GHSA-cf4g-fcf8-3cr9
`pnet_packet` buffer overrun in `set_payload` setters
GHSA-cf4g-fcf8-3cr9 is a medium vulnerability (CVSS 6.0) in pnet_packet, published June 19, 2020. No source lists public exploit code. Fixed in pnet_packet 0.27.2.
- Severity
- 6.0 MediumCVSS 3.0, GitHub Advisories
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
0.27.2pnet_packet +1 more
Description
As indicated by this issue, a buffer overrun is possible in the set_payload setter of the various mutable "Packet" struct setters. The offending set_payload functions were defined within the struct impl blocks in earlier versions of the package, and later by the packet macro.
Fixed in the packet macro by this PR.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- High
- Availability
- High
Affected packages
| Package | Affected | Fixed |
|---|---|---|
pnet_packetcrates.io | before 0.27.2 | 0.27.2 |
pnet_packetcrates.io | 0.0.0-0 up to 0.27.2 | 0.27.2 |
What each source reports
GitHub Advisories Score used
`pnet_packet` buffer overrun in `set_payload` setters
As indicated by this issue, a buffer overrun is possible in the set_payload setter of the various mutable "Packet" struct setters. The offending set_payload functions were defined within the struct impl blocks in earlier versions of the package, and later by the packet macro.
Fixed in the packet macro by this PR.
- Record
GHSA-cf4g-fcf8-3cr9- CVSS 3.0
- 6.0 Medium
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H - Updated
- 2026-11-02
OSV
`pnet_packet` buffer overrun in `set_payload` setters
As indicated by this issue, a buffer overrun is possible in the set_payload setter of the various mutable "Packet" struct setters. The offending set_payload functions were defined within the struct impl blocks in earlier versions of the package, and later by the packet macro.
Fixed in the packet macro by this PR.
- Record
GHSA-cf4g-fcf8-3cr9- CVSS 3.0
- 6.0 Medium
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H - Updated
- 2026-11-02
OSVRUSTSEC-2020-0167
`pnet_packet` buffer overrun in `set_payload` setters
As indicated by this issue, a buffer overrun is possible in the set_payload setter of the various mutable "Packet" struct setters. The offending set_payload functions were defined within the struct impl blocks in earlier versions of the package, and later by the packet macro.
Fixed in the packet macro by this PR.
- Record
RUSTSEC-2020-0167- CVSS 3.0
- 6.0 Medium
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H - Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.