PT-2021-17720 · Unknown · Nano Arena

Published 2021-01-31 · Updated 2021-08-25 · CVE-2021-28032

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: nano arena crate versions prior to 0.5.2

Description: An issue was discovered in the nano arena crate, where an aliasing violation occurs in the split at function. This happens because two mutable references can exist for the same element if Borrow<Idx> behaves in certain ways, leading to potential memory safety issues such as out-of-bounds writes or use-after-frees.

Recommendations: For versions prior to 0.5.2, update to version 0.5.2 or later to resolve the issue. As a temporary workaround, consider modifying the split at function to store the .borrow() value in a temporary variable, similar to the correction made in commit 6b83f9d.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2021-28032

GHSA-WP34-MQW5-JJ85

RUSTSEC-2021-0031

Affected Products

Nano Arena

References · 10

• 🔥 https://rustsec.org/advisories/RUSTSEC-2021-0031.html · Exploit
• https://osv.dev/vulnerability/CVE-2021-28032 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-wp34-mqw5-jj85 · Vendor Advisory
• https://osv.dev/vulnerability/RUSTSEC-2021-0031 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-28032 · Security Note
• https://github.com/bennetthardwick/nano-arena · Note
• https://github.com/bennetthardwick/nano-arena/commit/6b83f9d0708337a9f8b709c1624a8587021ceba2 · Note
• https://github.com/bennetthardwick/nano-arena/issues/1 · Note
• https://crates.io/crates/nano_arena · Note
• https://t.me/cibsecurity/24501 · Telegram Post