CVE-2021-43620

An issue was discovered in the fruity crate through 0.2.0 for Rust. Security-relevant validation of filename extensions is plausibly affected. Methods of NSString for conversion to a string may return a partial result. Because they call CStr::from_ptr on a pointer to the string buffer, the string is terminated at the first '\0' byte, which might not be the end of the string.

CVSS v3 7.5 HIGH
CVSS v2.0 5.0 MEDIUM

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
https://github.com/nvzqz/fruity/issues/14	Exploit Issue Tracking Patch Third Party Advisory
https://github.com/rustsec/advisory-db/pull/1102	Exploit Patch Third Party Advisory
https://rustsec.org/advisories/RUSTSEC-2021-0123.html	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:fruity_project:fruity:0.1.0:::::rust::
	cpe:2.3:a:fruity_project:fruity:0.2.0:::::rust::

History

No history.

Information

Published : 2021-11-15 05:15

Updated : 2024-02-28 18:48

NVD link : CVE-2021-43620

Mitre link : CVE-2021-43620

CVE.ORG link : CVE-2021-43620

JSON object : View

Products Affected

fruity_project

fruity

CWE

NVD-CWE-Other

{"id": "CVE-2021-43620", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2021-11-15T05:15:07.913", "references": [{"url": "https://github.com/nvzqz/fruity/issues/14", "tags": ["Exploit", "Issue Tracking", "Patch", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/rustsec/advisory-db/pull/1102", "tags": ["Exploit", "Patch", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://rustsec.org/advisories/RUSTSEC-2021-0123.html", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in the fruity crate through 0.2.0 for Rust. Security-relevant validation of filename extensions is plausibly affected. Methods of NSString for conversion to a string may return a partial result. Because they call CStr::from_ptr on a pointer to the string buffer, the string is terminated at the first '\\0' byte, which might not be the end of the string."}, {"lang": "es", "value": "Se ha detectado un problema en el crate fruity versiones hasta 0.2.0, para Rust. Una comprobaci\u00f3n relevante para la seguridad de las extensiones de los nombres de archivos est\u00e1 plausiblemente afectada. Los m\u00e9todos de NSString para la conversi\u00f3n a una cadena pueden devolver un resultado parcial. Debido a que llaman a CStr::from_ptr en un puntero al buffer de la cadena, la cadena se termina en el primer byte \"\\0\", que podr\u00eda no ser el final de la cadena"}], "lastModified": "2021-11-18T04:27:13.753", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:fruity_project:fruity:0.1.0:*:*:*:*:rust:*:*", "vulnerable": true, "matchCriteriaId": "0D1DEC41-5B75-4E16-B849-F4FCA67CD85D"}, {"criteria": "cpe:2.3:a:fruity_project:fruity:0.2.0:*:*:*:*:rust:*:*", "vulnerable": true, "matchCriteriaId": "3CE1B1A4-8B5B-4B05-AF74-F170D4C1E0EB"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}