PT-2020-17535 · Rust · Dync

Published 2020-09-27 · Updated 2021-08-25 · CVE-2020-35903

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions dync crate versions prior to 0.5.0

Description An issue in the dync crate allows misaligned element access because the type in question is not always u8. Specifically, VecCopy::data is created as a Vec of u8 but can be used to store and retrieve elements of different types, leading to misaligned access.

Recommendations For versions prior to 0.5.0, update to version 0.5.0 or later, which resolves the issue by replacing the Vec storage with a custom managed pointer that stores and retrieves elements using types with proper alignment corresponding to the original types.

Exploit

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2020-35903

GHSA-QXJQ-V4WF-PPVH

RUSTSEC-2020-0050

Affected Products

Dync

References · 8

• 🔥 https://rustsec.org/advisories/RUSTSEC-2020-0050.html · Exploit
• https://osv.dev/vulnerability/GHSA-qxjq-v4wf-ppvh · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-35903 · Security Note
• https://osv.dev/vulnerability/CVE-2020-35903 · Vendor Advisory
• https://osv.dev/vulnerability/RUSTSEC-2020-0050 · Vendor Advisory
• https://github.com/elrnv/dync · Note
• https://github.com/elrnv/dync/issues/4 · Note
• https://crates.io/crates/dync · Note