PT-2024-34887 · Unknown+1 · Cap-Async-Std+2

Nathaniel-Daniel · Published 2024-11-05 · Updated 2024-11-06 · CVE-2024-51756

Positive Technologies (AI Summary)

CVSS v4.0

2.3

Low

Base vector

AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions cap-std versions prior to 3.4.1 cap-primitives versions prior to 3.4.1 cap-async-std versions prior to 3.4.1

Description The cap-std project's filesystem sandbox implementation on Windows has a flaw that allows untrusted filesystem paths to bypass the sandbox and access devices through special device filenames with superscript digits, such as "COM¹", "COM²", "LPT⁰", "LPT¹", and so on. This can provide access to peripheral devices connected to the computer, or network resources mapped to those devices, including modems, printers, network printers, and any other device connected to a serial or parallel port, including emulated USB serial ports.

Recommendations For cap-std versions prior to 3.4.1, upgrade to version 3.4.1 or later. For cap-primitives versions prior to 3.4.1, upgrade to version 3.4.1 or later. For cap-async-std versions prior to 3.4.1, upgrade to version 3.4.1 or later.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2024-51756

GHSA-HXF5-99XG-86HW

RUSTSEC-2024-0445

Affected Products

Cap-Async-Std

Cap-Primitives

Cap-Std

References · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/51xxx/CVE-2024-51756.json · Exploit
• https://osv.dev/vulnerability/CVE-2024-51756 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-51756 · Security Note
• https://osv.dev/vulnerability/GHSA-hxf5-99xg-86hw · Vendor Advisory
• https://github.com/bytecodealliance/cap-std/pull/371 · Note
• https://github.com/bytecodealliance/cap-std · Note
• https://github.com/bytecodealliance/cap-std/security/advisories/GHSA-hxf5-99xg-86hw · Note
• https://github.com/bytecodealliance/cap-std/commit/dcc3818039761331fbeacbb3a40c542b65b5ebf7 · Note
• https://twitter.com/VulmonFeeds/status/1854196608478368243 · Twitter Post
• https://learn.microsoft.com/en-us/windows/win32/fileio/naming-a-file#naming-conventions · Note
• https://twitter.com/CVEnew/status/1853943220562251989 · Twitter Post
• https://rustsec.org/advisories/RUSTSEC-2024-0445.html · Note
• https://en.wikipedia.org/wiki/ISO/IEC_8859-1 · Note
• https://t.me/cvedetector/9955 · Telegram Post