cap-std Windows Device Filename Sandbox Bypass (CVE-2024-51756)

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Description: - Vulnerability Name: cap-std doesn't fully sandbox all the Windows device filenames - Publisher: sunfishcode - Publication Time: 4 days ago - Severity: Low - CVSS v4 Base Metrics: - Exploitability Metrics: - Attack Vector: Network - Attack Complexity: Low - Attack Requirements: Present - Privileges Required: Low - User Interaction: None - Vulnerable System Impact Metrics: - Confidentiality: Low - Integrity: Low - Availability: Low - Subsequent System Impact Metrics: - Confidentiality: None - Integrity: None - Availability: None 2. Affected Versions: - cap-async-std (Rust): < 3.4.1 - cap-primitives (Rust): < 3.4.1 - cap-std (Rust): < 3.4.1 3. Fixed Versions: - cap-async-std (Rust): 3.4.1 - cap-primitives (Rust): 3.4.1 - cap-std (Rust): 3.4.1 4. Description: - The filesystem sandbox in cap-std on Windows blocks access to special device filenames (such as "COM1", "COM2", "LPT0", "LPT1", etc.), but does not block access to special device filenames using superscript numbers (e.g., "COM1", "COM2", "LPT0", "LPT1", etc.). Untrusted filesystem paths can bypass the sandbox via these special device filenames and gain access to devices, thereby enabling access to peripherals connected to the computer, as well as any other devices mapped to these resources, including those connected via serial or parallel ports, including emulated USB serial ports. 5. Patch: - The vulnerability has been fixed and released in cap-primitives 3.4.1, cap-std 3.4.1, and cap-async-std 3.4.1. 6. Workarounds: - No known working workarounds currently exist. Affected Windows users should upgrade. 7. References: - Microsoft's documentation on special device filenames - ISO-8859-1 - #371 8. Vulnerability ID: - CVE-2024-51756 9. Vulnerability Type: - No CWEs 10. Contributor: - nathaniel-daniel (reporter)

Goal Reached Thanks to every supporter — we hit 100%!

cap-std Windows Device Filename Sandbox Bypass (CVE-2024-51756)

More from this source