RUSTSEC-2020-0167

See a problem?
Please try reporting it to the source first.

Source

https://rustsec.org/advisories/RUSTSEC-2020-0167

Import Source

https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2020-0167.json

JSON Data

https://api.osv.dev/v1/vulns/RUSTSEC-2020-0167

Aliases

GHSA-cf4g-fcf8-3cr9

Published

2020-06-19T12:00:00Z

Modified

2023-11-08T04:18:24.874397Z

Severity

6.0 (Medium) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H CVSS Calculator

Summary

`pnet_packet` buffer overrun in `set_payload` setters

Details

As indicated by this issue, a buffer overrun is possible in the set_payload setter of the various mutable "Packet" struct setters. The offending set_payload functions were defined within the struct impl blocks in earlier versions of the package, and later by the packet macro.

Fixed in the packet macro by this PR.

Database specific

{
    "license": "CC0-1.0"
}

References

Affected packages

crates.io / pnet_packet

Package

Name: pnet_packet; View open source insights on deps.dev
Purl: pkg:cargo/pnet_packet

Affected ranges

Type: SEMVER
Events: Introduced

0.0.0-0

Fixed

0.27.2

Ecosystem specific

{
    "affected_functions": null,
    "affects": {
        "os": [],
        "functions": [],
        "arch": []
    }
}

Database specific

{
    "cvss": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
    "informational": null,
    "categories": [
        "memory-corruption"
    ]
}