4
chainguardrustup1.29.0-r5
chainguardsccache0.14.0-r4
chainguardsdp-k8s-injector1.3.10-r5
chainguardsentry-cli3.4.0-r0
chainguardsqlx0.8.6-r5
chainguardtypst0.14.2-r7
chainguardvalkey-ldap1.0.0-r5
chainguardvector0.55.0-r1
chainguardztunnel-fips-1.271.27.9-r7
chainguardztunnel-fips-1.281.28.5-r2
chainguardztunnel-fips-1.291.29.1-r3
debian 11rust-opensslpas de correctif indiqué
debian 12rust-opensslpas de correctif indiqué
debian 13rust-opensslpas de correctif indiqué
debian 14rust-openssl0.10.78-1
echorust-opensslpas de correctif indiqué
minimospeerdb-server0.36.25-r0
minimospgdog0.1.39-r0
minimospgdog-fips0.1.39-r0
minimossccache0.18.0-r0
minimosztunnel-fips-1.291.29.3-r0
rapidfort debian 12rust-openssl0:0.10.78-1
rapidfort debian 13rust-openssl0:0.10.78-1
rapidfort fedora 43afterburn5.10.0-7.fc43
rapidfort fedora 43afterburn-dracut5.10.0-7.fc43
rapidfort fedora 43cargo-vendor-filterer0.5.18-5.fc43
rapidfort fedora 43coreos-installer0.26.0-2.fc43
rapidfort fedora 43coreos-installer-bootinfra0.26.0-2.fc43
rapidfort fedora 43coreos-installer-dracut0.26.0-2.fc43
rapidfort fedora 43eif_build0.2.1-7.fc43
rapidfort fedora 43keylime-agent-rust0.2.9-2.fc43
rapidfort fedora 43keylime-agent-rust-common0.2.9-2.fc43
rapidfort fedora 43keylime-agent-rust-ima-emulator0.2.9-2.fc43
rapidfort fedora 43keylime-agent-rust-push0.2.9-2.fc43
rapidfort fedora 43nu0.99.1-17.fc43
rapidfort fedora 43oo7-cli0.4.3-5.fc43
rapidfort fedora 43rpki0.18.6-4.fc43
rapidfort fedora 43rust-afterburn5.10.0-7.fc43
rapidfort fedora 43rust-cargo-vendor-filterer0.5.18-5.fc43
rapidfort fedora 43rust-cargo-vendor-filterer+default-devel0.5.18-5.fc43
rapidfort fedora 43rust-cargo-vendor-filterer-devel0.5.18-5.fc43
rapidfort fedora 43rust-coreos-installer0.26.0-2.fc43
rapidfort fedora 43rust-eif_build0.2.1-7.fc43
rapidfort fedora 43rust-nu0.99.1-17.fc43
rapidfort fedora 43rust-oo7-cli0.4.3-5.fc43
rapidfort fedora 43rust-openssl0.10.78-1.fc43
rapidfort fedora 43rust-openssl+bindgen-devel0.10.78-1.fc43
rapidfort fedora 43rust-openssl+default-devel0.10.78-1.fc43
rapidfort fedora 43rust-openssl+v101-devel0.10.78-1.fc43
rapidfort fedora 43rust-openssl+v102-devel0.10.78-1.fc43
rapidfort fedora 43rust-openssl+v110-devel0.10.78-1.fc43
rapidfort fedora 43rust-openssl+v111-devel0.10.78-1.fc43
rapidfort fedora 43rust-openssl-devel0.10.78-1.fc43
rapidfort fedora 43rust-openssl-sys0.9.114-1.fc43
rapidfort fedora 43rust-openssl-sys+bindgen-devel0.9.114-1.fc43
rapidfort fedora 43rust-openssl-sys+default-devel0.9.114-1.fc43
rapidfort fedora 43rust-openssl-sys-devel0.9.114-1.fc43
rapidfort fedora 43rust-rpki0.18.6-4.fc43
rapidfort fedora 43rust-rpki+__windows_ci_all-devel0.18.6-4.fc43
rapidfort fedora 43rust-rpki+arbitrary-devel0.18.6-4.fc43
rapidfort fedora 43rust-rpki+bcder-devel0.18.6-4.fc43
rapidfort fedora 43rust-rpki+ca-devel0.18.6-4.fc43
rapidfort fedora 43rust-rpki+compat-devel0.18.6-4.fc43
rapidfort fedora 43rust-rpki+crypto-devel0.18.6-4.fc43
rapidfort fedora 43rust-rpki+default-devel0.18.6-4.fc43
rapidfort fedora 43rust-rpki+futures-util-devel0.18.6-4.fc43
rapidfort fedora 43rust-rpki+openssl-devel0.18.6-4.fc43
rapidfort fedora 43rust-rpki+quick-xml-devel0.18.6-4.fc43
rapidfort fedora 43rust-rpki+repository-devel0.18.6-4.fc43
rapidfort fedora 43rust-rpki+ring-devel0.18.6-4.fc43
rapidfort fedora 43rust-rpki+rrdp-devel0.18.6-4.fc43
rapidfort fedora 43rust-rpki+rtr-devel0.18.6-4.fc43
rapidfort fedora 43rust-rpki+serde-devel0.18.6-4.fc43
rapidfort fedora 43rust-rpki+serde-support-devel0.18.6-4.fc43
rapidfort fedora 43rust-rpki+serde_json-devel0.18.6-4.fc43
rapidfort fedora 43rust-rpki+slurm-devel0.18.6-4.fc43
rapidfort fedora 43rust-rpki+softkeys-devel0.18.6-4.fc43
rapidfort fedora 43rust-rpki+tokio-devel0.18.6-4.fc43
rapidfort fedora 43rust-rpki+untrusted-devel0.18.6-4.fc43
rapidfort fedora 43rust-rpki+xml-devel0.18.6-4.fc43
rapidfort fedora 43rust-rpki-devel0.18.6-4.fc43
rapidfort fedora 43rust-sevctl0.6.2-7.fc43
rapidfort fedora 43rust-tealdeer1.7.3-2.fc43
rapidfort fedora 43rustup1.29.0-4.fc43
rapidfort fedora 43sevctl0.6.2-7.fc43
rapidfort fedora 43tealdeer1.7.3-2.fc43
rapidfort Oracle Linux 10cargo-vendor-filterer0.5.18-5.el10_3
rapidfort Oracle Linux 10rpki0.18.6-4.el10_3
rapidfort Oracle Linux 10rust-cargo-vendor-filterer+default-devel0.5.18-5.el10_3
rapidfort Oracle Linux 10rust-cargo-vendor-filterer-devel0.5.18-5.el10_3
rapidfort Oracle Linux 10rust-openssl+bindgen-devel0.10.78-1.el10_2
rapidfort Oracle Linux 10rust-openssl+default-devel0.10.78-1.el10_2
rapidfort Oracle Linux 10rust-openssl+v101-devel0.10.78-1.el10_2
rapidfort Oracle Linux 10rust-openssl+v102-devel0.10.78-1.el10_2
rapidfort Oracle Linux 10rust-openssl+v110-devel0.10.78-1.el10_2
rapidfort Oracle Linux 10rust-openssl+v111-devel0.10.78-1.el10_2
rapidfort Oracle Linux 10rust-openssl-devel0.10.78-1.el10_2
rapidfort Oracle Linux 10rust-openssl-sys+bindgen-devel0.9.114-1.el10_3
rapidfort Oracle Linux 10rust-openssl-sys+default-devel0.9.114-1.el10_3
rapidfort Oracle Linux 10rust-openssl-sys-devel0.9.114-1.el10_3
rapidfort Oracle Linux 10rust-rpki+__windows_ci_all-devel0.18.6-4.el10_3
rapidfort Oracle Linux 10rust-rpki+arbitrary-devel0.18.6-4.el10_3
rapidfort Oracle Linux 10rust-rpki+bcder-devel0.18.6-4.el10_3
rapidfort Oracle Linux 10rust-rpki+ca-devel0.18.6-4.el10_3
rapidfort Oracle Linux 10rust-rpki+compat-devel0.18.6-4.el10_3
rapidfort Oracle Linux 10rust-rpki+crypto-devel0.18.6-4.el10_3
rapidfort Oracle Linux 10rust-rpki+default-devel0.18.6-4.el10_3
rapidfort Oracle Linux 10rust-rpki+futures-util-devel0.18.6-4.el10_3
rapidfort Oracle Linux 10rust-rpki+openssl-devel0.18.6-4.el10_3
rapidfort Oracle Linux 10rust-rpki+quick-xml-devel0.18.6-4.el10_3
rapidfort Oracle Linux 10rust-rpki+repository-devel0.18.6-4.el10_3
rapidfort Oracle Linux 10rust-rpki+ring-devel0.18.6-4.el10_3
rapidfort Oracle Linux 10rust-rpki+rrdp-devel0.18.6-4.el10_3
rapidfort Oracle Linux 10rust-rpki+rtr-devel0.18.6-4.el10_3
rapidfort Oracle Linux 10rust-rpki+serde-devel0.18.6-4.el10_3
rapidfort Oracle Linux 10rust-rpki+serde-support-devel0.18.6-4.el10_3
rapidfort Oracle Linux 10rust-rpki+serde_json-devel0.18.6-4.el10_3
rapidfort Oracle Linux 10rust-rpki+slurm-devel0.18.6-4.el10_3
rapidfort Oracle Linux 10rust-rpki+softkeys-devel0.18.6-4.el10_3
rapidfort Oracle Linux 10rust-rpki+tokio-devel0.18.6-4.el10_3
rapidfort Oracle Linux 10rust-rpki+untrusted-devel0.18.6-4.el10_3
rapidfort Oracle Linux 10rust-rpki+xml-devel0.18.6-4.el10_3
rapidfort Oracle Linux 10rust-rpki-devel0.18.6-4.el10_3
rapidfort Oracle Linux 9cargo-vendor-filterer0.5.18-5.el9
rapidfort Oracle Linux 9eif_build0.2.1-7.el9
rapidfort Oracle Linux 9nu0.99.1-17.el9
rapidfort Oracle Linux 9rpki0.18.6-4.el9
rapidfort Oracle Linux 9rust-cargo-vendor-filterer+default-devel0.5.18-5.el9
rapidfort Oracle Linux 9rust-cargo-vendor-filterer-devel0.5.18-5.el9
rapidfort Oracle Linux 9rust-openssl+bindgen-devel0.10.78-1.el9
rapidfort Oracle Linux 9rust-openssl+default-devel0.10.78-1.el9
rapidfort Oracle Linux 9rust-openssl+v101-devel0.10.78-1.el9
rapidfort Oracle Linux 9rust-openssl+v102-devel0.10.78-1.el9
rapidfort Oracle Linux 9rust-openssl+v110-devel0.10.78-1.el9
rapidfort Oracle Linux 9rust-openssl+v111-devel0.10.78-1.el9
rapidfort Oracle Linux 9rust-openssl-devel0.10.78-1.el9
rapidfort Oracle Linux 9rust-openssl-sys+bindgen-devel0.9.114-1.el9
rapidfort Oracle Linux 9rust-openssl-sys+default-devel0.9.114-1.el9
rapidfort Oracle Linux 9rust-openssl-sys-devel0.9.114-1.el9
rapidfort Oracle Linux 9rust-rpki+__windows_ci_all-devel0.18.6-4.el9
rapidfort Oracle Linux 9rust-rpki+arbitrary-devel0.18.6-4.el9
rapidfort Oracle Linux 9rust-rpki+bcder-devel0.18.6-4.el9
rapidfort Oracle Linux 9rust-rpki+ca-devel0.18.6-4.el9
rapidfort Oracle Linux 9rust-rpki+compat-devel0.18.6-4.el9
rapidfort Oracle Linux 9rust-rpki+crypto-devel0.18.6-4.el9
rapidfort Oracle Linux 9rust-rpki+default-devel0.18.6-4.el9
rapidfort Oracle Linux 9rust-rpki+futures-util-devel0.18.6-4.el9
rapidfort Oracle Linux 9rust-rpki+openssl-devel0.18.6-4.el9
rapidfort Oracle Linux 9rust-rpki+quick-xml-devel0.18.6-4.el9
rapidfort Oracle Linux 9rust-rpki+repository-devel0.18.6-4.el9
rapidfort Oracle Linux 9rust-rpki+ring-devel0.18.6-4.el9
rapidfort Oracle Linux 9rust-rpki+rrdp-devel0.18.6-4.el9
rapidfort Oracle Linux 9rust-rpki+rtr-devel0.18.6-4.el9
rapidfort Oracle Linux 9rust-rpki+serde-devel0.18.6-4.el9
rapidfort Oracle Linux 9rust-rpki+serde-support-devel0.18.6-4.el9
rapidfort Oracle Linux 9rust-rpki+serde_json-devel0.18.6-4.el9
rapidfort Oracle Linux 9rust-rpki+slurm-devel0.18.6-4.el9
rapidfort Oracle Linux 9rust-rpki+softkeys-devel0.18.6-4.el9
rapidfort Oracle Linux 9rust-rpki+tokio-devel0.18.6-4.el9
rapidfort Oracle Linux 9rust-rpki+untrusted-devel0.18.6-4.el9
rapidfort Oracle Linux 9rust-rpki+xml-devel0.18.6-4.el9
rapidfort Oracle Linux 9rust-rpki-devel0.18.6-4.el9
ubuntu 20.04-ESMrust-opensslpas de correctif indiqué
ubuntu 22.04rust-opensslpas de correctif indiqué
ubuntu 24.04rust-opensslpas de correctif indiqué
ubuntu 26.04rust-opensslpas de correctif indiqué
ubuntu 26.10rust-opensslpas de correctif indiqué
wolfideno2.7.13-r0
wolfirpm-sequoia1.10.1-r10
wolfirustup1.29.0-r5
wolfisccache0.14.0-r4
wolfisdp-k8s-injector1.3.10-r5
wolfisqlx0.8.6-r5
wolfivector0.55.0-r1

Références

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.