Out-of-bounds write in vmm-sys-util - CVE-2023-50711

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU85897

Out-of-bounds write in vmm-sys-util - CVE-2023-50711

Published: January 30, 2024


Vulnerability identifier: #VU85897
CSH Severity: High
CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-50711
CWE-ID: CWE-787
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a boundary error when processing untrusted input within the FamStructWrapper::deserialize() implementation. A remote attacker can pass specially crafted input to the application, trigger an out-of-bounds write and execute arbitrary code on the target system.


Affected software

vmm-sys-util
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Real Time 15
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Manager Server
Public Cloud Module
Server Applications Module
openSUSE Leap
Fedora
rust-versionize
rust-event-manager
sevctl-debugsource
sevctl
sevctl-debuginfo
rust-kvm-bindings
rust-vm-superio
rust-userfaultfd
rust-vhost
rust-linux-loader
rust-virtio-queue
rust-vmm-sys-util
rust-vhost-user-backend
rust-vm-memory
rust-kvm-ioctls
aws-nitro-enclaves-binaryblobs-upstream
system-group-ne
aws-nitro-enclaves-cli-debuginfo
aws-nitro-enclaves-binaryblobs-upstream-debuginfo
aws-nitro-enclaves-cli-debugsource
aws-nitro-enclaves-cli
firecracker
libkrun
virtiofsd

How to mitigate CVE-2023-50711

Install updates from vendor's website.

vmm-sys-util - update to 0.12.1
rust-versionize - addressed in versions 0.2.0-1.fc40, 0.2.0-2.fc38, 0.2.0-2.fc39
rust-event-manager - addressed in versions 0.4.0-1.fc40, 0.4.0-2.fc38, 0.4.0-2.fc39
sevctl-debugsource - update to 0.4.3-150500.3.3.1
sevctl - update to 0.4.3-150500.3.3.1
sevctl-debuginfo - update to 0.4.3-150500.3.3.1
rust-kvm-bindings - addressed in versions 0.7.0-1.fc38, 0.7.0-1.fc39, 0.7.0-1.fc40
rust-vm-superio - addressed in versions 0.7.0-3.fc40, 0.7.0-4.fc38, 0.7.0-4.fc39
rust-userfaultfd - addressed in versions 0.8.1-1.fc40, 0.8.1-2.fc38, 0.8.1-2.fc39
rust-vhost - addressed in versions 0.10.0-1.fc40, 0.10.0-2.fc38, 0.10.0-2.fc39
rust-linux-loader - addressed in versions 0.10.0-2.fc40, 0.11.0-1.fc38, 0.11.0-1.fc39
rust-virtio-queue - addressed in versions 0.11.0-1.fc38, 0.11.0-1.fc39, 0.11.0-1.fc40
rust-vmm-sys-util - addressed in versions 0.12.1-1.fc40, 0.12.1-2.fc38, 0.12.1-2.fc39
rust-vhost-user-backend - addressed in versions 0.13.1-1.fc40, 0.13.1-2.fc38, 0.13.1-2.fc39
rust-vm-memory - addressed in versions 0.14.0-1.fc38, 0.14.0-1.fc39, 0.14.0-1.fc40
rust-kvm-ioctls - addressed in versions 0.16.0-1.fc40, 0.16.0-2.fc39, 0.16.0-3.fc38
aws-nitro-enclaves-binaryblobs-upstream - addressed in versions 1.3.0~git1.db34c02-150400.3.6.1, 1.3.0~git1.db34c02-150600.10.3.1
system-group-ne - addressed in versions 1.3.0~git1.db34c02-150400.3.6.1, 1.3.0~git1.db34c02-150600.10.3.1
aws-nitro-enclaves-cli-debuginfo - addressed in versions 1.3.0~git1.db34c02-150400.3.6.1, 1.3.0~git1.db34c02-150600.10.3.1
aws-nitro-enclaves-binaryblobs-upstream-debuginfo - addressed in versions 1.3.0~git1.db34c02-150400.3.6.1, 1.3.0~git1.db34c02-150600.10.3.1
aws-nitro-enclaves-cli-debugsource - addressed in versions 1.3.0~git1.db34c02-150400.3.6.1, 1.3.0~git1.db34c02-150600.10.3.1
aws-nitro-enclaves-cli - addressed in versions 1.3.0~git1.db34c02-150400.3.6.1, 1.3.0~git1.db34c02-150600.10.3.1
firecracker - addressed in versions 1.6.0-4.fc40, 1.6.0-6.fc38
libkrun - addressed in versions 1.7.2-2.fc40, 1.7.2-4.fc38, 1.7.2-4.fc39
virtiofsd - addressed in versions 1.10.0-1.fc40, 1.10.1-1.fc38, 1.10.1-1.fc39

External References

Related Security Bulletins