{"schemaVersion":3,"id":"CVE-2024-43806","aliases":["SUSE-SU-2024:3404-1","UBUNTU-CVE-2024-43806","DEBIAN-CVE-2024-43806","CGA-3g38-536p-j4wr","CGA-3m93-9p84-vx8x","CGA-3mrw-9fmq-pmc3","CGA-4ccc-pw24-3j9h","CGA-53w7-x624-7px5","CGA-58v7-xpw7-57w7","CGA-5hr9-j2mw-c33g","CGA-6gf7-c3r8-hw33","CGA-8529-r59q-p278","CGA-929h-g48q-7pg2","CGA-97v7-v4jq-45f8","CGA-f452-9m8p-hv4q","CGA-f495-6rw4-c6w3","CGA-ggmr-mmcw-548x","CGA-jjvj-w2v3-jmm9","CGA-vxpw-387j-6cfp","CGA-xmmp-6762-896c","CGA-xpw5-wffv-cp77","openSUSE-SU-2024:14306-1","openSUSE-SU-2024:14354-1","GHSA-c827-hfw6-qwvm"],"status":"published","duplicateOf":null,"title":null,"description":"Rustix is a set of safe Rust bindings to POSIX-ish APIs. When using `rustix::fs::Dir` using the `linux_raw` backend, it's possible for the iterator to \"get stuck\" when an IO error is encountered. Combined with a memory over-allocation issue in `rustix::fs::Dir::read_more`, this can cause quick and unbounded memory explosion (gigabytes in a few seconds if used on a hot path) and eventually lead to an OOM crash of the application. The symptoms were initially discovered in https://github.com/imsnif/bandwhich/issues/284. That post has lots of details of our investigation. Full details can be read on the GHSA-c827-hfw6-qwvm repo advisory. If a program tries to access a directory with its file descriptor after the file has been unlinked (or any other action that leaves the `Dir` iterator in the stuck state), and the implementation does not break after seeing an error, it can cause a memory explosion. As an example, Linux's various virtual file systems (e.g. `/proc`, `/sys`) can contain directories that spontaneously pop in and out of existence. Attempting to iterate over them using `rustix::fs::Dir` directly or indirectly (e.g. with the `procfs` crate) can trigger this fault condition if the implementation decides to continue on errors. An attacker knowledgeable about the implementation details of a vulnerable target can therefore try to trigger this fault condition via any one or a combination of several available APIs. If successful, the application host will quickly run out of memory, after which the application will likely be terminated by an OOM killer, leading to denial of service. This issue has been addressed in release versions 0.35.15, 0.36.16, 0.37.25, and 0.38.19. Users are advised to upgrade. There are no known workarounds for this issue.","dates":{"published":"2024-08-26T18:43:22.626Z","modified":"2024-08-26T19:40:46.911Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6.5,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","exploitability":7.2,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","exploitability":7.2,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","exploitability":7.2,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","exploitability":7.2,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Crates.io","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","exploitability":7.2,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.0048,"percentile":0.40096,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.0048},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0048,"percentile":0.40096}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0048,"percentile":0.40096}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-400","name":"Uncontrolled Resource Consumption","description":"The product does not properly control the allocation and maintenance of a limited resource.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/400.html"}],"affected":[{"vendor":"chainguard","product":"bat","name":"bat","label":"bat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/bat","purlType":"apk","versions":[{"text":"< 0.24.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.24.0-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"bat-doc","name":"bat-doc","label":"bat-doc","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/bat-doc","purlType":"apk","versions":[{"text":"< 0.24.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.24.0-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"berg","name":"berg","label":"berg","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/berg","purlType":"apk","versions":[{"text":"< 0.3.5-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.3.5-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"pgcat","name":"pgcat","label":"pgcat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/pgcat","purlType":"apk","versions":[{"text":"< 1.2.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"zed","name":"zed","label":"zed","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/zed","purlType":"apk","versions":[{"text":"< 0.147.2-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.147.2-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"zellij","name":"zellij","label":"zellij","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/zellij","purlType":"apk","versions":[{"text":"< 0.42.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.42.1-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"zellij-bash-completion","name":"zellij-bash-completion","label":"zellij-bash-completion","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/zellij-bash-completion","purlType":"apk","versions":[{"text":"< 0.42.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.42.1-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"zellij-fish-completion","name":"zellij-fish-completion","label":"zellij-fish-completion","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/zellij-fish-completion","purlType":"apk","versions":[{"text":"< 0.42.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.42.1-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"zellij-zsh-completion","name":"zellij-zsh-completion","label":"zellij-zsh-completion","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/zellij-zsh-completion","purlType":"apk","versions":[{"text":"< 0.42.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.42.1-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"bat","name":"bat","label":"bat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/bat","purlType":"apk","versions":[{"text":"< 0.24.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.24.0-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"bat-doc","name":"bat-doc","label":"bat-doc","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/bat-doc","purlType":"apk","versions":[{"text":"< 0.24.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.24.0-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"berg","name":"berg","label":"berg","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/berg","purlType":"apk","versions":[{"text":"< 0.3.5-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.3.5-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"pgcat","name":"pgcat","label":"pgcat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/pgcat","purlType":"apk","versions":[{"text":"< 1.2.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"zed","name":"zed","label":"zed","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/zed","purlType":"apk","versions":[{"text":"< 0.147.2-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.147.2-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"zellij","name":"zellij","label":"zellij","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/zellij","purlType":"apk","versions":[{"text":"< 0.42.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.42.1-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"zellij-bash-completion","name":"zellij-bash-completion","label":"zellij-bash-completion","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/zellij-bash-completion","purlType":"apk","versions":[{"text":"< 0.42.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.42.1-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"zellij-fish-completion","name":"zellij-fish-completion","label":"zellij-fish-completion","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/zellij-fish-completion","purlType":"apk","versions":[{"text":"< 0.42.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.42.1-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"zellij-zsh-completion","name":"zellij-zsh-completion","label":"zellij-zsh-completion","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/zellij-zsh-completion","purlType":"apk","versions":[{"text":"< 0.42.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.42.1-r0","eol":null,"hubHref":null},{"vendor":"bytecodealliance","product":"rustix","name":"rustix","label":"rustix","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 0.35.11, < 0.35.15","noFixRecorded":false,"fixedIn":null},{"text":"≥ 0.36.0, < 0.36.16","noFixRecorded":false,"fixedIn":null},{"text":"≥ 0.37.0, < 0.37.25","noFixRecorded":false,"fixedIn":null},{"text":"≥ 0.38.0, < 0.38.19","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 0.35.11, < 0.35.15 | ≥ 0.36.0, < 0.36.16 | ≥ 0.37.0, < 0.37.25 | ≥ 0.38.0, < 0.38.19","eol":null,"hubHref":"/vendor/bytecodealliance/rustix"},{"vendor":"Crates.Io","product":"rustix","name":"rustix","label":"rustix","ecosystem":"Crates.Io","cpePart":null,"purl":"pkg:cargo/rustix","purlType":"cargo","versions":[{"text":"≥ 0.35.11, < 0.35.15","noFixRecorded":false,"fixedIn":null},{"text":"≥ 0.36.0, < 0.36.16","noFixRecorded":false,"fixedIn":null},{"text":"≥ 0.37.0, < 0.37.25","noFixRecorded":false,"fixedIn":null},{"text":"≥ 0.38.0, < 0.38.19","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 0.35.11, < 0.35.15 | ≥ 0.36.0, < 0.36.16 | ≥ 0.37.0, < 0.37.25 | ≥ 0.38.0, < 0.38.19","eol":null,"hubHref":null},{"vendor":"debian","product":"rust-rustix","name":"rust-rustix","label":"rust-rustix","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/rust-rustix","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 0.38.21-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 0.38.21-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"rust-rustix","name":"rust-rustix","label":"rust-rustix","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/rust-rustix","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"opensuse","product":"389-ds&distro=openSUSE Tumbleweed","name":"389-ds","label":"389-ds&distro=openSUSE Tumbleweed","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/389-ds&distro=openSUSE Tumbleweed","purlType":"rpm","versions":[{"text":"< 3.1.1~git13.a9c7ff9-1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.1~git13.a9c7ff9-1.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"rage-encryption&distro=openSUSE Leap 15.5","name":"rage-encryption","label":"rage-encryption&distro=openSUSE Leap 15.5","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/rage-encryption&distro=openSUSE Leap 15.5","purlType":"rpm","versions":[{"text":"< 0.10.0+0-150500.3.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.10.0+0-150500.3.6.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"rage-encryption&distro=openSUSE Leap 15.6","name":"rage-encryption","label":"rage-encryption&distro=openSUSE Leap 15.6","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/rage-encryption&distro=openSUSE Leap 15.6","purlType":"rpm","versions":[{"text":"< 0.10.0+0-150500.3.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.10.0+0-150500.3.6.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"rage-encryption&distro=openSUSE Tumbleweed","name":"rage-encryption","label":"rage-encryption&distro=openSUSE Tumbleweed","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/rage-encryption&distro=openSUSE Tumbleweed","purlType":"rpm","versions":[{"text":"< 0.10.0+0-3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.10.0+0-3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"rage-encryption&distro=SUSE Linux Enterprise Module for Basesystem 15 SP5","name":"rage-encryption","label":"rage-encryption&distro=SUSE Linux Enterprise Module for Basesystem 15 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/rage-encryption&distro=SUSE Linux Enterprise Module for Basesystem 15 SP5","purlType":"rpm","versions":[{"text":"< 0.10.0+0-150500.3.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.10.0+0-150500.3.6.1","eol":null,"hubHref":null},{"vendor":"suse","product":"rage-encryption&distro=SUSE Linux Enterprise Module for Basesystem 15 SP6","name":"rage-encryption","label":"rage-encryption&distro=SUSE Linux Enterprise Module for Basesystem 15 SP6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/rage-encryption&distro=SUSE Linux Enterprise Module for Basesystem 15 SP6","purlType":"rpm","versions":[{"text":"< 0.10.0+0-150500.3.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.10.0+0-150500.3.6.1","eol":null,"hubHref":null}],"affectedCount":28,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/bytecodealliance/rustix/security/advisories/GHSA-c827-hfw6-qwvm","label":"github.com/bytecodealliance/rustix/security/advisories/GHSA-c827-hfw6-qwvm","hostname":"github.com","tags":["X Refsource CONFIRM","REPORT","Advisory","WEB"]},{"url":"https://github.com/imsnif/bandwhich/issues/284","label":"github.com/imsnif/bandwhich/issues/284","hostname":"github.com","tags":["X Refsource MISC","REPORT","WEB"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243404-1/","label":"www.suse.com/support/update/announcement/2024/suse-su-20243404-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1229959","label":"bugzilla.suse.com/1229959","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43806","label":"www.suse.com/security/cve/CVE-2024-43806","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://ubuntu.com/security/CVE-2024-43806","label":"ubuntu.com/security/CVE-2024-43806","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-43806","label":"www.cve.org/CVERecord?id=CVE-2024-43806","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-43806","label":"security-tracker.debian.org/tracker/CVE-2024-43806","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/43xxx/CVE-2024-43806.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2024/43xxx/CVE-2024-43806.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-43806","label":"nvd.nist.gov/vuln/detail/CVE-2024-43806","hostname":"nvd.nist.gov","tags":["Advisory","Oval"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TXPZZSAXTA6CTQAGWASRTKWJQ3DFB7GG/","label":"lists.opensuse.org/archives/…","hostname":"lists.opensuse.org","tags":["Advisory"]},{"url":"https://github.com/imsnif/bandwhich/issues/284#issuecomment-1754321993","label":"github.com/imsnif/bandwhich/issues/284","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/bytecodealliance/rustix/commit/31fd98ca723b93cc6101a3e29843ea5cf094e159","label":"github.com/bytecodealliance/rustix/commit/31fd98ca723b93cc6101a3e29843ea5cf094e159","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/bytecodealliance/rustix/commit/87481a97f4364d12d5d6f30cdd025a0fc509b8ec","label":"github.com/bytecodealliance/rustix/commit/87481a97f4364d12d5d6f30cdd025a0fc509b8ec","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/bytecodealliance/rustix/commit/df3c3a192cf144af0da8a57417fb4addbdc611f6","label":"github.com/bytecodealliance/rustix/commit/df3c3a192cf144af0da8a57417fb4addbdc611f6","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/bytecodealliance/rustix/commit/eecece4a84fc58eafdc809cc2cedd374dee876a5","label":"github.com/bytecodealliance/rustix/commit/eecece4a84fc58eafdc809cc2cedd374dee876a5","hostname":"github.com","tags":["WEB"]},{"url":"https://discord.com/channels/273534239310479360/1161137828395237556","label":"discord.com/channels/273534239310479360/1161137828395237556","hostname":"discord.com","tags":["WEB"]},{"url":"https://github.com/bytecodealliance/rustix","label":"github.com/bytecodealliance/rustix","hostname":"github.com","tags":["PACKAGE"]}],"lineage":{"upstream":[],"downstream":["OPENSUSE-SU-2025:15294-1","OPENSUSE-SU-2026:20396-1","SUSE-SU-2025:02809-1","SUSE-SU-2025:02810-1","SUSE-SU-2025:02811-1","SUSE-SU-2025:20057-1","SUSE-SU-2025:20858-1","SUSE-SU-2025:4411-1","SUSE-SU-2026:20755-1","SUSE-SU-2026:20910-1","SUSE-SU-2026:3022-1"],"duplicates":[],"related":["CGA-6QG7-2WH6-26W3","CGA-948V-QCCH-8WQP","OPENSUSE-SU-2025:15294-1","OPENSUSE-SU-2026:20396-1","SUSE-SU-2025:02809-1","SUSE-SU-2025:02810-1","SUSE-SU-2025:02811-1","SUSE-SU-2025:20057-1","SUSE-SU-2025:20858-1","SUSE-SU-2025:4411-1","SUSE-SU-2026:20755-1","SUSE-SU-2026:20910-1","SUSE-SU-2026:3022-1"]},"timeline":[{"kind":"published","date":"2024-08-26T18:43:22.626Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-26T19:40:46.911Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":26,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T05:40:17.406Z","stale":false,"partial":false}}