PT-2020-17633 · Rust · Array-Tools

Published 2020-12-31 · Updated 2022-07-12 · CVE-2020-36452

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions array-tools crate versions prior to 0.3.2

Description An issue in the array-tools crate causes memory corruption due to the drop of uninitialized memory when T::clone() panics in FixedCapacityDequeLike<T, A>::clone(). This occurs because affected versions of the crate do not guard against panics, leading to the partial initialization of a buffer that is then dropped. The FixedCapacityDequeLike::clone() function is specifically affected.

Recommendations For versions prior to 0.3.2, update to version 0.3.2 or later to resolve the issue. As a temporary workaround, consider implementing panic handling for T::clone() to prevent the drop of uninitialized memory in FixedCapacityDequeLike<T, A>::clone().

Fix

Use of Uninitialized Resource

Weakness Enumeration

CWE-909

CWE-908

Related Identifiers

CVE-2020-36452

GHSA-6WP2-FW3V-MFMC

RUSTSEC-2020-0132

Affected Products

Array-Tools

References · 10

• https://rustsec.org/advisories/RUSTSEC-2020-0132.html · Vendor Advisory
• https://osv.dev/vulnerability/RUSTSEC-2020-0132 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-6wp2-fw3v-mfmc · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-36452 · Security Note
• https://osv.dev/vulnerability/CVE-2020-36452 · Vendor Advisory
• ❌ https://github.com/L117/array-tools · Note, Deleted
• ❌ https://github.com/L117/array-tools/issues/2 · Note, Deleted
• https://t.me/cibsecurity/26976 · Telegram Post
• https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/array-tools/RUSTSEC-2020-0132.md · Note
• https://crates.io/crates/array-tools · Note