CVE-2024-27308
CVSS 3.1 Score 7.5 of 10 (high)
Details
Summary
CVE-2024-27308 is a vulnerability in the Mio Metal I/O library for Rust. This vulnerability affects versions of Mio between v0.7.2 and v0.8.10. When using named pipes on Windows, Mio may return invalid tokens that correspond to named pipes that have already been deregistered from the Mio registry. The impact of this vulnerability depends on how Mio is used, but for applications that store pointers in the tokens, it may result in a use-after-free vulnerability. Tokio is also vulnerable when using a vulnerable version of Mio and at least Tokio v1.30.0. However, versions of Tokio prior to v1.30.0 will ignore invalid tokens, reducing the risk. This vulnerability has been fixed in Mio v0.8.11, so users are advised to update to the latest version to remediate the issue and prevent potential crashes or use-after-free vulnerabilities in their applications.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions