RUSTSEC-2019-0008

    Dashboard / Vulnerabilities / RUSTSEC-2019-0008

    RUSTSEC-2019-0008

    Published: 24 Jun 2019Last Modified: 8 Nov 2023

    Summary: Flaw in string parsing can lead to crashes due to invalid memory access.

    Details: The affected version of this crate did not guard against accessing memory beyond the range of its input data. A pointer cast to read the data into a 256-bit register could lead to a segmentation fault when the end plus the 32 bytes (256 bit) read would overlap into the next page during string parsing. ``` page | ... page 1 ... | ... page 2 ... | data | x[n * 32 byte]xx__ | | access | ..][ 32 byte ] | | segflt | [ 32 | byte ] | ``` This allows an attacker to eventually crash a service. The flaw was corrected by using a padding buffer for the last read from the input. So that we are we never read over the boundary of the input data.

    References: https://crates.io/crates/simd-json, https://rustsec.org/advisories/RUSTSEC-2019-0008.html, https://github.com/Licenser/simdjson-rs/pull/27

    Affected packages

    Package

    Name: simd-json

    Purl: pkg:cargo/simd-json

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0.1.14-0
    Fixed -0.1.15

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High