CVE-2016-10933
2 advisories.
crates.io/portaudio CVE-2016-10933: medium 5.9, EPSS 1.08%
Source code is downloaded over cleartext HTTP in portaudio
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.7.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-pq6v-x7gp-7776
- https://nvd.nist.gov/vuln/detail/CVE-2016-10933
- https://github.com/RustAudio/rust-portaudio/issues/144
- https://github.com/RustAudio/rust-portaudio
- https://rustsec.org/advisories/RUSTSEC-2016-0003.html
CVE-2016-10933 · published · modified · JSON
crates.io/portaudio CVE-2016-10933: medium 5.9, EPSS 1.08%
HTTP download and execution allows MitM RCE
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.0-0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: RUSTSEC-2016-0003
- https://crates.io/crates/portaudio
- https://rustsec.org/advisories/RUSTSEC-2016-0003.html
- https://github.com/RustAudio/rust-portaudio/issues/144
CVE-2016-10933 · published · modified · JSON