CVE-2017-1000430

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

rust-base64 version <= 0.5.1 is vulnerable to a buffer overflow when calculating the size of a buffer to use when encoding base64 using the 'encode_config_buf' and 'encode_config' functions

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

No affected versions have been published.

Timeline

Published: Jan 2, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-10004316.1eZ Systems eZ Publish version 5.4.0 to 5.4.9, and 5.3.12 and older, is vulnerable to an XSS issue in the search module, resulting in a risk CVE-2017-10004328.0Vanilla Forums below 2.1.5 are affected by CSRF leading to Deleting topics and comments from forums Admin access CVE-2017-10004338.1pysaml2 version 4.4.0 and older accept any password when run with python optimizations enabled. This allows attackers to log in as any user CVE-2017-10004346.1Wordpress plugin Furikake version 0.1.0 is vulnerable to an Open Redirect The furikake-redirect parameter on a page allows for a redirect to CVE-2017-10004379.8Creolabs Gravity 1.0 contains a stack based buffer overflow in the operator_string_add function, resulting in remote code execution.CVE-2017-10004388.3In OMERO 5.3.3 or earlier a user could create an OriginalFile and adjust its path such that it now points to another user's file on the unde CVE-2017-10004425.4Passbolt API version 1.6.4 and older are vulnerable to a XSS in the url field on the password workspace CVE-2017-10004436.1Eleix Openhacker version 0.1.47 is vulnerable to a XSS vulnerability in the bank transactions component resulting in arbitrary code executio CVE-2017-10004449.8Eleix Openhacker version 0.1.47 is vulnerable to an SQL injection in the account registration and login component resulting in information d CVE-2017-10004456.5ImageMagick 7.0.7-1 and older version are vulnerable to null pointer dereference in the MagickCore component and might lead to denial of ser CVE-2017-10004487.5Structured Data Linter versions 2.4.1 and older are vulnerable to a directory traversal attack in the URL input field resulting in the possi CVE-2017-10004508.8In opencv/modules/imgcodecs/src/utils.cpp, functions FillUniColor and FillUniGray do not check the input length, which can lead to integer o