VDB
CVE-2023-50711
CVE-2023-50711
PUBLISHED
CVSS 5.699999809265137 MEDIUM
`serde` deserialization for `FamStructWrapper` lacks bound checks that could potentially lead to out-of-bounds memory access
EPSS 0.65% · 50.7th percentile
Risk Scores
CVSS 3.1
5.699999809265137
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L
EPSS Score
0.65%
50.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| crates.io | vmm-sys-util | 0.5.0, 0.5.0, 0.5.0 |
| rust-vmm | vmm-sys-util | 0.5.0, >= 0.5.0, < 0.12.0, 0.5.0 |
Timeline
- Jan 21, 1970 Security Advisory
- Jan 2, 2024 CVE Published
- Jan 2, 2024 PoC Published
- Jan 3, 2024 PoC Published
- Jan 10, 2024 EPSS Score
- Jan 23, 2024 PoC Published
- Feb 8, 2024 EPSS Score
- Feb 10, 2024 CVE Updated
- Mar 8, 2024 EPSS Score
- Apr 7, 2024 EPSS Score
- May 6, 2024 EPSS Score
- Jul 3, 2024 EPSS Score
References
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YJI7D273R6G5RUC246KTI2YY3AXZKZMD/ url
- https://nvd.nist.gov/vuln/detail/CVE-2023-50711 advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W5XMCLV2P3ANS3XN4NXZTV4PUNTLWUNJ url
- https://github.com/rust-vmm/vmm-sys-util/security/advisories/GHSA-875g-mfp6-g7f9 advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W5XMCLV2P3ANS3XN4NXZTV4PUNTLWUNJ/ technical
- https://github.com/rust-vmm/vmm-sys-util/commit/30172fca2a8e0a38667d934ee56682247e13f167 fix
- https://github.com/rust-vmm/vmm-sys-util package
- https://rustsec.org/advisories/RUSTSEC-2024-0002.html url