PT-2020-4833 · Crossbeam+3 · Crossbeam-Channel+3

Taiki-E · Published 2020-06-26 · Updated 2024-12-12 · CVE-2020-15254

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: crossbeam-channel versions prior to 0.4.4

Description: The issue is related to the bounded channel in the crossbeam-channel library, which incorrectly assumes that Vec::from iter allocates capacity equal to the number of iterator elements. However, Vec::from iter may allocate extra memory, leading to unsound deallocation with incorrect capacity when reconstructing Vec from a raw pointer. This can cause issues with memory management.

Recommendations: For versions prior to 0.4.4, upgrade to crossbeam-channel 0.4.4 to fix the issue. As a temporary workaround, consider avoiding the use of the bounded channel until the upgrade is possible.

Exploit

Fix

Buffer Overflow

Memory Leak

Weakness Enumeration

CWE-131

CWE-119

CWE-401

Related Identifiers

ALT-PU-2020-3120

ALT-PU-2021-3368

BDU:2020-05387

CVE-2020-15254

GHSA-M8H8-V6JH-C762

GHSA-V5M7-53CV-F3HX

OPENSUSE-SU-2024:10600-1

OPENSUSE-SU-2024:14572-1

RUSTSEC-2020-0052

USN-4599-1

USN-4599-2

USN-4599-3

Affected Products

Alt Linux

Linuxmint

Ubuntu

Crossbeam-Channel

References · 1909

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_jit_use_after_free.rb · Exploit
• 🔥 https://github.com/crossbeam-rs/crossbeam/issues/539 · Exploit
• 🔥 https://github.com/crossbeam-rs/crossbeam/pull/533 · Exploit
• 🔥 https://github.com/aleksejspopovs/cve-2020-16012 · Exploit
• 🔥 https://github.com/HassanAzze/CVE-2020-6514 · Exploit
• 🔥 https://github.com/R0jhack/CVE-2020-6514 · Exploit
• 🔥 https://github.com/hasan-khalil/CVE-2020-6514 · Exploit
• 🔥 https://github.com/rojhack/CVE-2020-6514 · Exploit
• 🔥❌ https://github.com/marcinguy/CVE-2020-15999 · Exploit, Deleted
• https://github.com/RustSec/advisory-db/pull/425 · Patch
• https://osv.dev/vulnerability/USN-4599-2 · Vendor Advisory
• https://osv.dev/vulnerability/RUSTSEC-2020-0052 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:14572-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4599-2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-15254 · Security Note