~ / search / GHSA-mm4m-qg48-f7wc

GHSA-mm4m-qg48-f7wc

Improper Synchronization and Race Condition in vm-memory

Source: GitHub Advisory Database (reviewed) High CVE-2020-13759

Packages

EcosystemPackageAffectedFixed in
crates.io vm-memory < 0.1.1 0.1.1
crates.io vm-memory >= 0.2.0, < 0.2.1 0.2.1

Details

As written in the advisory (Markdown source, shown as plain text).

rust-vmm vm-memory before 0.1.1 and 0.2.x before 0.2.1 allows attackers to cause a denial of service (loss of IP networking) because read_obj and write_obj do not properly access memory. This affects aarch64 (with musl or glibc) and x86_64 (with musl).

References

External links from the advisory. They lead to third-party sites.