CVE-2020-15254
Mozilla: Undefined behavior in bounded channel of crossbeam rust crate
Sévérité par source
Le label propre à Trivy est CRITICAL. Critique selon NVD. Plus basse selon GHSA (élevée), Red Hat (élevée), Ubuntu (moyenne).
Description
Crossbeam is a set of tools for concurrent programming. In crossbeam-channel before version 0.4.4, the bounded channel incorrectly assumes that `Vec::from_iter` has allocated capacity that same as the number of iterator elements. `Vec::from_iter` does not actually guarantee that and may allocate extra memory. The destructor of the `bounded` channel reconstructs `Vec` from the raw pointer based on the incorrect assumes described above. This is unsound and causing deallocation with the incorrect capacity when `Vec::from_iter` has allocated different sizes with the number of iterator elements. This has been fixed in crossbeam-channel 0.4.4.
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| alpine 3.12 | firefox | 82.0-r0 |
| alpine 3.13 | firefox | 82.0-r0 |
| alpine 3.14 | firefox | 82.0-r0 |
| alpine 3.15 | firefox | 82.0-r0 |
| alpine 3.16 | firefox | 82.0-r0 |
| alpine 3.17 | firefox | 82.0-r0 |
| alpine 3.18 | firefox | 82.0-r0 |
| alpine 3.19 | firefox | 82.0-r0 |
| alpine 3.20 | firefox | 82.0-r0 |
| alpine 3.21 | firefox, librewolf | 82.0-r0 |
| alpine 3.22 | firefox, librewolf | 82.0-r0 |
| alpine 3.23 | firefox, librewolf | 82.0-r0 |
Afficher les 34 entrées de 31 sources
| Source | Paquet | Corrigé en |
|---|---|---|
| alpine 3.12 | firefox | 82.0-r0 |
| alpine 3.13 | firefox | 82.0-r0 |
| alpine 3.14 | firefox | 82.0-r0 |
| alpine 3.15 | firefox | 82.0-r0 |
| alpine 3.16 | firefox | 82.0-r0 |
| alpine 3.17 | firefox | 82.0-r0 |
| alpine 3.18 | firefox | 82.0-r0 |
| alpine 3.19 | firefox | 82.0-r0 |
| alpine 3.20 | firefox | 82.0-r0 |
| alpine 3.21 | firefox | 82.0-r0 |
| alpine 3.21 | librewolf | 82.0-r0 |
| alpine 3.22 | firefox | 82.0-r0 |
| alpine 3.22 | librewolf | 82.0-r0 |
| alpine 3.23 | firefox | 82.0-r0 |
| alpine 3.23 | librewolf | 82.0-r0 |
| alpine 3.24 | librewolf | 82.0-r0 |
| alpine edge | librewolf | 82.0-r0 |
| cargo::GitHub Security Advisory Rust | crossbeam-channel | 0.4.4 |
| ubuntu 16.04 | firefox | 82.0+build2-0ubuntu0.16.04.5 |
| ubuntu 18.04 | firefox | 82.0+build2-0ubuntu0.18.04.1 |
| ubuntu 20.04 | firefox | 82.0+build2-0ubuntu0.20.04.1 |
| ubuntu 20.10 | firefox | 82.0+build2-0ubuntu0.20.10.1 |
| ubuntu 21.04 | firefox | 82.0.2+build1-0ubuntu1 |
| ubuntu 21.10 | firefox | 82.0.2+build1-0ubuntu1 |
| ubuntu 22.04 | firefox | 82.0.2+build1-0ubuntu1 |
| ubuntu 22.10 | firefox | 82.0.2+build1-0ubuntu1 |
| ubuntu 23.04 | firefox | 82.0.2+build1-0ubuntu1 |
| ubuntu 23.10 | firefox | 82.0.2+build1-0ubuntu1 |
| ubuntu 24.04 | firefox | 82.0.2+build1-0ubuntu1 |
| ubuntu 24.10 | firefox | 82.0.2+build1-0ubuntu1 |
| ubuntu 25.04 | firefox | 82.0.2+build1-0ubuntu1 |
| ubuntu 25.10 | firefox | 82.0.2+build1-0ubuntu1 |
| ubuntu 26.04 | firefox | 82.0.2+build1-0ubuntu1 |
| ubuntu 26.10 | firefox | 82.0.2+build1-0ubuntu1 |
Références
- https://access.redhat.com/security/cve/CVE-2020-15254
- https://github.com/RustSec/advisory-db/pull/425
- https://github.com/crossbeam-rs/crossbeam
- https://github.com/crossbeam-rs/crossbeam/issues/539
- https://github.com/crossbeam-rs/crossbeam/pull/533
- https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-v5m7-53cv-f3hx
- https://nvd.nist.gov/vuln/detail/CVE-2020-15254
- https://rustsec.org/advisories/RUSTSEC-2020-0052.html