Attestkeep
Dil: Türkçe
Kayıt ol

Zafiyetler / CVE-2026-41677

kritik

CVE-2026-41677

rust-openssl provides OpenSSL bindings for the Rust programming langua ...

Yayın Değişiklik CWE 125, 1284
En geç 24 Eki 2026, 07:11 UTC tarihinden beri Trivy database'indeO derlemeden önce ne zaman girdiği kayıtlı değil.

Kaynağa göre önem derecesi

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
GHSA1.7CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:U

Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD. Daha düşük diyenler: Ubuntu (orta), GHSA (düşük).

Açıklama

rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.0 to before 0.10.78, the *_from_pem_callback APIs did not validate the length returned by the user's callback. A password callback that returns a value larger than the buffer it was given can cause some versions of OpenSSL to over-read this buffer. OpenSSL 3.x is not affected by this. This vulnerability is fixed in 0.10.78.

Etkilenen paketler ve düzeltilmiş sürümler

KaynakPaketDüzeltildiği sürüm
cargo::GitHub Security Advisory Rustopenssl0.10.78
chainguardbootc, deno, guestproxyagent ve 14 tane daha1.10.0-r5 ve 16 tane daha
debian 11rust-openssldüzeltme belirtilmemiş
debian 12rust-openssldüzeltme belirtilmemiş
debian 13rust-openssldüzeltme belirtilmemiş
debian 14rust-openssl0.10.78-1
echorust-openssldüzeltme belirtilmemiş
minimospeerdb-server, pgdog, pgdog-fips ve 2 tane daha0.36.25-r0 ve 3 tane daha
rapidfort debian 12rust-openssl0:0.10.78-1
rapidfort debian 13rust-openssl0:0.10.78-1
rapidfort fedora 43afterburn, afterburn-dracut, cargo-vendor-filterer ve 60 tane daha5.10.0-7.fc43 ve 12 tane daha
rapidfort Oracle Linux 10cargo-vendor-filterer, rpki, rust-cargo-vendor-filterer+default-devel ve 34 tane daha0.5.18-5.el10_3 ve 3 tane daha
19 kaynaktaki 181 kaydın hepsini göster
KaynakPaketDüzeltildiği sürüm
cargo::GitHub Security Advisory Rustopenssl0.10.78
chainguardbootc1.10.0-r5
chainguarddeno2.7.13-r0
chainguardguestproxyagent1.0.43-r0
chainguardkomodo2.1.2-r2
chainguardrpm-sequoia1.10.1-r10
chainguardrustls-openssl-client1.0.0-r4
chainguardrustup1.29.0-r5
chainguardsccache0.14.0-r4
chainguardsdp-k8s-injector1.3.10-r5
chainguardsentry-cli3.4.0-r0
chainguardsqlx0.8.6-r5
chainguardtypst0.14.2-r7
chainguardvalkey-ldap1.0.0-r5
chainguardvector0.55.0-r1
chainguardztunnel-fips-1.271.27.9-r7
chainguardztunnel-fips-1.281.28.5-r2
chainguardztunnel-fips-1.291.29.1-r3
debian 11rust-openssldüzeltme belirtilmemiş
debian 12rust-openssldüzeltme belirtilmemiş
debian 13rust-openssldüzeltme belirtilmemiş
debian 14rust-openssl0.10.78-1
echorust-openssldüzeltme belirtilmemiş
minimospeerdb-server0.36.25-r0
minimospgdog0.1.39-r0
minimospgdog-fips0.1.39-r0
minimossccache0.18.0-r0
minimosztunnel-fips-1.291.29.3-r0
rapidfort debian 12rust-openssl0:0.10.78-1
rapidfort debian 13rust-openssl0:0.10.78-1
rapidfort fedora 43afterburn5.10.0-7.fc43
rapidfort fedora 43afterburn-dracut5.10.0-7.fc43
rapidfort fedora 43cargo-vendor-filterer0.5.18-5.fc43
rapidfort fedora 43coreos-installer0.26.0-2.fc43
rapidfort fedora 43coreos-installer-bootinfra0.26.0-2.fc43
rapidfort fedora 43coreos-installer-dracut0.26.0-2.fc43
rapidfort fedora 43eif_build0.2.1-7.fc43
rapidfort fedora 43keylime-agent-rust0.2.9-2.fc43
rapidfort fedora 43keylime-agent-rust-common0.2.9-2.fc43
rapidfort fedora 43keylime-agent-rust-ima-emulator0.2.9-2.fc43
rapidfort fedora 43keylime-agent-rust-push0.2.9-2.fc43
rapidfort fedora 43nu0.99.1-17.fc43
rapidfort fedora 43oo7-cli0.4.3-5.fc43
rapidfort fedora 43rpki0.18.6-4.fc43
rapidfort fedora 43rust-afterburn5.10.0-7.fc43
rapidfort fedora 43rust-cargo-vendor-filterer0.5.18-5.fc43
rapidfort fedora 43rust-cargo-vendor-filterer+default-devel0.5.18-5.fc43
rapidfort fedora 43rust-cargo-vendor-filterer-devel0.5.18-5.fc43
rapidfort fedora 43rust-coreos-installer0.26.0-2.fc43
rapidfort fedora 43rust-eif_build0.2.1-7.fc43
rapidfort fedora 43rust-nu0.99.1-17.fc43
rapidfort fedora 43rust-oo7-cli0.4.3-5.fc43
rapidfort fedora 43rust-openssl0.10.78-1.fc43
rapidfort fedora 43rust-openssl+bindgen-devel0.10.78-1.fc43
rapidfort fedora 43rust-openssl+default-devel0.10.78-1.fc43
rapidfort fedora 43rust-openssl+v101-devel0.10.78-1.fc43
rapidfort fedora 43rust-openssl+v102-devel0.10.78-1.fc43
rapidfort fedora 43rust-openssl+v110-devel0.10.78-1.fc43
rapidfort fedora 43rust-openssl+v111-devel0.10.78-1.fc43
rapidfort fedora 43rust-openssl-devel0.10.78-1.fc43
rapidfort fedora 43rust-openssl-sys0.9.114-1.fc43
rapidfort fedora 43rust-openssl-sys+bindgen-devel0.9.114-1.fc43
rapidfort fedora 43rust-openssl-sys+default-devel0.9.114-1.fc43
rapidfort fedora 43rust-openssl-sys-devel0.9.114-1.fc43
rapidfort fedora 43rust-rpki0.18.6-4.fc43
rapidfort fedora 43rust-rpki+__windows_ci_all-devel0.18.6-4.fc43
rapidfort fedora 43rust-rpki+arbitrary-devel0.18.6-4.fc43
rapidfort fedora 43rust-rpki+bcder-devel0.18.6-4.fc43
rapidfort fedora 43rust-rpki+ca-devel0.18.6-4.fc43
rapidfort fedora 43rust-rpki+compat-devel0.18.6-4.fc43
rapidfort fedora 43rust-rpki+crypto-devel0.18.6-4.fc43
rapidfort fedora 43rust-rpki+default-devel0.18.6-4.fc43
rapidfort fedora 43rust-rpki+futures-util-devel0.18.6-4.fc43
rapidfort fedora 43rust-rpki+openssl-devel0.18.6-4.fc43
rapidfort fedora 43rust-rpki+quick-xml-devel0.18.6-4.fc43
rapidfort fedora 43rust-rpki+repository-devel0.18.6-4.fc43
rapidfort fedora 43rust-rpki+ring-devel0.18.6-4.fc43
rapidfort fedora 43rust-rpki+rrdp-devel0.18.6-4.fc43
rapidfort fedora 43rust-rpki+rtr-devel0.18.6-4.fc43
rapidfort fedora 43rust-rpki+serde-devel0.18.6-4.fc43
rapidfort fedora 43rust-rpki+serde-support-devel0.18.6-4.fc43
rapidfort fedora 43rust-rpki+serde_json-devel0.18.6-4.fc43
rapidfort fedora 43rust-rpki+slurm-devel0.18.6-4.fc43
rapidfort fedora 43rust-rpki+softkeys-devel0.18.6-4.fc43
rapidfort fedora 43rust-rpki+tokio-devel0.18.6-4.fc43
rapidfort fedora 43rust-rpki+untrusted-devel0.18.6-4.fc43
rapidfort fedora 43rust-rpki+xml-devel0.18.6-4.fc43
rapidfort fedora 43rust-rpki-devel0.18.6-4.fc43
rapidfort fedora 43rust-sevctl0.6.2-7.fc43
rapidfort fedora 43rust-tealdeer1.7.3-2.fc43
rapidfort fedora 43rustup1.29.0-4.fc43
rapidfort fedora 43sevctl0.6.2-7.fc43
rapidfort fedora 43tealdeer1.7.3-2.fc43
rapidfort Oracle Linux 10cargo-vendor-filterer0.5.18-5.el10_3
rapidfort Oracle Linux 10rpki0.18.6-4.el10_3
rapidfort Oracle Linux 10rust-cargo-vendor-filterer+default-devel0.5.18-5.el10_3
rapidfort Oracle Linux 10rust-cargo-vendor-filterer-devel0.5.18-5.el10_3
rapidfort Oracle Linux 10rust-openssl+bindgen-devel0.10.78-1.el10_2
rapidfort Oracle Linux 10rust-openssl+default-devel0.10.78-1.el10_2
rapidfort Oracle Linux 10rust-openssl+v101-devel0.10.78-1.el10_2
rapidfort Oracle Linux 10rust-openssl+v102-devel0.10.78-1.el10_2
rapidfort Oracle Linux 10rust-openssl+v110-devel0.10.78-1.el10_2
rapidfort Oracle Linux 10rust-openssl+v111-devel0.10.78-1.el10_2
rapidfort Oracle Linux 10rust-openssl-devel0.10.78-1.el10_2
rapidfort Oracle Linux 10rust-openssl-sys+bindgen-devel0.9.114-1.el10_3
rapidfort Oracle Linux 10rust-openssl-sys+default-devel0.9.114-1.el10_3
rapidfort Oracle Linux 10rust-openssl-sys-devel0.9.114-1.el10_3
rapidfort Oracle Linux 10rust-rpki+__windows_ci_all-devel0.18.6-4.el10_3
rapidfort Oracle Linux 10rust-rpki+arbitrary-devel0.18.6-4.el10_3
rapidfort Oracle Linux 10rust-rpki+bcder-devel0.18.6-4.el10_3
rapidfort Oracle Linux 10rust-rpki+ca-devel0.18.6-4.el10_3
rapidfort Oracle Linux 10rust-rpki+compat-devel0.18.6-4.el10_3
rapidfort Oracle Linux 10rust-rpki+crypto-devel0.18.6-4.el10_3
rapidfort Oracle Linux 10rust-rpki+default-devel0.18.6-4.el10_3
rapidfort Oracle Linux 10rust-rpki+futures-util-devel0.18.6-4.el10_3
rapidfort Oracle Linux 10rust-rpki+openssl-devel0.18.6-4.el10_3
rapidfort Oracle Linux 10rust-rpki+quick-xml-devel0.18.6-4.el10_3
rapidfort Oracle Linux 10rust-rpki+repository-devel0.18.6-4.el10_3
rapidfort Oracle Linux 10rust-rpki+ring-devel0.18.6-4.el10_3
rapidfort Oracle Linux 10rust-rpki+rrdp-devel0.18.6-4.el10_3
rapidfort Oracle Linux 10rust-rpki+rtr-devel0.18.6-4.el10_3
rapidfort Oracle Linux 10rust-rpki+serde-devel0.18.6-4.el10_3
rapidfort Oracle Linux 10rust-rpki+serde-support-devel0.18.6-4.el10_3
rapidfort Oracle Linux 10rust-rpki+serde_json-devel0.18.6-4.el10_3
rapidfort Oracle Linux 10rust-rpki+slurm-devel0.18.6-4.el10_3
rapidfort Oracle Linux 10rust-rpki+softkeys-devel0.18.6-4.el10_3
rapidfort Oracle Linux 10rust-rpki+tokio-devel0.18.6-4.el10_3
rapidfort Oracle Linux 10rust-rpki+untrusted-devel0.18.6-4.el10_3
rapidfort Oracle Linux 10rust-rpki+xml-devel0.18.6-4.el10_3
rapidfort Oracle Linux 10rust-rpki-devel0.18.6-4.el10_3
rapidfort Oracle Linux 9cargo-vendor-filterer0.5.18-5.el9
rapidfort Oracle Linux 9eif_build0.2.1-7.el9
rapidfort Oracle Linux 9nu0.99.1-17.el9
rapidfort Oracle Linux 9rpki0.18.6-4.el9
rapidfort Oracle Linux 9rust-cargo-vendor-filterer+default-devel0.5.18-5.el9
rapidfort Oracle Linux 9rust-cargo-vendor-filterer-devel0.5.18-5.el9
rapidfort Oracle Linux 9rust-openssl+bindgen-devel0.10.78-1.el9
rapidfort Oracle Linux 9rust-openssl+default-devel0.10.78-1.el9
rapidfort Oracle Linux 9rust-openssl+v101-devel0.10.78-1.el9
rapidfort Oracle Linux 9rust-openssl+v102-devel0.10.78-1.el9
rapidfort Oracle Linux 9rust-openssl+v110-devel0.10.78-1.el9
rapidfort Oracle Linux 9rust-openssl+v111-devel0.10.78-1.el9
rapidfort Oracle Linux 9rust-openssl-devel0.10.78-1.el9
rapidfort Oracle Linux 9rust-openssl-sys+bindgen-devel0.9.114-1.el9
rapidfort Oracle Linux 9rust-openssl-sys+default-devel0.9.114-1.el9
rapidfort Oracle Linux 9rust-openssl-sys-devel0.9.114-1.el9
rapidfort Oracle Linux 9rust-rpki+__windows_ci_all-devel0.18.6-4.el9
rapidfort Oracle Linux 9rust-rpki+arbitrary-devel0.18.6-4.el9
rapidfort Oracle Linux 9rust-rpki+bcder-devel0.18.6-4.el9
rapidfort Oracle Linux 9rust-rpki+ca-devel0.18.6-4.el9
rapidfort Oracle Linux 9rust-rpki+compat-devel0.18.6-4.el9
rapidfort Oracle Linux 9rust-rpki+crypto-devel0.18.6-4.el9
rapidfort Oracle Linux 9rust-rpki+default-devel0.18.6-4.el9
rapidfort Oracle Linux 9rust-rpki+futures-util-devel0.18.6-4.el9
rapidfort Oracle Linux 9rust-rpki+openssl-devel0.18.6-4.el9
rapidfort Oracle Linux 9rust-rpki+quick-xml-devel0.18.6-4.el9
rapidfort Oracle Linux 9rust-rpki+repository-devel0.18.6-4.el9
rapidfort Oracle Linux 9rust-rpki+ring-devel0.18.6-4.el9
rapidfort Oracle Linux 9rust-rpki+rrdp-devel0.18.6-4.el9
rapidfort Oracle Linux 9rust-rpki+rtr-devel0.18.6-4.el9
rapidfort Oracle Linux 9rust-rpki+serde-devel0.18.6-4.el9
rapidfort Oracle Linux 9rust-rpki+serde-support-devel0.18.6-4.el9
rapidfort Oracle Linux 9rust-rpki+serde_json-devel0.18.6-4.el9
rapidfort Oracle Linux 9rust-rpki+slurm-devel0.18.6-4.el9
rapidfort Oracle Linux 9rust-rpki+softkeys-devel0.18.6-4.el9
rapidfort Oracle Linux 9rust-rpki+tokio-devel0.18.6-4.el9
rapidfort Oracle Linux 9rust-rpki+untrusted-devel0.18.6-4.el9
rapidfort Oracle Linux 9rust-rpki+xml-devel0.18.6-4.el9
rapidfort Oracle Linux 9rust-rpki-devel0.18.6-4.el9
ubuntu 20.04-ESMrust-openssldüzeltme belirtilmemiş
ubuntu 22.04rust-openssldüzeltme belirtilmemiş
ubuntu 24.04rust-openssldüzeltme belirtilmemiş
ubuntu 26.04rust-openssldüzeltme belirtilmemiş
ubuntu 26.10rust-openssldüzeltme belirtilmemiş
wolfideno2.7.13-r0
wolfirpm-sequoia1.10.1-r10
wolfirustup1.29.0-r5
wolfisccache0.14.0-r4
wolfisdp-k8s-injector1.3.10-r5
wolfisqlx0.8.6-r5
wolfivector0.55.0-r1

Referanslar

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.