CVE-2021-45685: columnar: Read on uninitialized buffer may cause UB
Summary
CVE-2021-45685: columnar: Read on uninitialized buffer may cause UB (ColumnarReadExt::read_typed_vec()). Affects columnar versions < 0.0.19. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The columnar package is an open-source crate available on crates.io. It provides functionality for working with columnar data structures in Rust. This vulnerability affects versions of the crate up to and including 0.0.19. The vulnerability arises from passing an uninitialized buffer to a user-provided Read implementation (ColumnarReadExt::read_typed_vec()). This can lead to memory exposure and undefined behavior, as reading from uninitialized memory produces undefined values.
Vulnerability Detail
The affected versions of the columnar crate pass an uninitialized buffer to a user-provided Read implementation. This allows arbitrary Read implementations to read from the uninitialized buffer, exposing memory contents. Additionally, the Read implementation can return an incorrect number of bytes written to the buffer. These issues can lead to memory exposure and undefined behavior, potentially resulting in security vulnerabilities or crashes in applications that use the columnar crate.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to update to a fixed version of the columnar crate as soon as possible.
Conclusion
In conclusion, the columnar crate versions up to and including 0.0.19 are vulnerable to a read on uninitialized buffer issue. This can lead to memory exposure and undefined behavior, potentially resulting in security vulnerabilities or crashes. It is recommended to update to a fixed version of the crate to mitigate these risks. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for columnar →
FAQ
This vulnerability can lead to memory exposure and undefined behavior. It can potentially be exploited by malicious actors to read sensitive information from memory or cause crashes in affected applications.
You can use the Vulert Playground at Vulert Scanner to check if your application is affected by this vulnerability. Simply provide your Cargo.lock file and the playground will analyze it for open-source vulnerabilities, including this one.
There are no known instances of this vulnerability being exploited in the wild at the time of this report. However, it is important to update to a fixed version of the columnar crate to mitigate the risk.
Yes, the CVSS score for this vulnerability is 9.8, indicating a critical severity level.
You can find more information about this vulnerability in the GitHub Security Advisory database at the following link: https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/01/GHSA-9mp7-45qh-r8j8/GHSA-9mp7-45qh-r8j8.json
Related vulnerabilities
Recent vulnerabilities recorded for columnar.
