VDB
BDU%3A2023-01929
BDU%3A2023-01929
PUBLISHED
CVSS 10 CRITICAL
Уязвимость компилятора Cranelift (ранее Cretonne) среды выполнения для WebAssembly-приложений Wasmtime, связанная с выходом операции за границы буфера в памяти, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| bytecodealliance | wasmtime | cranelift-codegen: >= 0.93.0, < 0.93.1, cranelift-codegen: >= 0.84.0, < 0.91.1, cranelift-codegen: >= 0.92.0, < 0.92.1 |
| Bytecode Alliance | Wasmtime, Cranelift |
Timeline
- Mar 8, 2023 CVE Published
- Mar 9, 2023 PoC Published
- Apr 10, 2023 CVE Updated
References
- https://docs.rs/wasmtime/latest/wasmtime/struct.Config.html#method.static_memory_guard_size url
- https://docs.rs/wasmtime/latest/wasmtime/struct.Config.html#method.static_memory_maximum_size url
- https://github.com/bytecodealliance/wasmtime/commit/63fb30e4b4415455d47b3da5a19d79c12f4f2d1f url
- https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-ff4p-7xrq-q5r8 url
- https://groups.google.com/a/bytecodealliance.org/g/sec-announce/c/Mov-ItrNJsQ url
- https://vuldb.com/ru/?id.222615 url
- https://www.opennet.ru/opennews/art.shtml?num=58775 url
- https://github.com/bytecodealliance/wasmtime/tree/main/cranelift url
- https://blog.benj.me/2021/02/17/cranelift-codegen-primer/ url