OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2025-12-30 00:03:57 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add advisory for pnet_packet (#1595)

Browse Source 
Co-authored-by: sidunder <sidunder@users.noreply.github.com>
This commit is contained in:
sidunder
2023-02-08 23:10:46 -04:00
committed by GitHub
parent b485cf4db1
commit 516ebee12d
1 changed files with 18 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
crates/pnet_packet/RUSTSEC-0000-0000.md Normal file
View File

@@ -0,0 +1,18 @@
```toml
[advisory]
id = "RUSTSEC-0000-0000"
package = "pnet_packet"
date = "2020-06-19"
url = "https://github.com/libpnet/libpnet/issues/449"
categories = ["memory-corruption"]
cvss = "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H"
[versions]
patched = [">= 0.27.2"]
```
# `pnet_packet` buffer overrun in `set_payload` setters
As indicated by this [issue](https://github.com/libpnet/libpnet/issues/449#issuecomment-663355987), a buffer overrun is possible in the `set_payload` setter of the various mutable "Packet" struct setters. The offending `set_payload` functions were defined within the struct `impl` blocks in earlier versions of the package, and later by the `packet` macro.
Fixed in the `packet` macro by [this](https://github.com/libpnet/libpnet/pull/455) PR.