Vulnerabilities > CVE-2020-25792 - Improper Validation of Array Index vulnerability in Sized-Chunks Project Sized-Chunks

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

sized-chunks-project

CWE-129

NVD

Published: 2020-09-19

Updated: 2024-11-21

Summary

An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, the array size is not checked when constructed with pair().

Vulnerable Configurations

Part	Description	Count
Application	Sized-Chunks_Project Sized Chunks Project Sized Chunks 0.1.0 Sized Chunks Project Sized Chunks 0.1.1 Sized Chunks Project Sized Chunks 0.1.2 Sized Chunks Project Sized Chunks 0.1.3 Sized Chunks Project Sized Chunks 0.2.0 Sized Chunks Project Sized Chunks 0.2.1 Sized Chunks Project Sized Chunks 0.2.2 Sized Chunks Project Sized Chunks 0.3.0 Sized Chunks Project Sized Chunks 0.3.1 Sized Chunks Project Sized Chunks 0.3.2 Sized Chunks Project Sized Chunks 0.4.0 Sized Chunks Project Sized Chunks 0.5.0 Sized Chunks Project Sized Chunks 0.5.1 Sized Chunks Project Sized Chunks 0.5.2 Sized Chunks Project Sized Chunks 0.5.3 Sized Chunks Project Sized Chunks 0.6.0 Sized Chunks Project Sized Chunks 0.6.1 Sized Chunks Project Sized Chunks 0.6.2	18

Common Weakness Enumeration (CWE)

CWE-129 - Improper Validation of Array Index

Common Attack Pattern Enumeration and Classification (CAPEC)

Overflow Buffers
Buffer Overflow attacks target improper or missing bounds checking on buffer operations, typically triggered by input injected by an attacker. As a consequence, an attacker is able to write past the boundaries of allocated buffer regions in memory, causing a program crash or potentially redirection of execution as per the attackers' choice.

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

Common Attack Pattern Enumeration and Classification (CAPEC)

References