Undefined Behavior in Rust runtime functions

🗓️ 27 Apr 2023 17:08:37Reported by GitHub Advisory DatabaseType

Undefined Behavior in Wasmtime's implementation of managing per-instance state, causing runtime-level issues with LLVM 16 and Rust 1.70 beta and later

Reporter	Title	Published	Views	Family All 21
Tenable Nessus	Amazon Linux 2023 : ecs-service-connect-agent (ALAS2023-2023-344)	20 Sep 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : ecs-service-connect-agent, --advisory ALAS2ECS-2023-007 (ALASECS-2023-007)	27 Sep 202300:00	–	nessus
Amazon	Important: ecs-service-connect-agent	20 Sep 202300:00	–	amazon
Amazon	Important: ecs-service-connect-agent	25 Sep 202300:00	–	amazon
Circl	CVE-2023-30624	27 Apr 202320:26	–	circl
CNNVD	Wasmtime 安全漏洞	27 Apr 202300:00	–	cnnvd
CVE	CVE-2023-30624	27 Apr 202316:56	–	cve
Cvelist	CVE-2023-30624 Wasmtime has Undefined Behavior in Rust runtime functions	27 Apr 202316:56	–	cvelist
Debian CVE	CVE-2023-30624	27 Apr 202316:56	–	debiancve
EUVD	EUVD-2023-1270	3 Oct 202520:07	–	euvd

Vulners

Node

bytecodealliance wasmtimeRange8.0.0–8.0.1rust

bytecodealliance wasmtimeRange7.0.0–7.0.1rust

bytecodealliance wasmtimeRange<6.0.2rust

Source	Link
github	www.github.com/bytecodealliance/wasmtime/security/advisories/GHSA-ch89-5g45-qwc7
groups	www.groups.google.com/a/bytecodealliance.org/g/sec-announce/c/ecK-6G2yi90
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-30624
github	www.github.com/bytecodealliance/wasmtime/commit/0977952dcd9d482bff7c288868ccb52769b3a92e
rustsec	www.rustsec.org/advisories/RUSTSEC-2023-0092.html
github	www.github.com/advisories/GHSA-ch89-5g45-qwc7

02 May 2025 12:52Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.13.9 - 8.8

EPSS0.00162

SSVC

CWE-758