PT-2021-16838 · Unknown · Containers

Published 2021-01-12 · Updated 2021-08-25 · CVE-2021-25907

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions containers crate versions prior to 0.9.11

Description An issue in the containers crate for Rust can cause a double drop of an object when a panic occurs in a user-provided function f, specifically in fn mutate() and fn mutate2(). This happens because affected versions of the crate did not guard against double drop while temporarily duplicating an object's ownership with ptr::read(). Dropping the same object twice can result in memory corruption.

Recommendations For versions prior to 0.9.11, update to version 0.9.11 to fix the issue by aborting upon panic, thus preventing the double drop and potential memory corruption.

Exploit

Fix

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

CVE-2021-25907

GHSA-CV7X-6RC6-PQ5V

RUSTSEC-2021-0010

Affected Products

Containers

References · 8

• 🔥 https://rustsec.org/advisories/RUSTSEC-2021-0010.html · Exploit
• https://osv.dev/vulnerability/RUSTSEC-2021-0010 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-25907 · Security Note
• https://osv.dev/vulnerability/GHSA-cv7x-6rc6-pq5v · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-25907 · Vendor Advisory
• https://github.com/strake/containers.rs · Note
• https://github.com/strake/containers.rs/issues/2 · Note
• https://crates.io/crates/containers · Note