Description
An issue was discovered in the lucet-runtime-internals crate before 0.5.1 for Rust. It mishandles sigstack allocation. Guest programs may be able to obtain sensitive information, or guest programs can experience memory corruption.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| crates.io | lucet-runtime-internals | < 0.4.3 | 0.4.3 | GHSA-3933-wvjf-pcvc |
| crates.io | lucet-runtime-internals | >= 0.5.0, < 0.5.1 | 0.5.1 | GHSA-3933-wvjf-pcvc |
| crates.io | lucet-runtime-internals | >= 0.0.0-0, < 0.4.3 · >= 0.5.0, < 0.5.1 | 0.4.3, 0.5.1 | RUSTSEC-2020-0004 |