GitHub Advisoryadvisory · crates.io

GHSA-cf4g-fcf8-3cr9 `pnet_packet` buffer overrun in `set_payload` setters

MEDIUM Published 2023-02-09 Modified 2023-02-09 Official page ↗
Ecosystem
crates.io
Packages
pnet_packet
Severity
Moderate
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Reviewed
2023-02-09

Affected packages

• crates.io pnet_packet: < 0.27.2 → fixed in 0.27.2

Description

As indicated by this issue, a buffer overrun is possible in the `set_payload` setter of the various mutable "Packet" struct setters. The offending `set_payload` functions were defined within the struct `impl` blocks in earlier versions of the package, and later by the `packet` macro. Fixed in the `packet` macro by this PR.

References