Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS1nNzUzLWdocjctcTMzd84AAz_4

cyfs-base vulnerable to misaligned pointer dereference in `ChunkId::new`

The function ChunkId::new creates a misaligned pointer by casting mutable pointer of u8 slice which has alignment 1 to the mutable pointer of u32 which has alignment 4, and dereference the misaligned pointer leading UB, which should not be allowed in safe function.

Permalink: https://github.com/advisories/GHSA-g753-ghr7-q33w
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1nNzUzLWdocjctcTMzd84AAz_4
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: over 1 year ago
Updated: over 1 year ago

Identifiers: GHSA-g753-ghr7-q33w
References:

• https://github.com/buckyos/CYFS/issues/275
• https://github.com/buckyos/CYFS/commit/e030188895096fd8d91d48753877729f4d37dd24
• https://rustsec.org/advisories/RUSTSEC-2023-0046.html
• https://github.com/advisories/GHSA-g753-ghr7-q33w

Repository: https://github.com/buckyos/CYFS
Blast Radius: 0.0

Affected Packages