Lucene search

GoogleOSV:CVE-2023-48105

HistoryNov 22, 2023 - 11:15 p.m.

CVE-2023-48105

2023-11-2223:15:10

Google

osv.dev

cve-2023-48105

bytecode alliance

denial of service

wasm_loader_prepare_bytecode

software

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.4%

JSON

An heap overflow vulnerability was discovered in Bytecode alliance wasm-micro-runtime v.1.2.3 allows a remote attacker to cause a denial of service via the wasm_loader_prepare_bytecode function in core/iwasm/interpreter/wasm_loader.c.

CPENameOperatorVersion
wasm-micro-runtimeeqWAMR-1.1.2
wasm-micro-runtimeeqWAMR-03-19-2020
wasm-micro-runtimeeqWAMR-1.0.0
wasm-micro-runtimeeqWAMR-02-27-2020
wasm-micro-runtimeeqWAMR-09-08-2020
wasm-micro-runtimeeqWAMR-07-10-2020
wasm-micro-runtimeeqWAMR-03-25-2021
wasm-micro-runtimeeqWAMR-03-30-2020
wasm-micro-runtimeeqWAMR-1.2.0
wasm-micro-runtimeeqWAMR-1.1.0

Name	Operator	Version
wasm-micro-runtime	eq	WAMR-1.1.2
wasm-micro-runtime	eq	WAMR-03-19-2020
wasm-micro-runtime	eq	WAMR-1.0.0
wasm-micro-runtime	eq	WAMR-02-27-2020
wasm-micro-runtime	eq	WAMR-09-08-2020
wasm-micro-runtime	eq	WAMR-07-10-2020
wasm-micro-runtime	eq	WAMR-03-25-2021
wasm-micro-runtime	eq	WAMR-03-30-2020
wasm-micro-runtime	eq	WAMR-1.2.0
wasm-micro-runtime	eq	WAMR-1.1.0

Rows per page:

1-10 of 271

References

bytecode.com

wasm-micro-runtime.com

github.com/bytecodealliance/wasm-micro-runtime/issues/2726

github.com/bytecodealliance/wasm-micro-runtime/pull/2734/commits/4785d91b16dd49c09a96835de2d9c7b077543fa4

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.4%

JSON

Related for OSV:CVE-2023-48105