3 results · Feed
-
High 7.1
Users: `root` appended to group listings
A flaw was found in the user's crate for Rust. This vulnerability allows privilege escalation via incorrect group listing when a user or process has fewer than exactly 1024 groups, leading to the erroneous inclusion of the root group in the access list.
-
Medium —
Users vulnerable to unaligned read of `*const *const c_char` pointer
Affected versions dereference a potentially unaligned pointer. The pointer is commonly unaligned in practice, resulting in undefined behavior. In some build modes, this is observable as a panic followed by abort. In other build modes the UB may manifest in so…
-
Unscored —
`users` crate is unmaintained
The `users` crate hasn't seen any action since 2020-10-08. The developer seems [MIA] since. ## Recommended alternatives - [`uzers`] - [`sysinfo`] [MIA]: https://github.com/ogham/rust-users/issues/54 [`uzers`]: https://crates.io/crates/uzers [`sysinfo`]: https…