crates.io/vm-memory CVE-2023-41051: low 2.5, EPSS 0.26%
Default functions in VolatileMemory trait lack bounds checks, potentially leading to out-of-bounds memory accesses
Action: Upgrade vm-memory to 0.12.2 or later.
cargo update -p vm-memory --precise 0.12.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.12.2 | - |
Fixed versions
| 0.12.2 |
Sources
- osv: GHSA-49hh-fprx-m68g
- https://github.com/rust-vmm/vm-memory/security/advisories/GHSA-49hh-fprx-m68g
- https://nvd.nist.gov/vuln/detail/CVE-2023-41051
- https://github.com/rust-vmm/vm-memory/issues/250
- https://github.com/rust-vmm/vm-memory/commit/aff1dd4a5259f7deba56692840f7a2d9ca34c9c8
- https://crates.io/crates/vm-memory/0.12.2
- https://github.com/rust-vmm/vm-memory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPXRXD5VXBZHBGMUM77B52CJJMG7EJGI
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SYM6CYW2DWRHRAVL2HYTQPXC3J2V77J4
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XZGJL6BQLU4XCPQLLTW4GSSBTNQXB3TI
- https://rustsec.org/advisories/RUSTSEC-2023-0056.html
CVE-2023-41051 · published · modified · JSON