PT-2019-14270 · Rust · Smallvec

Published 2019-07-19 · Updated 2021-08-25 · CVE-2019-15554

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions smallvec crate versions prior to 0.6.10

Description The issue is related to memory corruption that occurs when attempting to call grow on a spilled SmallVec with a value less than the current capacity. This can cause corruption of memory allocator data structures. An attacker controlling the value passed to grow may exploit this flaw to obtain memory contents or gain remote code execution.

Recommendations For versions prior to 0.6.10, update to version 0.6.10 or later to resolve the issue. As a temporary workaround, consider avoiding the use of the grow function on spilled SmallVec instances with values less than the current capacity until a patch is applied.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2019-15554

GHSA-69GW-HGJ3-45M7

RUSTSEC-2019-0012

Affected Products

Smallvec

References · 10

• https://github.com/servo/rust-smallvec/issues/149 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-15554 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-15554 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-15554 · Security Note
• https://osv.dev/vulnerability/RUSTSEC-2019-0012 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2019-15554 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-69gw-hgj3-45m7 · Vendor Advisory
• https://github.com/servo/rust-smallvec · Note
• https://rustsec.org/advisories/RUSTSEC-2019-0012.html · Note
• https://crates.io/crates/smallvec · Note