PT-2020-17508 · Rust · Rio
Published
2020-05-11
·
Updated
2021-08-25
·
CVE-2020-35876
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
rio crate versions through 2020-05-11
Description
The issue allows attackers to obtain sensitive information, cause a use-after-free, or cause a data race by leaking a struct. Specifically, when a
rio::Completion is leaked, its drop code will not run, which is responsible for waiting until the kernel completes the I/O operation into, or out of, the buffer borrowed by rio::Completion. Leaking the struct will allow one to access and/or drop the buffer, leading to potential security issues. The upstream is not interested in fixing the issue.Recommendations
For versions through 2020-05-11, consider implementing custom memory management to prevent the leaking of the
rio::Completion struct as a temporary workaround. Restrict access to the buffer borrowed by rio::Completion to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Use After Free
Missing Release of Resource after Effective Lifetime
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Rio