Vulnerability · Published Jun 2, 2020 · Assigned by mitre

CVE-2020-13759

High 7.5

In plain English

A high-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.6% (higher than 76% of all known vulnerabilities).

Severity (CVSS NVD)7.5High

Exploit odds (30 days)1.6%top 23.5% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

rust-vmm vm-memory before 0.1.1 and 0.2.x before 0.2.1 allows attackers to cause a denial of service (loss of IP networking) because read_obj and write_obj do not properly access memory. This affects aarch64 (with musl or glibc) and x86_64 (with musl).

Affected products (as reported)

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/rust-vmm/vm-memory/issues/93 x_refsource_MISC
https://github.com/rust-vmm/vm-memory/releases/tag/v0.1.1 x_refsource_MISC
https://github.com/rust-vmm/vm-memory/releases/tag/v0.2.1 x_refsource_MISC