NVD Vulnerability Detail

CVE-2020-15254

Summary	Crossbeam is a set of tools for concurrent programming. In crossbeam-channel before version 0.4.4, the bounded channel incorrectly assumes that `Vec::from_iter` has allocated capacity that same as the number of iterator elements. `Vec::from_iter` does not actually guarantee that and may allocate extra memory. The destructor of the `bounded` channel reconstructs `Vec` from the raw pointer based on the incorrect assumes described above. This is unsound and causing deallocation with the incorrect capacity when `Vec::from_iter` has allocated different sizes with the number of iterator elements. This has been fixed in crossbeam-channel 0.4.4.
Publication Date	Oct. 17, 2020, 2:15 a.m.
Registration Date	Jan. 26, 2021, 11:53 a.m.
Last Update	Nov. 21, 2024, 2:05 p.m.

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:crossbeam_project:crossbeam::::::::					0.4.4

Related information, measures and tools

No	URL	タグ
1	https://github.com/crossbeam-rs/crossbeam/issues/539	Exploit Third Party Advisory
2	https://github.com/crossbeam-rs/crossbeam/issues/539	Exploit Third Party Advisory
3	https://github.com/crossbeam-rs/crossbeam/pull/533	Exploit Patch Third Party Advisory
4	https://github.com/crossbeam-rs/crossbeam/pull/533	Exploit Patch Third Party Advisory
5	https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-v5m7-53cv-f3hx	Third Party Advisory
6	https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-v5m7-53cv-f3hx	Third Party Advisory
7	https://github.com/RustSec/advisory-db/pull/425	Patch Third Party Advisory
8	https://github.com/RustSec/advisory-db/pull/425	Patch Third Party Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-401	有効期限後のメモリの解放の欠如	https://cwe.mitre.org/data/definitions/401.html

JVN Vulnerability Information

Crossbeam におけるバッファエラーの脆弱性

Title	Crossbeam におけるバッファエラーの脆弱性
Summary	Crossbeam には、バッファエラーの脆弱性が存在します。
Possible impacts	情報を取得される、情報を改ざんされる、およびサービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Aug. 4, 2020, midnight
Registration Date	May 18, 2021, 1:55 p.m.
Last Update	May 18, 2021, 1:55 p.m.

Affected System

Crossbeam project

Crossbeam 0.4.4 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2020-15254	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15254
National Vulnerability Database (NVD)
2	CVE-2020-15254	https://nvd.nist.gov/vuln/detail/CVE-2020-15254

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-119	https://jvndb.jvn.jp/ja/cwe/CWE-119.html

ベンダー情報

No	Name	URL
GitHub
1	Add advisory for UB in crossbeam-channel 0.4.3 #425	https://github.com/RustSec/advisory-db/pull/425
2	Memory Leak in crossbeam-queue ArrayQueue? (Latest git only, ver0.2.3 is not effected) #539	https://github.com/crossbeam-rs/crossbeam/issues/539
3	Undefined Behavior in bounded channel	https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-v5m7-53cv-f3hx
4	Use Box<[T]> instead of Vec<T> to initialize and drop ArrayQueue #533	https://github.com/crossbeam-rs/crossbeam/pull/533

Change Log

No	Changed Details	Date of change
1	[2021年05月18日] 掲載	May 18, 2021, 1:55 p.m.