CVE-2020-13759 — Race Condition in Project Vm-memory

CWE-362 — Race ConditionCWE-662 — Improper Synchronization3 documents3 sources
Severity
7.5HIGHNVD
EPSS
0.4%
top 40.26%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Vm-memory Project Vm-memory
Timeline
PublishedJun 2
Latest updateAug 25

Description

rust-vmm vm-memory before 0.1.1 and 0.2.x before 0.2.1 allows attackers to cause a denial of service (loss of IP networking) because read_obj and write_obj do not properly access memory. This affects aarch64 (with musl or glibc) and x86_64 (with musl).

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

▶NVDvm-memory_project/vm-memory0.2.0 — 0.2.1+1
▶crates.iovm-memory_project/vm-memory0.2.0 — 0.2.1+1

🔴Vulnerability Details

2
GHSA
Improper Synchronization and Race Condition in vm-memory↗2021-08-25
▶
OSV
Improper Synchronization and Race Condition in vm-memory↗2021-08-25
▶