Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: rust-vmm Clear all filters
TI-2023-27657 CVE-2023-50711 · GHSA-875g-mfp6-g7f9

Out-of-bounds write in rust-vmm vmm-sys-util

Priority MEDIUM 43

vmm-sys-util is a collection of modules that provides helpers and utilities used by multiple rust-vmm components.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00652 Published 2024-01-02 Fixed in 0.12.0 CWE-787
TI-2023-21677 CVE-2023-41051 · GHSA-49hh-fprx-m68g

Default functions in VolatileMemory trait lack bounds checks in vm-memory

Priority LOW 21

In a typical Virtual Machine Monitor (VMM) there are several components, such as boot loader, virtual device drivers, virtio backend drivers and vhost drivers, that need to access the VM physical memory.

CVSS 3.1MEDIUM 4.7 Local No auth User interaction EPSS 0.00255 Published 2023-09-01 Fixed in 0.12.2 CWE-125
TI-2022-07582 CVE-2022-23523 · GHSA-52h2-m2cf-9jh6

rust-vmm linux-loader vulnerable to Out-of-bounds Read

Priority LOW 24

In versions prior to 0.8.1, the linux-loader crate uses the offsets and sizes provided in the ELF headers to determine the offsets to read from.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00216 Published 2022-12-13 Fixed in 0.8.1 CWE-119