Ecosyste.ms: Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

Security Advisories: GSA_kwCzR0hTQS04dnhjLXI1d3Atdmd2Y84AAyUG

Versionize::deserialize implementation for FamStructWrapper<T> is lacking bound checks, potentially leading to out of bounds memory accesses

Impact

An issue was discovered in the Versionize::deserialize implementation provided by the versionize crate for vmm_sys_util::fam::FamStructWrapper, which can lead to out of bounds memory accesses.

Patches

The impact started with version 0.1.1. The issue was corrected in version 0.1.10 by inserting a check that verifies, for any deserialized header, the lengths of compared flexible arrays are equal and aborting deserialization otherwise.

Workarounds

-

References

Permalink: https://github.com/advisories/GHSA-8vxc-r5wp-vgvc
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS04dnhjLXI1d3Atdmd2Y84AAyUG
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: about 1 year ago
Updated: about 1 year ago


CVSS Score: 5.7
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L

Identifiers: GHSA-8vxc-r5wp-vgvc, CVE-2023-28448
References: Repository: https://github.com/firecracker-microvm/versionize
Blast Radius: 9.3

Affected Packages

cargo:versionize
Dependent packages: 4
Dependent repositories: 43
Downloads: 1,296,668 total
Affected Version Ranges: >= 0.1.1, < 0.1.10
Fixed in: 0.1.10
All affected versions: 0.1.1, 0.1.2, 0.1.3, 0.1.4, 0.1.5, 0.1.6, 0.1.7, 0.1.8, 0.1.9
All unaffected versions: 0.1.10, 0.2.0