GHSA-mm4m-qg48-f7wcHighCVSS 7.5

Improper Synchronization and Race Condition in vm-memory

Published
August 25, 2021
Last Modified
February 3, 2023

🔗 CVE IDs covered (1)

CVE-2020-13759 →

📋 Description

rust-vmm vm-memory before 0.1.1 and 0.2.x before 0.2.1 allows attackers to cause a denial of service (loss of IP networking) because read_obj and write_obj do not properly access memory. This affects aarch64 (with musl or glibc) and x86_64 (with musl).

🎯 Affected products2

  • rust/vm-memory:< 0.1.1
  • rust/vm-memory:>= 0.2.0, < 0.2.1

🔗 References (6)