{"action":"Upgrade rustix to 0.35.15 or later.","affected":[{"fixed":"0.35.15","introduced":"0.35.11"},{"fixed":"0.36.16","introduced":"0.36.0"},{"fixed":"0.37.25","introduced":"0.37.0"},{"fixed":"0.38.19","introduced":"0.38.0"}],"component":"rustix","cve_ids":["CVE-2024-43806"],"ecosystem":"crates.io","epss":0.0048,"exploited":false,"fixed_versions":["0.35.15","0.36.16","0.37.25","0.38.19"],"ghsa_id":"GHSA-c827-hfw6-qwvm","id":"tcs_01M5KEWRT52YKBA56KTNR27SWT","modified_at":"2026-09-10T03:50:03.698097046Z","published_at":"2023-10-18T18:27:47Z","references":["https://osv.dev/vulnerability/GHSA-c827-hfw6-qwvm","https://github.com/bytecodealliance/rustix/security/advisories/GHSA-c827-hfw6-qwvm","https://nvd.nist.gov/vuln/detail/CVE-2024-43806","https://github.com/imsnif/bandwhich/issues/284","https://github.com/imsnif/bandwhich/issues/284#issuecomment-1754321993","https://github.com/bytecodealliance/rustix/commit/31fd98ca723b93cc6101a3e29843ea5cf094e159","https://github.com/bytecodealliance/rustix/commit/87481a97f4364d12d5d6f30cdd025a0fc509b8ec","https://github.com/bytecodealliance/rustix/commit/df3c3a192cf144af0da8a57417fb4addbdc611f6","https://github.com/bytecodealliance/rustix/commit/eecece4a84fc58eafdc809cc2cedd374dee876a5","https://discord.com/channels/273534239310479360/1161137828395237556","https://github.com/bytecodealliance/rustix"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-c827-hfw6-qwvm","url":"https://osv.dev/vulnerability/GHSA-c827-hfw6-qwvm"}],"summary":"rustix's `rustix::fs::Dir` iterator with the `linux_raw` backend can cause memory explosion"}