`pnet_packet` buffer overrun in `set_payload` setters · GHSA-cf4g-fcf8-3cr9 · GitHub Advisory Database · GitHub

`pnet_packet` buffer overrun in `set_payload` setters

Moderate severity GitHub Reviewed Published Feb 9, 2023 to the GitHub Advisory Database • Updated Feb 9, 2023

Package

pnet_packet (Rust)

Affected versions

< 0.27.2

Patched versions

0.27.2

Description

As indicated by this issue, a buffer overrun is possible in the set_payload setter of the various mutable "Packet" struct setters. The offending set_payload functions were defined within the struct impl blocks in earlier versions of the package, and later by the packet macro.

Fixed in the packet macro by this PR.

References

Published to the GitHub Advisory Database Feb 9, 2023

Reviewed Feb 9, 2023

Last updated Feb 9, 2023

Severity

Moderate

6.0

/ 10

CVSS base metrics

Attack vector

Local

Attack complexity

Low

Privileges required

High

User interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

High

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H