Lucene search

CVE-2024-4435 BTreeMap memory leak when deallocating nodes with overflows

🗓️ 21 May 2024 09:35:41Reported by DfinityType

BTreeMap memory leak fix in version 0.6.

Reporter	Title	Published	Views	Family All 5
Vulnrichment	CVE-2024-4435 BTreeMap memory leak when deallocating nodes with overflows	21 May 202409:41	–	vulnrichment
CVE	CVE-2024-4435	21 May 202410:15	–	cve
Github Security Blog	ic-stable-structures vulnerable to BTreeMap memory leak when deallocating nodes with overflows	21 May 202414:49	–	github
OSV	ic-stable-structures vulnerable to BTreeMap memory leak when deallocating nodes with overflows	21 May 202414:49	–	osv
NVD	CVE-2024-4435	21 May 202410:15	–	nvd

[
  {
    "collectionURL": "https://crates.io/crates/ic-stable-structures",
    "defaultStatus": "unaffected",
    "packageName": "ic-stable-structures",
    "product": "ic-stable-structures",
    "repo": "https://github.com/dfinity/stable-structures",
    "vendor": "Internet Computer",
    "versions": [
      {
        "lessThan": "0.6.4",
        "status": "affected",
        "version": "0.6.0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
internetcomputer	www.internetcomputer.org/docs/current/developer-docs/smart-contracts/maintain/storage
github	www.github.com/dfinity/stable-structures/pull/212
docs	www.docs.rs/ic-stable-structures/0.6.4/ic_stable_structures/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

21 May 2024 09:41Current

5.7Medium risk

Vulners AI Score5.7

CVSS35.9

EPSS0.00299

CWE-401