Lucet-runtime-internals Crate Sigstack Allocation Vulnerability

Lucet-runtime-internals Crate Sigstack Allocation Vulnerability

CVE-2020-35859 · CRITICAL Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

An issue was discovered in the lucet-runtime-internals crate before 0.5.1 for Rust. It mishandles sigstack allocation. Guest programs may be able to obtain sensitive information, or guest programs can experience memory corruption.

Learn more about our Internal Network Penetration Testing.