GHSA-R24F-HG58-VFRW
Vulnerability from github – Published: 2023-12-21 18:14 – Updated: 2023-12-21 18:14Affected versions allocate memory using the alignment of usize and write data to it of type u64, without using core::ptr::write_unaligned. In platforms with sub-64bit alignment for usize (including wasm32 and x86) these writes are insufficiently aligned some of the time.
If using an ordinary optimized standard library, the bug exhibits Undefined Behavior so may or may not behave in any sensible way, depending on optimization settings and hardware and other things. If using a Rust standard library built with debug assertions enabled, the bug manifests deterministically in a crash (non-unwinding panic) saying "ptr::write requires that the pointer argument is aligned and non-null".
No 64-bit platform is impacted by the bug.
The flaw was corrected by allocating with adequately high alignment on all platforms.
{
"affected": [
{
"package": {
"ecosystem": "crates.io",
"name": "unsafe-libyaml"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0.2.10"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"aliases": [],
"database_specific": {
"cwe_ids": [],
"github_reviewed": true,
"github_reviewed_at": "2023-12-21T18:14:34Z",
"nvd_published_at": null,
"severity": "MODERATE"
},
"details": "Affected versions allocate memory using the alignment of `usize` and write data to it of type `u64`, without using `core::ptr::write_unaligned`. In platforms with sub-64bit alignment for `usize` (including wasm32 and x86) these writes are insufficiently aligned some of the time.\n\nIf using an ordinary optimized standard library, the bug exhibits Undefined Behavior so may or may not behave in any sensible way, depending on optimization settings and hardware and other things. If using a Rust standard library built with debug assertions enabled, the bug manifests deterministically in a crash (non-unwinding panic) saying _\"ptr::write requires that the pointer argument is aligned and non-null\"_.\n\nNo 64-bit platform is impacted by the bug.\n\nThe flaw was corrected by allocating with adequately high alignment on all\nplatforms.\n",
"id": "GHSA-r24f-hg58-vfrw",
"modified": "2023-12-21T18:14:34Z",
"published": "2023-12-21T18:14:34Z",
"references": [
{
"type": "WEB",
"url": "https://github.com/dtolnay/unsafe-libyaml/issues/21"
},
{
"type": "WEB",
"url": "https://github.com/dtolnay/unsafe-libyaml/commit/7755559145c9cf5573639bfecc557893d4a46b0d"
},
{
"type": "PACKAGE",
"url": "https://github.com/dtolnay/unsafe-libyaml"
},
{
"type": "WEB",
"url": "https://rustsec.org/advisories/RUSTSEC-2023-0075.html"
}
],
"schema_version": "1.4.0",
"severity": [],
"summary": "unsafe-libyaml unaligned write of u64 on 32-bit and 16-bit platforms"
}
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.