CVE-2020-11105 Use after free in n/a
The cereal library uses raw pointer addresses for shared_ptr caching, leading to use-after-free issues and potential memory corruption or data leakage.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2020-11105?
CVE-2020-11105 is a critical use after free vulnerability in n/a, published on 30 Mar 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue was discovered in USC iLab cereal through 1.3.0. It employs caching of std::shared_ptr values, using the raw pointer address as a unique identifier. This becomes problematic if an std::shared_ptr variable goes out of scope and is freed, and a new std::shared_ptr is allocated at the same address. Serialization fidelity thereby becomes dependent upon memory layout. In short, serialized std::shared_ptr variables cannot always be expected to serialize back into their original values. This can have any number of consequences, depending on the context within which this manifests.
Weakness: CWE-763
Which versions are affected by CVE-2020-11105?
It affects 1 product.
Linux distribution packages (1)
cereal openSUSE:Tumbleweed | All versions | 1.3.2-1.1 |
Products include Usc Cereal.
How do I fix CVE-2020-11105?
Upgrade to a fixed version.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is CVE-2020-11105 being exploited?
There is no known exploitation of CVE-2020-11105 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-wgww-fh2f-c855, openSUSE-SU-2024:12197-1.