PT-2020-13660 · Rust Vmm · Rust-Vmm Vm-Memory

Published 2020-06-02 · Updated 2021-08-25 · CVE-2020-13759

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions rust-vmm vm-memory versions 0.1.0 through 0.1.1 and 0.2.x before 0.2.1

Description The issue allows attackers to cause a denial of service, specifically a loss of IP networking, due to improper memory access by the read obj and write obj functions. This affects systems with specific architectures and libraries, including aarch64 with musl or glibc, and x86 64 with musl.

Recommendations For versions 0.1.0 through 0.1.1, update to version 0.1.1 or later. For versions 0.2.x before 0.2.1, update to version 0.2.1 or later.

Fix

Race Condition

Weakness Enumeration

CWE-662

CWE-362

Related Identifiers

CVE-2020-13759

GHSA-MM4M-QG48-F7WC

RUSTSEC-2020-0157

Affected Products

Rust-Vmm Vm-Memory

References · 10

• https://osv.dev/vulnerability/RUSTSEC-2020-0157 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-13759 · Security Note
• https://osv.dev/vulnerability/CVE-2020-13759 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-mm4m-qg48-f7wc · Vendor Advisory
• https://github.com/rust-vmm/vm-memory/releases/tag/v0.1.1 · Note
• https://github.com/rust-vmm/vm-memory/issues/93 · Note
• https://github.com/rust-vmm/vm-memory/releases/tag/v0.2.1 · Note
• https://github.com/rust-vmm/vm-memory · Note
• https://crates.io/crates/vm-memory · Note
• https://rustsec.org/advisories/RUSTSEC-2020-0157.html · Note