TI-2023-27657 CVE-2023-50711 · GHSA-875g-mfp6-g7f9
Out-of-bounds write in rust-vmm vmm-sys-util
Priority MEDIUM 43
vmm-sys-util is a collection of modules that provides helpers and utilities used by multiple rust-vmm components.
rust-vmm
Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
rust-vmm records in CISA KEVNo rust-vmm vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
3 records
TI-2022-07582 CVE-2022-23523 · GHSA-52h2-m2cf-9jh6
rust-vmm linux-loader vulnerable to Out-of-bounds Read
Priority LOW 24
In versions prior to 0.8.1, the linux-loader crate uses the offsets and sizes provided in the ELF headers to determine the offsets to read from.
TI-2023-21677 CVE-2023-41051 · GHSA-49hh-fprx-m68g
Default functions in VolatileMemory trait lack bounds checks in vm-memory
Priority LOW 21
In a typical Virtual Machine Monitor (VMM) there are several components, such as boot loader, virtual device drivers, virtio backend drivers and vhost drivers, that need to access the VM physical memory.