vmm-sys-util is a collection of modules that provides helpers and utilities used by multiple rust-vmm components. Starting in version 0.5.0 and prior to version 0.12.0, an issue in the `FamStructWrapper::deserialize` implementation provided by the crate for `vmm_sys_util::fam::FamStructWrapper` can lead to out of bounds memory accesses. The deserialization does not check that the length stored in the header matches the flexible array length. Mismatch in the lengths might allow out of bounds memory access through Rust-safe methods. The issue was corrected in version 0.12.0 by inserting a check that verifies the lengths of compared flexible arrays are equal for any deserialized header and aborting deserialization otherwise. Moreover, the API was changed so that header length can only be modified through Rust-unsafe code. This ensures that users cannot trigger out-of-bounds memory access from Rust-safe code.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:1984-1 advisory.

    - CVE-2023-50711: Fixed out of bounds memory accesses in embedded vmm-sys-util (bsc#1218501).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:1966-1 advisory.

    - CVE-2023-50711: Fixed out of bounds memory accesses in embedded vmm-sys-util (bsc#1218501).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-9974808629 advisory.

    Update rust-vmm components and their consumers to address CVE-2023-50711

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-f2305d485f advisory.

    Update rust-vmm components and their consumers to address CVE-2023-50711

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-04877592b7 advisory.

    Update rust-vmm components and their consumers to address CVE-2023-50711


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:0250-1 advisory.

  - vmm-sys-util is a collection of modules that provides helpers and utilities used by multiple rust-vmm     components. Starting in version 0.5.0 and prior to version 0.12.0, an issue in the     `FamStructWrapper::deserialize` implementation provided by the crate for     `vmm_sys_util::fam::FamStructWrapper` can lead to out of bounds memory accesses. The deserialization does     not check that the length stored in the header matches the flexible array length. Mismatch in the lengths     might allow out of bounds memory access through Rust-safe methods. The issue was corrected in version     0.12.0 by inserting a check that verifies the lengths of compared flexible arrays are equal for any     deserialized header and aborting deserialization otherwise. Moreover, the API was changed so that header     length can only be modified through Rust-unsafe code. This ensures that users cannot trigger out-of-bounds     memory access from Rust-safe code. (CVE-2023-50711)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
200400	SUSE SLES15 / openSUSE 15 Security Update : aws-nitro-enclaves-cli (SUSE-SU-2024:1984-1)	Nessus	SuSE Local Security Checks	critical
200289	SUSE SLES15 / openSUSE 15 Security Update : aws-nitro-enclaves-cli (SUSE-SU-2024:1966-1)	Nessus	SuSE Local Security Checks	critical
194611	Fedora 40 : firecracker / libkrun / rust-event-manager / rust-kvm-bindings / etc (2024-9974808629)	Nessus	Fedora Local Security Checks	critical
190506	Fedora 38 : firecracker / libkrun / rust-event-manager / rust-kvm-bindings / etc (2024-f2305d485f)	Nessus	Fedora Local Security Checks	critical
190382	Fedora 39 : firecracker / libkrun / rust-event-manager / rust-kvm-bindings / etc (2024-04877592b7)	Nessus	Fedora Local Security Checks	critical
189709	SUSE SLES15 / openSUSE 15 Security Update : sevctl (SUSE-SU-2024:0250-1)	Nessus	SuSE Local Security Checks	critical

Detections

Analytics

CVE-2023-50711

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical