UBUNTU-CVE-2023-50711

vmm-sys-util is a collection of modules that provides helpers and utilities used by multiple rust-vmm components. Starting in version 0.5.0 and prior to version 0.12.0, an issue in the FamStructWrapper::deserialize implementation provided by the crate for vmmsysutil::fam::FamStructWrapper can lea...

CVE-2023-50711

vmm-sys-util is a collection of modules that provides helpers and utilities used by multiple rust-vmm components. Starting in version 0.5.0 and prior to version 0.12.0, an issue in the FamStructWrapper::deserialize implementation provided by the crate for vmmsysutil::fam::FamStructWrapper can lea...

CVE-2023-50711 `serde` deserialization for `FamStructWrapper` lacks bound checks that could potentially lead to out-of-bounds memory access

vmm-sys-util is a collection of modules that provides helpers and utilities used by multiple rust-vmm components. Starting in version 0.5.0 and prior to version 0.12.0, an issue in the FamStructWrapper::deserialize implementation provided by the crate for vmmsysutil::fam::FamStructWrapper can lea...

CVE-2023-50711 `serde` deserialization for `FamStructWrapper` lacks bound checks that could potentially lead to out-of-bounds memory access

vmm-sys-util is a collection of modules that provides helpers and utilities used by multiple rust-vmm components. Starting in version 0.5.0 and prior to version 0.12.0, an issue in the FamStructWrapper::deserialize implementation provided by the crate for vmmsysutil::fam::FamStructWrapper can lea...

CVE-2023-50711

CVE-2023-50711 affects the vmm-sys-util crate (FamStructWrapper::deserialize) used by Rust-VMM components. The issue is a mismatch between the header-stored length and the flexible-array length during deserialization, enabling potential out-of-bounds memory access through Rust-safe code. It was f...

CVE-2023-50711 `serde` deserialization for `FamStructWrapper` lacks bound checks that could potentially lead to out-of-bounds memory access

vmm-sys-util is a collection of modules that provides helpers and utilities used by multiple rust-vmm components. Starting in version 0.5.0 and prior to version 0.12.0, an issue in the FamStructWrapper::deserialize implementation provided by the crate for vmmsysutil::fam::FamStructWrapper can lea...

dbs-address-space (>=0.1.0, <=0.3.0), dbs-arch (>=0.1.0, <=0.2.3) +25 more potentially affected by CVE-2023-50711 via vmm-sys-util (>=0.7.0, <=0.11.2)

vmm-sys-util CARGO version =0.7.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =1.5.0, =0.1.0, =0.9.3, =0.3.1, =0.6.1, =0.1.1, =0.4.0, =0.4.1 and more Source cves: CVE-2023-50711 Source advisory: OSV:GHSA-875G-MFP6-G7F9...

dbs-address-space (>=0.1.0, <=0.3.0), dbs-arch (>=0.1.0, <=0.2.3) +25 more potentially affected by CVE-2023-50711 via vmm-sys-util (>=0.7.0, <=0.11.2)

vmm-sys-util CARGO version =0.7.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =1.5.0, =0.1.0, =0.9.3, =0.3.1, =0.6.1, =0.1.1, =0.4.0, =0.4.1 and more Source cves: CVE-2023-50711 Source advisory: OSV:RUSTSEC-2024-0002...