This project contains known security vulnerabilities. Find detailed information at the bottom.

Crate fortanix-sgx-tools

Dependencies

(13 total, 8 outdated, 1 insecure)

CrateRequiredLatestStatus
 aesm-client^0.4.00.6.3out of date
 clap^2.2.54.6.7out of date
 enclave-runner^0.3.00.8.0out of date
 failure^0.1.10.1.8up to date
 failure_derive^0.1.10.1.8up to date
 num_cpus^1.9.01.17.0up to date
 serde^1.0.841.0.229up to date
 serde_derive^1.0.841.0.229up to date
 sgx-isa^0.3.00.6.0out of date
 sgxs^0.7.00.9.0out of date
 sgxs-loaders^0.2.00.5.2out of date
 toml^0.4.101.1.6+spec-1.1.0out of date
 xmas-elf ⚠️^0.6.00.10.0insecure

Security Vulnerabilities

xmas-elf: Potential out-of-bounds read with a malformed ELF file and the HashTable API.

RUSTSEC-2025-0018

Affected versions of this crate only validated the index argument of HashTable::get_bucket and HashTable::get_chain against the input-controlled bucket_count and chain_count fields, but not against the size of the ELF section. As a result, a malformed ELF file could trigger out-of-bounds reads in a consumer of the HashTable API by setting these fields to inappropriately large values that would fall outside the relevant hash table section, and by introducing correspondingly out-of-bounds hash table indexes elsewhere in the ELF file.