crates.io vm-memory vulnerabilities

Latest crates.io vm-memory CVEs

Newest publication first

1. CVE-2023-41051 Default functions in VolatileMemory trait lack bounds checks in vm-memory

   Published 2023-09-01

   Medium·CVSS 4.7 EPSS 0.26%

   In a typical Virtual Machine Monitor (VMM) there are several components, such as boot loader, virtual device drivers, virtio backend drivers and vhost drivers, that need to access the VM physical memory. The vm-memory rust crate provides a set of traits to decouple VM memory cons...

2. CVE-2020-13759 Improper Synchronization and Race Condition in vm-memory

   Published 2020-06-02

   High·CVSS 7.5 EPSS 1.6%

   rust-vmm vm-memory before 0.1.1 and 0.2.x before 0.2.1 allows attackers to cause a denial of service (loss of IP networking) because read_obj and write_obj do not properly access memory. This affects aarch64 (with musl or glibc) and x86_64 (with musl).

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.