Multiple Memory Safety Vulnerabilities in Rust's sized-chunks Affect Ubuntu 20.04 LTS

Yechan Bae discovered several memory safety vulnerabilities in the rust-sized-chunks library affecting Ubuntu 20.04 LTS and its derivatives. These vulnerabilities include improper validation of array sizes, leading to potential out-of-bounds access and memory corruption (CVE-2020-25791, CVE-2020-25792, CVE-2020-25793). Additionally, a memory safety issue in the clone implementation could result in denial of service (CVE-2020-25794). Unaligned references in the InlineArray implementation for types with strict alignment requirements could also lead to undefined behavior (CVE-2020-25796). The vulnerabilities were published on September 19, 2020, and can be mitigated by updating to the specified package versions. Users are advised to perform a standard system update to address these issues. The vulnerabilities pose a risk of exploitation by attackers seeking to manipulate memory handling.

Key Points: • Multiple memory safety vulnerabilities found in rust-sized-chunks for Ubuntu 20.04 LTS. • Exploits could lead to out-of-bounds access, memory corruption, and denial of service. • Users are recommended to update their systems to mitigate these vulnerabilities.