{"id":787219,"name":"vm-memory","ecosystem":"cargo","description":"Safe abstractions for accessing the VM physical memory","homepage":null,"licenses":"Apache-2.0 OR BSD-3-Clause","normalized_licenses":["Apache-2.0","BSD-3-Clause"],"repository_url":"https://github.com/rust-vmm/vm-memory","keywords_array":["memory"],"namespace":null,"versions_count":30,"first_release_published_at":"2020-03-03T12:44:16.328Z","latest_release_published_at":"2025-12-02T08:06:01.668Z","latest_release_number":"0.18.0","last_synced_at":"2026-09-15T12:21:44.476Z","created_at":"2022-04-07T13:00:38.847Z","updated_at":"2026-09-15T19:16:53.922Z","registry_url":"https://crates.io/crates/vm-memory/","install_command":"cargo install vm-memory","documentation_url":"https://docs.rs/vm-memory/","metadata":{"categories":["memory-management"]},"repo_metadata":{"id":34472628,"uuid":"173119716","full_name":"rust-vmm/vm-memory","owner":"rust-vmm","description":"Virtual machine's guest memory crate","archived":false,"fork":false,"pushed_at":"2024-08-05T16:21:23.000Z","size":431,"stargazers_count":297,"open_issues_count":30,"forks_count":97,"subscribers_count":30,"default_branch":"main","last_synced_at":"2024-08-08T02:29:46.516Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Rust","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/rust-vmm.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE-APACHE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2019-02-28T13:45:05.000Z","updated_at":"2024-08-06T02:44:35.000Z","dependencies_parsed_at":"2023-11-14T11:25:35.941Z","dependency_job_id":"45e19f0a-fb6b-48c9-a381-a0e6d2a23b6e","html_url":"https://github.com/rust-vmm/vm-memory","commit_stats":{"total_commits":240,"total_committers":39,"mean_commits":6.153846153846154,"dds":0.8375,"last_synced_commit":"b55a713d764074eb2bbd1869da12ab8f344d7516"},"previous_names":[],"tags_count":22,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Fvm-memory","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Fvm-memory/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Fvm-memory/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Fvm-memory/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/rust-vmm","download_url":"https://codeload.github.com/rust-vmm/vm-memory/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":217598946,"owners_count":16201897,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"rust-vmm","name":"rust-vmm","uuid":"46028664","kind":"organization","description":"","email":"rust-vmm@lists.opendev.org","website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/46028664?v=4","repositories_count":34,"last_synced_at":"2024-04-17T16:59:53.687Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/rust-vmm","funding_links":[],"total_stars":2434,"followers":482,"following":0,"created_at":"2022-11-13T05:16:46.451Z","updated_at":"2024-04-17T17:00:00.074Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/rust-vmm","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/rust-vmm/repositories"},"tags":[{"name":"v0.14.1","sha":"6bbdf2c8199c24e50b2292fe9108a8daa5847275","kind":"commit","published_at":"2024-03-11T10:17:45.000Z","download_url":"https://codeload.github.com/rust-vmm/vm-memory/tar.gz/v0.14.1","html_url":"https://github.com/rust-vmm/vm-memory/releases/tag/v0.14.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Fvm-memory/tags/v0.14.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Fvm-memory/tags/v0.14.1/manifests"},{"name":"v0.14.0","sha":"b8bf1dbcca5d85a158cf7a8ed6cb19774428819c","kind":"commit","published_at":"2024-01-05T08:51:13.000Z","download_url":"https://codeload.github.com/rust-vmm/vm-memory/tar.gz/v0.14.0","html_url":"https://github.com/rust-vmm/vm-memory/releases/tag/v0.14.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Fvm-memory/tags/v0.14.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Fvm-memory/tags/v0.14.0/manifests"},{"name":"v0.13.1","sha":"07ab85360b26bf346770f540a1437bb4d4988fb0","kind":"commit","published_at":"2023-10-11T15:25:01.000Z","download_url":"https://codeload.github.com/rust-vmm/vm-memory/tar.gz/v0.13.1","html_url":"https://github.com/rust-vmm/vm-memory/releases/tag/v0.13.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Fvm-memory/tags/v0.13.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Fvm-memory/tags/v0.13.1/manifests"},{"name":"v0.13.0","sha":"a6bcb43e56e5c274a59c95631e9a3492016cc854","kind":"commit","published_at":"2023-09-22T08:32:31.000Z","download_url":"https://codeload.github.com/rust-vmm/vm-memory/tar.gz/v0.13.0","html_url":"https://github.com/rust-vmm/vm-memory/releases/tag/v0.13.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Fvm-memory/tags/v0.13.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Fvm-memory/tags/v0.13.0/manifests"},{"name":"v0.12.2","sha":"aff1dd4a5259f7deba56692840f7a2d9ca34c9c8","kind":"commit","published_at":"2023-08-29T13:27:23.000Z","download_url":"https://codeload.github.com/rust-vmm/vm-memory/tar.gz/v0.12.2","html_url":"https://github.com/rust-vmm/vm-memory/releases/tag/v0.12.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Fvm-memory/tags/v0.12.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Fvm-memory/tags/v0.12.2/manifests"},{"name":"v0.12.1","sha":"5258456e622f351ff3503ff9c71e90e7804faedb","kind":"commit","published_at":"2023-07-21T01:59:21.000Z","download_url":"https://codeload.github.com/rust-vmm/vm-memory/tar.gz/v0.12.1","html_url":"https://github.com/rust-vmm/vm-memory/releases/tag/v0.12.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Fvm-memory/tags/v0.12.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Fvm-memory/tags/v0.12.1/manifests"},{"name":"v0.12.0","sha":"22416e0e2b8be37152d573b6706565097c7530a1","kind":"commit","published_at":"2023-06-28T16:21:52.000Z","download_url":"https://codeload.github.com/rust-vmm/vm-memory/tar.gz/v0.12.0","html_url":"https://github.com/rust-vmm/vm-memory/releases/tag/v0.12.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Fvm-memory/tags/v0.12.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Fvm-memory/tags/v0.12.0/manifests"},{"name":"v0.11.0","sha":"b55a713d764074eb2bbd1869da12ab8f344d7516","kind":"tag","published_at":"2023-04-19T09:48:28.000Z","download_url":"https://codeload.github.com/rust-vmm/vm-memory/tar.gz/v0.11.0","html_url":"https://github.com/rust-vmm/vm-memory/releases/tag/v0.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Fvm-memory/tags/v0.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Fvm-memory/tags/v0.11.0/manifests"},{"name":"v0.10.0","sha":"24a5d20156ccb8f44669a4f05b5231fa5cf9a53d","kind":"tag","published_at":"2022-11-11T13:16:49.000Z","download_url":"https://codeload.github.com/rust-vmm/vm-memory/tar.gz/v0.10.0","html_url":"https://github.com/rust-vmm/vm-memory/releases/tag/v0.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Fvm-memory/tags/v0.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Fvm-memory/tags/v0.10.0/manifests"},{"name":"vm-memory-v0.9.0","sha":"372de8daeb9ca02fab01ae76d1ec6cfc119c11b2","kind":"tag","published_at":"2022-08-16T15:40:41.000Z","download_url":"https://codeload.github.com/rust-vmm/vm-memory/tar.gz/vm-memory-v0.9.0","html_url":"https://github.com/rust-vmm/vm-memory/releases/tag/vm-memory-v0.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Fvm-memory/tags/vm-memory-v0.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Fvm-memory/tags/vm-memory-v0.9.0/manifests"},{"name":"v0.8.0","sha":"fc7153a4f63c352d1fa9419c4654a6c9aec408cb","kind":"tag","published_at":"2022-04-07T12:50:42.000Z","download_url":"https://codeload.github.com/rust-vmm/vm-memory/tar.gz/v0.8.0","html_url":"https://github.com/rust-vmm/vm-memory/releases/tag/v0.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Fvm-memory/tags/v0.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Fvm-memory/tags/v0.8.0/manifests"},{"name":"v0.7.0","sha":"cd17d43d8e2cdbfe4303acd299f396ce9f6edede","kind":"tag","published_at":"2021-10-20T19:34:49.000Z","download_url":"https://codeload.github.com/rust-vmm/vm-memory/tar.gz/v0.7.0","html_url":"https://github.com/rust-vmm/vm-memory/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Fvm-memory/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Fvm-memory/tags/v0.7.0/manifests"},{"name":"v0.6.0","sha":"acd281e9f76a45f331ac1dc3fee87b8ed1044f53","kind":"tag","published_at":"2021-08-05T12:02:18.000Z","download_url":"https://codeload.github.com/rust-vmm/vm-memory/tar.gz/v0.6.0","html_url":"https://github.com/rust-vmm/vm-memory/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Fvm-memory/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Fvm-memory/tags/v0.6.0/manifests"},{"name":"v0.5.0","sha":"a7d4e5e19d94f5f4b9771f12f2c7ef0794abe9e8","kind":"tag","published_at":"2021-02-10T09:46:51.000Z","download_url":"https://codeload.github.com/rust-vmm/vm-memory/tar.gz/v0.5.0","html_url":"https://github.com/rust-vmm/vm-memory/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Fvm-memory/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Fvm-memory/tags/v0.5.0/manifests"},{"name":"v0.4.0","sha":"f7f159fc7989f48441a26d6464bd5d926b83dc9e","kind":"tag","published_at":"2020-11-20T15:13:22.000Z","download_url":"https://codeload.github.com/rust-vmm/vm-memory/tar.gz/v0.4.0","html_url":"https://github.com/rust-vmm/vm-memory/releases/tag/v0.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Fvm-memory/tags/v0.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Fvm-memory/tags/v0.4.0/manifests"},{"name":"v0.3.0","sha":"54c8934d854887462404f29142a88a35dadf2fc5","kind":"commit","published_at":"2020-10-02T09:55:56.000Z","download_url":"https://codeload.github.com/rust-vmm/vm-memory/tar.gz/v0.3.0","html_url":"https://github.com/rust-vmm/vm-memory/releases/tag/v0.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Fvm-memory/tags/v0.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Fvm-memory/tags/v0.3.0/manifests"},{"name":"v0.1.2","sha":"90f6f6781d7f689bf4af99911d342bba7c724f23","kind":"commit","published_at":"2020-08-05T07:50:53.000Z","download_url":"https://codeload.github.com/rust-vmm/vm-memory/tar.gz/v0.1.2","html_url":"https://github.com/rust-vmm/vm-memory/releases/tag/v0.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Fvm-memory/tags/v0.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Fvm-memory/tags/v0.1.2/manifests"},{"name":"v0.2.2","sha":"6b4f30cda50cae0ea9262b9502b47648f081db3f","kind":"commit","published_at":"2020-08-05T07:50:28.000Z","download_url":"https://codeload.github.com/rust-vmm/vm-memory/tar.gz/v0.2.2","html_url":"https://github.com/rust-vmm/vm-memory/releases/tag/v0.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Fvm-memory/tags/v0.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Fvm-memory/tags/v0.2.2/manifests"},{"name":"v0.1.1","sha":"ec57d690f7bc442b7cd5066745bd24e16329b70b","kind":"tag","published_at":"2020-05-28T14:51:08.000Z","download_url":"https://codeload.github.com/rust-vmm/vm-memory/tar.gz/v0.1.1","html_url":"https://github.com/rust-vmm/vm-memory/releases/tag/v0.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Fvm-memory/tags/v0.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Fvm-memory/tags/v0.1.1/manifests"},{"name":"v0.2.1","sha":"2931a16ab49bbd1375f852d10a75e289608c5671","kind":"tag","published_at":"2020-05-28T14:50:02.000Z","download_url":"https://codeload.github.com/rust-vmm/vm-memory/tar.gz/v0.2.1","html_url":"https://github.com/rust-vmm/vm-memory/releases/tag/v0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Fvm-memory/tags/v0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Fvm-memory/tags/v0.2.1/manifests"},{"name":"v0.2.0","sha":"093435194b97daad2163d3e6c26179bbfa7b7fae","kind":"tag","published_at":"2020-03-19T14:27:21.000Z","download_url":"https://codeload.github.com/rust-vmm/vm-memory/tar.gz/v0.2.0","html_url":"https://github.com/rust-vmm/vm-memory/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Fvm-memory/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Fvm-memory/tags/v0.2.0/manifests"},{"name":"v0.1.0","sha":"a84a7b8f531e9102f884bfbe7c97147fbe91a317","kind":"tag","published_at":"2020-03-17T10:01:51.000Z","download_url":"https://codeload.github.com/rust-vmm/vm-memory/tar.gz/v0.1.0","html_url":"https://github.com/rust-vmm/vm-memory/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Fvm-memory/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Fvm-memory/tags/v0.1.0/manifests"}]},"repo_metadata_updated_at":"2024-09-05T07:50:51.909Z","dependent_packages_count":28,"downloads":7354078,"downloads_period":"total","dependent_repos_count":266,"rankings":{"downloads":1.749839430013891,"dependent_repos_count":2.4697904374971995,"dependent_packages_count":1.500821754071418,"stargazers_count":9.820908452702803,"forks_count":7.051339552685086,"docker_downloads_count":3.251582810713031,"average":4.307380406280571},"purl":"pkg:cargo/vm-memory","advisories":[{"uuid":"GSA_kwCzR0hTQS00OWhoLWZwcngtbTY4Z84AA1rB","url":"https://github.com/advisories/GHSA-49hh-fprx-m68g","title":"Default functions in VolatileMemory trait lack bounds checks, potentially leading to out-of-bounds memory accesses","description":"### Impact\nAn issue was discovered in the default implementations of the `VolatileMemory::{get_atomic_ref, aligned_as_ref, aligned_as_mut, get_ref, get_array_ref}` trait functions, which allows out-of-bounds memory access if the `VolatileMemory::get_slice` function returns a `VolatileSlice` whose length is less than the function’s `count` argument. No implementations of `get_slice` provided in `vm_memory` are affected. Users of custom `VolatileMemory` implementations may be impacted if the custom implementation does not adhere to `get_slice`'s documentation.\n\n### Patches\nThe issue started in version 0.1.0 but was fixed in version 0.12.2 by inserting a check that verifies that the `VolatileSlice` returned by `get_slice` is of the correct length.\n\n### Workarounds\nNot Required\n\n### References\nhttps://github.com/rust-vmm/vm-memory/commit/aff1dd4a5259f7deba56692840f7a2d9ca34c9c8\nhttps://crates.io/crates/vm-memory/0.12.2","origin":"UNSPECIFIED","severity":"LOW","published_at":"2023-09-04T16:35:37.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":2.5,"cvss_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","references":["https://github.com/rust-vmm/vm-memory/security/advisories/GHSA-49hh-fprx-m68g","https://nvd.nist.gov/vuln/detail/CVE-2023-41051","https://github.com/rust-vmm/vm-memory/commit/aff1dd4a5259f7deba56692840f7a2d9ca34c9c8","https://crates.io/crates/vm-memory/0.12.2","https://github.com/rust-vmm/vm-memory/issues/250","https://rustsec.org/advisories/RUSTSEC-2023-0056.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPXRXD5VXBZHBGMUM77B52CJJMG7EJGI","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SYM6CYW2DWRHRAVL2HYTQPXC3J2V77J4","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XZGJL6BQLU4XCPQLLTW4GSSBTNQXB3TI","https://github.com/advisories/GHSA-49hh-fprx-m68g"],"source_kind":"github","identifiers":["GHSA-49hh-fprx-m68g","CVE-2023-41051"],"repository_url":"https://github.com/rust-vmm/vm-memory","blast_radius":0.0,"created_at":"2023-09-04T17:05:19.452Z","updated_at":"2026-09-03T07:11:46.140Z","epss_percentage":0.00255,"epss_percentile":0.16932,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS00OWhoLWZwcngtbTY4Z84AA1rB","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS00OWhoLWZwcngtbTY4Z84AA1rB","packages":[{"ecosystem":"cargo","package_name":"vm-memory","versions":[{"first_patched_version":"0.12.2","vulnerable_version_range":"\u003c 0.12.2"}],"purl":"pkg:cargo/vm-memory"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS00OWhoLWZwcngtbTY4Z84AA1rB/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW1tNG0tcWc0OC1mN3dj","url":"https://github.com/advisories/GHSA-mm4m-qg48-f7wc","title":"Improper Synchronization and Race Condition in vm-memory","description":"rust-vmm vm-memory before 0.1.1 and 0.2.x before 0.2.1 allows attackers to cause a denial of service (loss of IP networking) because read_obj and write_obj do not properly access memory. This affects aarch64 (with musl or glibc) and x86_64 (with musl).","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2021-08-25T21:01:29.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2020-13759","https://github.com/rust-vmm/vm-memory/issues/93","https://github.com/rust-vmm/vm-memory/releases/tag/v0.1.1","https://github.com/rust-vmm/vm-memory/releases/tag/v0.2.1","https://rustsec.org/advisories/RUSTSEC-2020-0157.html","https://github.com/advisories/GHSA-mm4m-qg48-f7wc"],"source_kind":"github","identifiers":["GHSA-mm4m-qg48-f7wc","CVE-2020-13759"],"repository_url":"https://github.com/rust-vmm/vm-memory","blast_radius":0.0,"created_at":"2022-12-21T16:12:57.392Z","updated_at":"2026-09-15T19:14:00.040Z","epss_percentage":0.01599,"epss_percentile":0.73878,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW1tNG0tcWc0OC1mN3dj","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW1tNG0tcWc0OC1mN3dj","packages":[{"ecosystem":"cargo","package_name":"vm-memory","versions":[{"first_patched_version":"0.2.1","vulnerable_version_range":"\u003e= 0.2.0, \u003c 0.2.1"},{"first_patched_version":"0.1.1","vulnerable_version_range":"\u003c 0.1.1"}],"purl":"pkg:cargo/vm-memory"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW1tNG0tcWc0OC1mN3dj/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/cargo/vm-memory","docker_dependents_count":32,"docker_downloads_count":23285408,"usage_url":"https://repos.ecosyste.ms/usage/cargo/vm-memory","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/cargo/vm-memory/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2024-06-19T05:20:15.246Z","issues_count":34,"pull_requests_count":123,"avg_time_to_close_issue":12011228.42857143,"avg_time_to_close_pull_request":1886416.1769911505,"issues_closed_count":21,"pull_requests_closed_count":113,"pull_request_authors_count":35,"issue_authors_count":21,"avg_comments_per_issue":2.3529411764705883,"avg_comments_per_pull_request":1.7642276422764227,"merged_pull_requests_count":90,"bot_issues_count":0,"bot_pull_requests_count":38,"past_year_issues_count":12,"past_year_pull_requests_count":37,"past_year_avg_time_to_close_issue":439246.5714285714,"past_year_avg_time_to_close_pull_request":1875125.0882352942,"past_year_issues_closed_count":7,"past_year_pull_requests_closed_count":34,"past_year_pull_request_authors_count":14,"past_year_issue_authors_count":8,"past_year_avg_comments_per_issue":1.9166666666666667,"past_year_avg_comments_per_pull_request":1.8108108108108107,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":7,"past_year_merged_pull_requests_count":31,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Fvm-memory/issues","maintainers":[{"login":"andreeaflorescu","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/andreeaflorescu"},{"login":"roypat","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/roypat"},{"login":"jiangliu","count":7,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jiangliu"},{"login":"gsserge","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsserge"},{"login":"zachreizner","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zachreizner"}],"active_maintainers":[{"login":"roypat","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/roypat"},{"login":"andreeaflorescu","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/andreeaflorescu"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/crates.io/packages/vm-memory/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/crates.io/packages/vm-memory/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/crates.io/packages/vm-memory/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/crates.io/packages/vm-memory/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/crates.io/packages/vm-memory/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/crates.io/packages/vm-memory/codemeta","maintainers":[{"uuid":"37110","login":"andreeaflorescu","name":"Andreea Florescu","email":null,"url":"https://github.com/andreeaflorescu","packages_count":18,"html_url":"https://crates.io/users/andreeaflorescu","role":null,"created_at":"2022-11-07T16:23:49.653Z","updated_at":"2022-11-07T16:23:49.653Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/crates.io/maintainers/andreeaflorescu/packages"},{"uuid":"82989","login":"jiangliu","name":"Jiang Liu","email":null,"url":"https://github.com/jiangliu","packages_count":28,"html_url":"https://crates.io/users/jiangliu","role":null,"created_at":"2023-11-14T11:27:46.625Z","updated_at":"2023-11-14T11:27:46.625Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/crates.io/maintainers/jiangliu/packages"},{"uuid":"99643","login":"lauralt","name":"Laura Loghin","email":null,"url":"https://github.com/lauralt","packages_count":9,"html_url":"https://crates.io/users/lauralt","role":null,"created_at":"2023-05-26T01:50:30.075Z","updated_at":"2023-05-26T01:50:30.075Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/crates.io/maintainers/lauralt/packages"},{"uuid":"186043","login":"roypat","name":"Patrick Roy","email":null,"url":"https://github.com/roypat","packages_count":12,"html_url":"https://crates.io/users/roypat","role":null,"created_at":"2023-05-13T23:09:44.737Z","updated_at":"2023-05-13T23:09:44.737Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/crates.io/maintainers/roypat/packages"},{"uuid":"299898","login":"XanClic","name":"Hanna Czenczek","email":null,"url":"https://github.com/XanClic","packages_count":2,"html_url":"https://crates.io/users/XanClic","role":null,"created_at":"2026-08-18T09:02:36.401Z","updated_at":"2026-08-18T09:02:36.401Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/crates.io/maintainers/XanClic/packages"}]}