PT-2020-16215 · Rust+1 · Sized-Chunks Crate+1
Qwazo
·
Published
2020-09-06
·
Updated
2021-08-25
·
CVE-2020-25795
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
sized-chunks crate versions through 0.6.2
Description
The issue concerns memory-safety problems in the sized-chunks crate for Rust. Specifically, in the Chunk implementation, there are issues with
insert from and clone when a panic occurs, leading to memory safety issues. Additionally, the array size is not checked when constructed with unit(), pair(), or From<InlineArray<A, T>>. In the InlineArray implementation, unaligned references may be generated for types with large alignment requirements.Recommendations
For sized-chunks crate versions through 0.6.2, consider updating to a version that addresses these memory-safety issues. As a temporary workaround, consider adding checks for array size when constructing with
unit(), pair(), or From<InlineArray<A, T>> to prevent memory safety issues. Also, be cautious when using clone and insert from as they are not panic-safe, and a panicking iterator can cause memory safety issues. Avoid using InlineArray for types with large alignment requirements to minimize the risk of generating unaligned references. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Improper Validation of Array Index
Memory Leak
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Debian
Sized-Chunks Crate