Turso Out-of-Bounds Read in Table-Leaf Page Reader

Executive Summary

Turso versions up to 0.8.0-pre.8 have an out-of-bounds read flaw in the table-leaf page reader. The issue occurs because the software reads an attacker-controlled cell-count field without validating its bounds. This allows malicious database files to be crafted with a modified cell count value, which can trigger an index-out-of-bounds panic during queries. The result is a denial of service in any application that opens these untrusted database files.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability is specific to Turso database files and requires examining the database structure for malformed cell counts. No direct network or system commands detect it. Use Turso's CLI or SQLite tools to inspect database files for corrupted table-leaf pages.

Useful 0 Not Useful 0

Impact Analysis

If you use Turso in your application and open untrusted database files, an attacker could exploit this vulnerability to crash your application. This could lead to service disruption, data unavailability, or require restarting the affected system. The impact is limited to denial of service since the vulnerability does not allow data theft or modification.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability primarily affects availability, which is a key aspect of compliance under standards like GDPR and HIPAA. If exploited, it could lead to service outages, potentially violating availability requirements. However, there is no evidence it directly impacts confidentiality or integrity of data, which are also critical for compliance.

Useful 0 Not Useful 0

Mitigation Strategies

Avoid opening untrusted Turso database files. Update Turso to the latest version beyond 0.8.0-pre.8. Validate database integrity before use. Implement file access controls to restrict database file execution.

Useful 0 Not Useful 0