PT-2021-24269 · Mopa · Mopa

Published 2021-06-01 · Updated 2022-06-17 · CVE-2021-45695

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: mopa crate through 2021-06-01

Description: An issue was discovered in the mopa crate, where it incorrectly relies on Trait memory layout, possibly leading to future occurrences of arbitrary code execution or ASLR bypass. The mopa crate redefines the deprecated TraitObject struct from core::raw to implement downcasting. However, the Rust compiler explicitly reserves the right to change the memory layout of &dyn Trait for any trait Trait, which could lead to an executable location breach and compromisation of ASLR if the data and vtable are swapped. This could also theoretically allow for arbitrary code execution if reads of vtable generated by the compiler read data instead.

Recommendations: As a temporary workaround, consider avoiding the use of the mopa crate until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2021-45695

GHSA-2GXJ-QRP2-53JV

GHSA-8MV5-7X95-7WCF

RUSTSEC-2021-0095

Affected Products

Mopa

References · 10

• https://osv.dev/vulnerability/CVE-2021-45695 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-45695 · Security Note
• https://osv.dev/vulnerability/GHSA-8mv5-7x95-7wcf · Vendor Advisory
• https://osv.dev/vulnerability/RUSTSEC-2021-0095 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-2gxj-qrp2-53jv · Vendor Advisory
• https://github.com/chris-morgan/mopa/issues/13 · Note
• https://github.com/chris-morgan/mopa · Note
• https://crates.io/crates/mopa · Note
• https://rustsec.org/advisories/RUSTSEC-2021-0095.html · Note
• https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/mopa/RUSTSEC-2021-0095.md · Note