PT-2020-17587 · Rust · Hashconsing

Published 2020-11-10 · Updated 2021-08-25 · CVE-2020-36215

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions hashconsing versions prior to 1.1.0

Description The issue arises from the hashconsing crate's implementation of Send and Sync traits for its HConsed type without proper restrictions. This allows non-Sync types, such as Cell, to be shared across threads, leading to undefined behavior and memory corruption in concurrent programs.

Recommendations For versions prior to 1.1.0, update to version 1.1.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of the HConsed type to only Sendable and Syncable types to minimize the risk of exploitation. Avoid sharing non-Sync types, such as Cell, across threads until the issue is resolved.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-662

CWE-787

Related Identifiers

CVE-2020-36215

GHSA-RW2C-C256-3R53

RUSTSEC-2020-0107

Affected Products

Hashconsing

References · 8

• 🔥 https://rustsec.org/advisories/RUSTSEC-2020-0107.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-36215 · Security Note
• https://osv.dev/vulnerability/GHSA-rw2c-c256-3r53 · Vendor Advisory
• https://osv.dev/vulnerability/RUSTSEC-2020-0107 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-36215 · Vendor Advisory
• https://github.com/AdrienChampion/hashconsing/issues/1 · Note
• https://github.com/AdrienChampion/hashconsing · Note
• https://crates.io/crates/hashconsing · Note