#VU92243 Use-after-free in mio - CVE-2024-27308

Vulnerability identifier: #VU92243

Vulnerability risk: High

CVSSv4.0: 7.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2024-27308

CWE-ID: CWE-416

Exploitation vector: Network

Exploit availability: No

Vulnerable software:
mio
Universal components / Libraries / Libraries used by multiple products

Vendor: tokio-rs

Description

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to mio will under some circumstances return invalid tokens that correspond to named pipes that have already been deregistered from the mio registry when using named pipes on Windows. A remote attacker can trigger the vulnerability to perform a denial of service attack or compromise vulnerable system.

Mitigation
Install updates from vendor's website.

Vulnerable software versions

mio: 0.7.2 - 0.8.10

---

External links
https://github.com/tokio-rs/mio/security/advisories/GHSA-r8w9-5wcg-vfj7
https://github.com/tokio-rs/tokio/issues/6369
https://github.com/tokio-rs/mio/pull/1760
https://github.com/tokio-rs/mio/commit/90d4fe00df870acd3d38f3dc4face9aacab8fbb9

---

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.