{"id":"EUVD-2024-0293","enisaUuid":"50200954-0b23-38b4-897e-0faceca3a189","description":"vmm-sys-util is a collection of modules that provides helpers and utilities used by multiple rust-vmm components. Starting in version 0.5.0 and prior to version 0.12.0, an issue in the `FamStructWrapper::deserialize` implementation provided by the crate for `vmm_sys_util::fam::FamStructWrapper` can lead to out of bounds memory accesses. The deserialization does not check that the length stored in the header matches the flexible array length. Mismatch in the lengths might allow out of bounds memory access through Rust-safe methods. The issue was corrected in version 0.12.0 by inserting a check that verifies the lengths of compared flexible arrays are equal for any deserialized header and aborting deserialization otherwise. Moreover, the API was changed so that header length can only be modified through Rust-unsafe code. This ensures that users cannot trigger out-of-bounds memory access from Rust-safe code.","datePublished":"Jan 2, 2024, 8:02:28 PM","dateUpdated":"Feb 13, 2025, 5:19:28 PM","baseScore":5.7,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L","references":"https://github.com/rust-vmm/vmm-sys-util/security/advisories/GHSA-875g-mfp6-g7f9\nhttps://github.com/rust-vmm/vmm-sys-util/commit/30172fca2a8e0a38667d934ee56682247e13f167\nhttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W5XMCLV2P3ANS3XN4NXZTV4PUNTLWUNJ/\nhttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YJI7D273R6G5RUC246KTI2YY3AXZKZMD/\n","aliases":"CVE-2023-50711\nGHSA-875g-mfp6-g7f9\n","assigner":"GitHub_M","epss":0.65,"enisaIdProduct":[{"id":"4c69d721-dcb5-3093-a9a5-72ee1f721e9a","product":{"name":"vmm-sys-util","vendor":{"name":"rust-vmm"}},"product_version":"0.5.0, \u003c 0.12.0"}],"enisaIdVendor":[{"id":"12a8074a-262b-30ce-8565-a12e601bcb16","vendor":{"name":"rust-vmm"}}],"enisaIdVulnerability":[{"id":"3d2de806-ebf4-3ba0-94fe-c4de0644727c","vulnerability":{"id":"GHSA-875g-mfp6-g7f9","description":"`serde` deserialization for `FamStructWrapper` lacks bound checks that could potentially lead to out-of-bounds memory access","datePublished":"Jan 2, 2024, 4:28:08 PM","dateUpdated":"Feb 10, 2024, 3:30:19 AM","baseScore":null,"references":"https://github.com/rust-vmm/vmm-sys-util/security/advisories/GHSA-875g-mfp6-g7f9\nhttps://nvd.nist.gov/vuln/detail/CVE-2023-50711\nhttps://github.com/rust-vmm/vmm-sys-util/commit/30172fca2a8e0a38667d934ee56682247e13f167\nhttps://github.com/rust-vmm/vmm-sys-util\nhttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W5XMCLV2P3ANS3XN4NXZTV4PUNTLWUNJ\nhttps://rustsec.org/advisories/RUSTSEC-2024-0002.html\n","enisa_id":"EUVD-2024-0293\n","aliases":"GHSA-875g-mfp6-g7f9\nCVE-2023-50711\n","epss":0.0,"dataProcessed":"May 3, 2026, 2:08:06 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"bd44dcfd-0364-347a-b1de-38b09665608c","vulnerability":{"id":"CVE-2023-50711","description":"vmm-sys-util is a collection of modules that provides helpers and utilities used by multiple rust-vmm components. Starting in version 0.5.0 and prior to version 0.12.0, an issue in the `FamStructWrapper::deserialize` implementation provided by the crate for `vmm_sys_util::fam::FamStructWrapper` can lead to out of bounds memory accesses. The deserialization does not check that the length stored in the header matches the flexible array length. Mismatch in the lengths might allow out of bounds memory access through Rust-safe methods. The issue was corrected in version 0.12.0 by inserting a check that verifies the lengths of compared flexible arrays are equal for any deserialized header and aborting deserialization otherwise. Moreover, the API was changed so that header length can only be modified through Rust-unsafe code. This ensures that users cannot trigger out-of-bounds memory access from Rust-safe code.","datePublished":"Jan 2, 2024, 8:02:28 PM","dateUpdated":"Feb 13, 2025, 5:19:28 PM","status":"PUBLISHED","baseScore":5.7,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L","references":"https://github.com/rust-vmm/vmm-sys-util/security/advisories/GHSA-875g-mfp6-g7f9\nhttps://github.com/rust-vmm/vmm-sys-util/commit/30172fca2a8e0a38667d934ee56682247e13f167\nhttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W5XMCLV2P3ANS3XN4NXZTV4PUNTLWUNJ/\nhttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YJI7D273R6G5RUC246KTI2YY3AXZKZMD/\n","enisa_id":"EUVD-2024-0293\n","assigner":"GitHub_M","epss":0.65,"dataProcessed":"Nov 6, 2026, 7:14:58 AM","vulnerabilityProduct":[{"id":"0f3d236c-8598-3fd3-a7b5-c2883e61a095","product":{"name":"vmm-sys-util","vendor":{"name":"rust-vmm"}},"product_version":"0.5.0, \u003c 0.12.0"},{"id":"664d442c-e99e-43b7-838c-6dbeb5f41b35","product":{"name":"vmm-sys-util","vendor":{"name":"rust-vmm"}},"product_version":"0.5.0, \u003c 0.12.0"}],"vulnerabilityVendor":[{"id":"2184cb80-2651-3c3d-b75d-87024d5da6d7","vendor":{"name":"rust-vmm"}}]}}],"enisaIdAdvisory":[{"id":"0fcb5b98-8632-35db-ae49-f622070db1ca","advisory":{"id":"SUSE-SU-2025:20071-1","description":"Security update for sevctl","summary":"Security update for sevctl","datePublished":"Feb 3, 2025, 9:03:35 AM","dateUpdated":"Sep 20, 2026, 6:08:00 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_20071-1.json\nhttps://www.suse.com/support/update/announcement/2025/suse-su-202520071-1/\nhttps://lists.suse.com/pipermail/sle-security-updates/2025-June/021299.html\nhttps://bugzilla.suse.com/1218499\nhttps://bugzilla.suse.com/1218502\nhttps://bugzilla.suse.com/1229953\nhttps://www.suse.com/security/cve/CVE-2023-50711/\n","aliases":"CVE-2023-50711\n","source":{"id":22,"name":"csaf_suse"},"advisoryProduct":[{"id":"65160f0a-be67-30a1-9d8b-f6d3a01c1cf6","product":{"name":"SUSE Linux Micro 6.0","vendor":{"name":"SUSE"}}},{"id":"6d0bec37-d7c4-3991-b5d0-a5899009a8f6","product":{"name":"sevctl-0.4.3-2.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"e32ac1e2-2699-3864-ac0d-1d4f31baf501","product":{"name":"sevctl-0:0.4.3-2.1.x86_64","vendor":{"name":"SUSE"}}}]}},{"id":"1039f803-1d26-38d8-b86d-b529b6e64741","advisory":{"id":"SUSE-SU-2024:0250-1","description":"Security update for sevctl","summary":"Security update for sevctl","datePublished":"Jan 26, 2024, 1:52:43 PM","dateUpdated":"Sep 20, 2026, 3:37:54 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_0250-1.json\nhttps://www.suse.com/support/update/announcement/2024/suse-su-20240250-1/\nhttps://lists.suse.com/pipermail/sle-security-updates/2024-January/017769.html\nhttps://bugzilla.suse.com/1218499\nhttps://bugzilla.suse.com/1218502\nhttps://www.suse.com/security/cve/CVE-2023-50711/\n","aliases":"CVE-2023-50711\n","source":{"id":22,"name":"csaf_suse"},"advisoryProduct":[{"id":"4175e4b4-26ee-30f0-a724-44a88c53a381","product":{"name":"SUSE Linux Enterprise Module for Server Applications 15 SP5","vendor":{"name":"SUSE"}}},{"id":"7ca55b91-54c8-388d-b436-d42ac4340197","product":{"name":"sevctl-0.4.3-150500.3.3.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"9782ed05-22dd-3e24-842e-b4dc9aaf11d5","product":{"name":"SUSE Linux Enterprise High Performance Computing 15 SP5","vendor":{"name":"SUSE"}}},{"id":"bd75fe5d-6caa-36cd-8573-9f9d6411313e","product":{"name":"openSUSE Leap 15.5 ","vendor":{"name":"SUSE"}}},{"id":"c3367c21-f37a-319c-85a9-9b8986650023","product":{"name":"sevctl-0:0.4.3-150500.3.3.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"cd432b51-f8df-3b53-8df0-5b76f22d0ee7","product":{"name":"SUSE Linux Enterprise Server 15 SP5","vendor":{"name":"SUSE"}}},{"id":"dab1286b-38ba-32cb-a6f0-8a8e47fb4dca","product":{"name":"SUSE Linux Enterprise Server for SAP Applications 15 SP5","vendor":{"name":"SUSE"}}}]}},{"id":"3d3ba6de-c4cb-311f-b70f-075d2836633e","advisory":{"id":"SUSE-SU-2024:1984-1","description":"Security update for aws-nitro-enclaves-cli","summary":"Security update for aws-nitro-enclaves-cli","datePublished":"Jun 11, 2024, 11:04:00 AM","dateUpdated":"Jun 11, 2024, 11:04:00 AM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_1984-1.json\nhttps://www.suse.com/support/update/announcement/2024/suse-su-20241984-1/\nhttps://lists.suse.com/pipermail/sle-updates/2024-June/035551.html\nhttps://bugzilla.suse.com/1218501\nhttps://www.suse.com/security/cve/CVE-2023-50711/\n","aliases":"CVE-2023-50711\n","source":{"id":22,"name":"csaf_suse"},"advisoryProduct":[{"id":"002e940c-9dcb-359d-9484-67343a823c19","product":{"name":"aws-nitro-enclaves-binaryblobs-upstream-1.3.0~git1.db34c02-150400.3.6.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"1fb5d0b4-6efe-39ea-ab36-d37ca2247f98","product":{"name":"system-group-ne-1.3.0~git1.db34c02-150400.3.6.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"2295a6b4-fab9-36a3-969a-662bea474f8e","product":{"name":"aws-nitro-enclaves-cli-1.3.0~git1.db34c02-150400.3.6.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"3c206a3d-e43e-38f7-aea0-fb93e775ba80","product":{"name":"SUSE Linux Enterprise Module for Public Cloud 15 SP5","vendor":{"name":"SUSE"}}},{"id":"81f19c51-0698-3642-bc16-4939aa06bc2f","product":{"name":"system-group-ne-1.3.0~git1.db34c02-150400.3.6.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"9c84c314-aea6-3ce7-aeb0-7316670a0d8a","product":{"name":"aws-nitro-enclaves-binaryblobs-upstream-1.3.0~git1.db34c02-150400.3.6.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"b29dc233-120d-3ba5-815e-0b5435af61e0","product":{"name":"SUSE Linux Enterprise Module for Public Cloud 15 SP4","vendor":{"name":"SUSE"}}},{"id":"bd593461-5897-3c76-9402-d570ce6690d5","product":{"name":"aws-nitro-enclaves-cli-1.3.0~git1.db34c02-150400.3.6.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"ef8f4b07-64f6-3920-ab72-f9302ee9d1c0","product":{"name":"openSUSE Leap 15.5 ","vendor":{"name":"SUSE"}}}]}},{"id":"862afe24-0c21-329c-84ce-c87bb089618d","advisory":{"id":"openSUSE-SU-2024:13645-1","description":"virtiofsd-1.10.1-1.1 on GA media","summary":"virtiofsd-1.10.1-1.1 on GA media","datePublished":"Jun 15, 2024, 12:00:00 AM","dateUpdated":"Sep 20, 2026, 9:04:51 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_13645-1.json\nhttps://www.suse.com/security/cve/CVE-2023-50711/\n","aliases":"CVE-2023-50711\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"01111b58-00c2-3806-af73-829d98cfa312","product":{"name":"virtiofsd-1.10.1-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"1d06779d-6694-377d-b9f0-a5d8d3660da7","product":{"name":"virtiofsd-0:1.10.1-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"399a9b1c-91ee-30d1-99a9-fa3ba840f487","product":{"name":"virtiofsd-0:1.10.1-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"4064412d-4c76-3293-b4fd-3407d0bb5c39","product":{"name":"virtiofsd-1.10.1-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"71331f7d-bd4b-3fff-a12b-5afcb54750d3","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"84fe1492-9a26-304c-968d-988d4e7c8215","product":{"name":"virtiofsd-1.10.1-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"a4f42e83-c13c-3096-a77b-18e50097f9a7","product":{"name":"virtiofsd-0:1.10.1-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"aa38c604-77c4-37db-af95-20dcc0c9da81","product":{"name":"virtiofsd-0:1.10.1-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"e2c9fb85-7ea7-32ec-9cac-a218f6dc21a0","product":{"name":"virtiofsd-1.10.1-1.1.s390x","vendor":{"name":"SUSE"}}}]}},{"id":"bf5b3e13-9279-3492-a774-e229fe2c8721","advisory":{"id":"SUSE-SU-2024:1966-1","description":"Security update for aws-nitro-enclaves-cli","summary":"Security update for aws-nitro-enclaves-cli","datePublished":"Jun 10, 2024, 2:03:36 PM","dateUpdated":"Sep 20, 2026, 3:52:58 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_1966-1.json\nhttps://www.suse.com/support/update/announcement/2024/suse-su-20241966-1/\nhttps://lists.suse.com/pipermail/sle-security-updates/2024-June/018668.html\nhttps://bugzilla.suse.com/1218501\nhttps://www.suse.com/security/cve/CVE-2023-50711/\n","aliases":"CVE-2023-50711\n","source":{"id":22,"name":"csaf_suse"},"advisoryProduct":[{"id":"03c4d5b4-78c4-3558-b6fc-073dc31633aa","product":{"name":"system-group-ne-1.3.0~git1.db34c02-150600.10.3.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"3b5b3b3d-23c8-3009-9c7f-aa3237c2a114","product":{"name":"aws-nitro-enclaves-binaryblobs-upstream-0:1.3.0~git1.db34c02-150600.10.3.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"4cafe328-63e5-3dec-a9e7-0f9926d4506a","product":{"name":"aws-nitro-enclaves-binaryblobs-upstream-1.3.0~git1.db34c02-150600.10.3.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"4dd53531-8438-3b4e-8d79-1abe7f2e28f6","product":{"name":"aws-nitro-enclaves-cli-0:1.3.0~git1.db34c02-150600.10.3.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"6a20eec1-dbeb-3d50-af42-b9809d9da646","product":{"name":"aws-nitro-enclaves-cli-0:1.3.0~git1.db34c02-150600.10.3.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"75a4a7f6-b0db-367e-967c-d271736d9930","product":{"name":"aws-nitro-enclaves-binaryblobs-upstream-1.3.0~git1.db34c02-150600.10.3.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"78722528-e2a7-35f9-a77e-5065d2b7da06","product":{"name":"aws-nitro-enclaves-binaryblobs-upstream-0:1.3.0~git1.db34c02-150600.10.3.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"9e54fb49-716d-30d9-aef5-f6ba0aa3922e","product":{"name":"aws-nitro-enclaves-cli-1.3.0~git1.db34c02-150600.10.3.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"aca3ca7c-9ac4-3e7e-ad25-87e2d614b2d0","product":{"name":"system-group-ne-1.3.0~git1.db34c02-150600.10.3.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"ae4ce1db-3af1-37e7-b33d-58729c550543","product":{"name":"SUSE Linux Enterprise Server 15 SP6","vendor":{"name":"SUSE"}}},{"id":"b6d163ac-9547-3c4f-9be2-3a02550e7dcf","product":{"name":"aws-nitro-enclaves-cli-1.3.0~git1.db34c02-150600.10.3.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"c0a8e01d-0f07-314e-80b1-2c19d97469cc","product":{"name":"SUSE Linux Enterprise Module for Public Cloud 15 SP6","vendor":{"name":"SUSE"}}},{"id":"c7d2b5a1-3575-3886-be9e-4e08d492741c","product":{"name":"SUSE Linux Enterprise Server for SAP Applications 15 SP6","vendor":{"name":"SUSE"}}},{"id":"d847d016-4827-39a6-8015-8aa8d75c4905","product":{"name":"system-group-ne-0:1.3.0~git1.db34c02-150600.10.3.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"e5dbe498-18a3-3a0a-9fd7-c0ebf983aae1","product":{"name":"openSUSE Leap 15.6","vendor":{"name":"SUSE"}}},{"id":"eb5e439b-97c0-3f21-afa3-f53af8806cec","product":{"name":"system-group-ne-0:1.3.0~git1.db34c02-150600.10.3.1.x86_64","vendor":{"name":"SUSE"}}}]}},{"id":"d8d644b8-5dd7-3642-b1bf-2cc8ceeef840","advisory":{"id":"openSUSE-SU-2024:13624-1","description":"sevctl-0.4.3-2.1 on GA media","summary":"sevctl-0.4.3-2.1 on GA media","datePublished":"Jun 15, 2024, 12:00:00 AM","dateUpdated":"Sep 20, 2026, 9:04:28 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_13624-1.json\nhttps://www.suse.com/security/cve/CVE-2023-50711/\n","aliases":"CVE-2023-50711\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"3bf6a93b-6e3a-30fb-9abc-974f54a6bf08","product":{"name":"sevctl-0:0.4.3-2.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"3efa77f6-7152-37b8-9b5a-d72a9e50a884","product":{"name":"sevctl-0.4.3-2.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"851fd6da-0825-3cad-87c2-7aaabc5cbf13","product":{"name":"sevctl-0.4.3-2.1.s390x","vendor":{"name":"SUSE"}}},{"id":"a9d5bd7d-f992-3e03-99ed-3168134bef77","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"bb4bbbee-57bc-35fc-a739-5eb987818da2","product":{"name":"sevctl-0:0.4.3-2.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"d168c28d-3b22-3bdf-8644-923d1f8b7270","product":{"name":"sevctl-0:0.4.3-2.1.s390x","vendor":{"name":"SUSE"}}},{"id":"d6cebb9f-44e6-312c-8567-a9f9958b9e36","product":{"name":"sevctl-0:0.4.3-2.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"f4a9dfa5-e711-3887-b022-6dd024c309db","product":{"name":"sevctl-0.4.3-2.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"f925df89-4358-329e-9c3c-517015a4afa1","product":{"name":"sevctl-0.4.3-2.1.ppc64le","vendor":{"name":"SUSE"}}}]}},{"id":"f045921d-aa30-310b-8cbc-c8726cce5e3f","advisory":{"id":"openSUSE-SU-2024:13857-1","description":"aws-nitro-enclaves-binaryblobs-upstream-1.2.3~git11.d3d77e0-1.1 on GA media","summary":"aws-nitro-enclaves-binaryblobs-upstream-1.2.3~git11.d3d77e0-1.1 on GA media","datePublished":"Jun 15, 2024, 12:00:00 AM","dateUpdated":"Sep 20, 2026, 9:09:11 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_13857-1.json\nhttps://www.suse.com/security/cve/CVE-2023-50711/\n","aliases":"CVE-2023-50711\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"0ce382eb-583f-3b61-85a4-216a1b3760bd","product":{"name":"aws-nitro-enclaves-cli-1.2.3~git11.d3d77e0-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"11541543-162d-361e-9ca7-f6cd84d6d71d","product":{"name":"system-group-ne-0:1.2.3~git11.d3d77e0-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"43856d2f-5e32-308a-9d62-7f063c7224b5","product":{"name":"aws-nitro-enclaves-binaryblobs-upstream-1.2.3~git11.d3d77e0-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"4715db1b-9ff7-33f4-8c39-c218bd00937c","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"56480f12-a27c-3510-a91f-cb774873c325","product":{"name":"system-group-ne-1.2.3~git11.d3d77e0-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"59de67e4-7d90-319f-b966-1ca3c8223fcc","product":{"name":"aws-nitro-enclaves-binaryblobs-upstream-0:1.2.3~git11.d3d77e0-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"722405a4-e8f7-3b7c-80d3-e21a03cf32ff","product":{"name":"aws-nitro-enclaves-cli-1.2.3~git11.d3d77e0-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"7c0041fd-63da-3cfd-bb17-3eab5bf30304","product":{"name":"system-group-ne-1.2.3~git11.d3d77e0-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"8bc6f100-b282-372a-b9a9-27eac3bdaa84","product":{"name":"aws-nitro-enclaves-cli-1.2.3~git11.d3d77e0-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"905dbe96-fb8f-38b1-8f05-1365e6834e13","product":{"name":"aws-nitro-enclaves-binaryblobs-upstream-1.2.3~git11.d3d77e0-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"93afd2ac-f9ae-36eb-b63f-38e62c10191b","product":{"name":"system-group-ne-1.2.3~git11.d3d77e0-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"9464ce8c-9150-3021-a593-bfd168396249","product":{"name":"system-group-ne-1.2.3~git11.d3d77e0-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"98290125-4631-3491-8d92-1e99b9e54863","product":{"name":"aws-nitro-enclaves-cli-0:1.2.3~git11.d3d77e0-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"9a7db9a7-3648-3284-a6ff-247dbf9a114c","product":{"name":"aws-nitro-enclaves-binaryblobs-upstream-0:1.2.3~git11.d3d77e0-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"9c3a3b5a-2769-3ccc-88eb-888d77862e75","product":{"name":"aws-nitro-enclaves-binaryblobs-upstream-0:1.2.3~git11.d3d77e0-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"a717f8b1-2408-3ab0-9e8b-a3adb2e07c0d","product":{"name":"aws-nitro-enclaves-cli-0:1.2.3~git11.d3d77e0-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"ad5d5c57-3117-3a69-92f8-4f13c63b4f38","product":{"name":"aws-nitro-enclaves-cli-0:1.2.3~git11.d3d77e0-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"bf33186e-4ec1-3083-88cf-9a28a2c33b36","product":{"name":"aws-nitro-enclaves-binaryblobs-upstream-1.2.3~git11.d3d77e0-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"ca8c80cd-f967-3b1f-90f6-36da90c3775e","product":{"name":"aws-nitro-enclaves-cli-1.2.3~git11.d3d77e0-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"cf6acf6c-d4b3-3a82-8017-3da20c2dadd9","product":{"name":"aws-nitro-enclaves-binaryblobs-upstream-0:1.2.3~git11.d3d77e0-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"d22879bb-1dab-3423-b03f-f7e72c307565","product":{"name":"system-group-ne-0:1.2.3~git11.d3d77e0-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"e9edfb96-a96b-3f3f-90cd-d24541d863ef","product":{"name":"system-group-ne-0:1.2.3~git11.d3d77e0-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"f6061831-1b57-3bd1-9614-9a197567ebc9","product":{"name":"aws-nitro-enclaves-binaryblobs-upstream-1.2.3~git11.d3d77e0-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"f96c6b07-6a51-36d8-a360-4b1fe6752349","product":{"name":"aws-nitro-enclaves-cli-0:1.2.3~git11.d3d77e0-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"ffb0deac-e559-3844-bd60-9fb63d790142","product":{"name":"system-group-ne-0:1.2.3~git11.d3d77e0-1.1.ppc64le","vendor":{"name":"SUSE"}}}]}},{"id":"f7876509-ae74-3c89-97f7-0955d84314ba","advisory":{"id":"msrc_CVE-2023-50711","description":"`serde` deserialization for `FamStructWrapper` lacks bound checks that could potentially lead to out-of-bounds memory access","datePublished":"Jan 8, 2024, 12:00:00 AM","dateUpdated":"Aug 17, 2026, 8:48:05 PM","baseScore":0.0,"references":"https://msrc.microsoft.com/csaf/vex/2024/msrc_cve-2023-50711.json\n","aliases":"CVE-2023-50711\n","source":{"id":20,"name":"csaf_microsoft"},"advisoryProduct":[{"id":"0499a1e3-23b2-3bf0-9d4a-cbef721c434a","product":{"name":"Azure Linux","vendor":{"name":"Microsoft"}}},{"id":"0db2f062-ad6f-333d-a6b2-b86411e69a99","product":{"name":"cbl2 kata-containers 3.2.0.azl2-6","vendor":{"name":"Microsoft"}}},{"id":"2c4ccaa5-fffa-381c-9fa2-52c47082061c","product":{"name":"cbl2 cloud-hypervisor 0:32.0-3.cbl2","vendor":{"name":"Microsoft"}}},{"id":"3102566f-ede4-37fe-98bd-24707d2e6835","product":{"name":"cbl2 virtiofsd 1.8.0-3","vendor":{"name":"Microsoft"}}},{"id":"36dc9383-dd93-3d2e-a419-5066504dc2f1","product":{"name":"cloud-hypervisor","vendor":{"name":"cloud-hypervisor"}}},{"id":"40c8e818-adb1-39ae-be3b-5fe52fd08988","product":{"name":"azl3 cloud-hypervisor 37.0-2","vendor":{"name":"Microsoft"}}},{"id":"434c3cdc-ec63-3825-9380-a1219d49e877","product":{"name":"cbl2 kata-containers-cc 0:3.2.0.azl2-6.cbl2","vendor":{"name":"Microsoft"}}},{"id":"475acded-83ea-3af2-ac67-8a7216cfa1a9","product":{"name":"cbl2 cloud-hypervisor 32.0-6","vendor":{"name":"Microsoft"}}},{"id":"6f6d2a8c-4009-3d27-84b4-0baa301978a5","product":{"name":"3.0","vendor":{"name":"Wind River"}}},{"id":"75f8ff3f-7c1a-3c6b-a294-b4ae87fd6738","product":{"name":"azl3 kata-containers 0:3.2.0.azl5-2.azl3","vendor":{"name":"Microsoft"}}},{"id":"8259f92b-1fcb-3fcc-a733-3ddf96c77287","product":{"name":"cbl2 kata-containers 0:3.2.0.azl2-6.cbl2","vendor":{"name":"Microsoft"}}},{"id":"ad99c9bc-b445-373f-a360-b0446a10a3c2","product":{"name":"azl3 cloud-hypervisor 0:37.0-2.azl3","vendor":{"name":"Microsoft"}}},{"id":"aeb40836-beee-3083-99d1-097b1c2676ce","product":{"name":"azl3 virtiofsd 0:1.8.0-3.azl3","vendor":{"name":"Microsoft"}}},{"id":"b0493404-f293-3218-92f4-713bd10eeff1","product":{"name":"azl3 kata-containers-cc 0:3.2.0.azl5-2.azl3","vendor":{"name":"Microsoft"}}},{"id":"b08f4b1d-24a1-35df-85f5-3b9345d11807","product":{"name":"2.0","vendor":{"name":"Smiths Medical"}}},{"id":"b40e4d5b-34c9-39fb-ae6f-a21616eceaf8","product":{"name":"azl3 virtiofsd 1.8.0-3","vendor":{"name":"Microsoft"}}},{"id":"c4449a07-faf0-38ee-abf0-668a86ee5953","product":{"name":"cbl2 virtiofsd 0:1.8.0-3.cbl2","vendor":{"name":"Microsoft"}}},{"id":"e0988dad-fef7-39c2-a561-4b9f6a937504","product":{"name":"azl3 kata-containers-cc 3.2.0.azl5-2","vendor":{"name":"Microsoft"}}},{"id":"e52b964a-61c0-3403-9f17-174e6783d914","product":{"name":"cbl2 cloud-hypervisor 32.0-3","vendor":{"name":"Microsoft"}}},{"id":"ea819139-d841-3ce9-8f75-1a592eab999c","product":{"name":"cbl2 kata-containers-cc 3.2.0.azl2-6","vendor":{"name":"Microsoft"}}},{"id":"ebf325e0-c863-3f18-9f2d-a64b2256cb70","product":{"name":"azl3 kata-containers 3.2.0.azl5-2","vendor":{"name":"Microsoft"}}},{"id":"f3d178c4-9306-3ae2-ad51-e0f33a99acc7","product":{"name":"cbl2 cloud-hypervisor 0:32.0-6.cbl2","vendor":{"name":"Microsoft"}}}]}}]}