CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCVE-2020-13759
High (7.5) in vm-memory project vm-memory. EPSS 1.6% chance of exploitation in the next 30 days. Fixed in vm-memory 0.1.1, 0.2.1.
rust-vmm vm-memory before 0.1.1 and 0.2.x before 0.2.1 allows attackers to cause a denial of service (loss of IP networking) because read_obj and write_obj do not properly access memory. This affects aarch64 (with musl or glibc) and x86_64 (with musl).
Severity
- EPSS
- 1.6% chance of exploitation in the next 30 days; higher than 76% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-362, CWE-662
- Published
- Modified
- Record from
- the NVD, synced
Affected
- vm-memory_project:vm-memory
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-mm4m-qg48-f7wc | crates.io | vm-memory | <0.1.1 | 0.1.1 |
| GHSA-mm4m-qg48-f7wc | crates.io | vm-memory | >=0.2.0 <0.2.1 | 0.2.1 |
| RUSTSEC-2020-0157 | crates.io | vm-memory | >=0.0.0-0 <0.1.1 >=0.2.0-0 <0.2.1 | 0.1.1, 0.2.1 |