GitHub Advisoryadvisory · crates.io

GHSA-8vxc-r5wp-vgvc Versionize::deserialize implementation for FamStructWrapper<T> is lacking bound checks, potentially leading to out of bounds memory accesses

MEDIUM Published 2023-03-24 Modified 2023-03-24 Official page ↗
Aliases
CVE-2023-28448
Ecosystem
crates.io
Packages
versionize
Severity
Moderate
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L
Weaknesses
CWE-125
Reviewed
2023-03-24

Affected packages

• crates.io versionize: >= 0.1.1, < 0.1.10 → fixed in 0.1.10

Description

Impact An issue was discovered in the `Versionize::deserialize` implementation provided by the `versionize` crate for `vmm_sys_util::fam::FamStructWrapper`, which can lead to out of bounds memory accesses. Patches The impact started with version 0.1.1. The issue was corrected in version 0.1.10 by inserting a check that verifies, for any deserialized header, the lengths of compared flexible arrays are equal and aborting deserialization otherwise. Workarounds \- References • https://github.com/firecracker-microvm/versionize/pull/53

Related

Alias · CVE (1)

  • CVE-2023-28448 Versionize is a framework for version tolerant serializion/deserialization of Rust data structures, designed for usecases that need fast… vulnerability

Weakness · CWE (1)

  • CWE-125 Out-of-bounds Read weakness

References