PT-2017-10962 · Rust · Rust-Base64

Published 2017-05-03 · Updated 2021-08-25 · CVE-2017-1000430

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions rust-base64 versions <= 0.5.1

Description The issue arises from an integer overflow bug when calculating the size of a buffer for base64 encoding using the encode config buf and encode config functions. If the input string is large, a buffer that is too small is allocated. Since the function writes to the buffer using unsafe code, this allows an attacker to write beyond the buffer, causing memory corruption and possibly the execution of arbitrary code.

Recommendations For rust-base64 versions <= 0.5.1, update to a version that uses checked arithmetic to calculate the size of the buffer, as this flaw was corrected in later versions. As a temporary workaround, consider restricting the use of the encode config buf and encode config functions until a patch is available.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2017-1000430

GHSA-X67X-VG9M-65C3

RUSTSEC-2017-0004

Affected Products

Rust-Base64

References · 9

• https://osv.dev/vulnerability/RUSTSEC-2017-0004 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-x67x-vg9m-65c3 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-1000430 · Security Note
• https://osv.dev/vulnerability/CVE-2017-1000430 · Vendor Advisory
• https://github.com/RustSec/advisory-db/blob/master/crates/base64/RUSTSEC-2017-0004.toml · Note
• https://github.com/alicemaz/rust-base64 · Note
• https://github.com/alicemaz/rust-base64/commit/24ead980daf11ba563e4fb2516187a56a71ad319 · Note
• https://crates.io/crates/base64 · Note
• https://rustsec.org/advisories/RUSTSEC-2017-0004.html · Note