high7.5
CVE-2020-13759
Improper Synchronization and Race Condition in vm-memory
Impact
rust-vmm vm-memory before 0.1.1 and 0.2.x before 0.2.1 allows attackers to cause a denial of service (loss of IP networking) because read_obj and write_obj do not properly access memory. This affects aarch64 (with musl or glibc) and x86_64 (with musl).
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| rust | vm-memory | < 0.1.1 | 0.1.1 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vm-Memory Project | Vm-Memory | before 0.1.1 from 0.2.0 before 0.2.1 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/rust-vmm/vm-memory/issues/93
- https://github.com/rust-vmm/vm-memory/releases/tag/v0.1.1
- https://github.com/rust-vmm/vm-memory/releases/tag/v0.2.1
- https://github.com/advisories/GHSA-mm4m-qg48-f7wc
- https://nvd.nist.gov/vuln/detail/CVE-2020-13759
- https://rustsec.org/advisories/RUSTSEC-2020-0157.html