Lucene search
RustsecRUSTSEC-2022-0075HistoryNov 10, 2022 - 12:00 p.m.
Bug in pooling instance allocator
2022-11-1012:00:00
rustsec.org
7
bug
pooling instance allocator
wasmtime
linear memory
reuse
erroneous visibility
mitigations
software
EPSS
0.001
Percentile
48.7%
bug in Wasmtime’s implementation of its pooling instance allocator where when a linear memory is reused for another instance the initial heap snapshot of the prior instance can be visible, erroneously to the next instance.
Mitigations are described here.
Related
osv
osv
Wasmtime may have data leakage between instances in the pooling allocator
2022-11-10 21:16:22
Bug in pooling instance allocator
2022-11-10 12:00:00
CVE-2022-39393
2022-11-10 20:15:11
github
github
Wasmtime may have data leakage between instances in the pooling allocator
2022-11-10 21:16:22
ubuntucve
ubuntucve
CVE-2022-39393
2022-11-10 00:00:00
cve
cve
CVE-2022-39393
2022-11-10 20:15:11
cvelist
cvelist
prion
prion
Design/Logic Flaw
2022-11-10 20:15:00
nvd
nvd
CVE-2022-39393
2022-11-10 20:15:11