Skip to content
OpenAdvisories

Vendor

rust-vmm

3 known vulnerabilities.

Products

vm-memory 1 linux-loader 1 vmm-sys-util 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.7
    CVE-2023-50711

    `serde` deserialization for `FamStructWrapper` lacks bound checks that could potentially lead to out-of-bounds memory access

    vmm-sys-util is a collection of modules that provides helpers and utilities used by multiple rust-vmm components. Starting in version 0.5.0 and prior to version 0.12.0, an issue in the `FamStructWrapper::deserialize` implementation provided by the crate for `…

    rust-vmm vmm-sys-util vmm-sys-util rust-vmm-sys-util Debian Ubuntu crates.io
  • Medium 4.0
    CVE-2022-23523

    rust-vmm linux-loader vulnerable to Out-of-bounds Read

    In versions prior to 0.8.1, the linux-loader crate uses the offsets and sizes provided in the ELF headers to determine the offsets to read from. If those offsets point beyond the end of the file this could lead to Virtual Machine Monitors using the `linux-loa…

    rust-vmm linux-loader linux-loader Linux crates.io