solana-bpf-loader-program (>=1.0.0, <=1.1.19), solana-bpfloader (>=0.10.0, <=0.12.0) +1 more potentially affected by CVE-2022-31264 via solana_rbpf (>=0.1.5, <=0.1.34)

solanarbpf CARGO version =0.1.5, =1.0.0, =0.10.0, =0.12.0 - solang 0.1.5 Source cves: CVE-2022-31264 Source advisory: OSV:GHSA-FFX3-8QVM-PQ3J...

solana-bpf-loader-program (>=1.0.0, <=1.1.19), solana-bpfloader (>=0.10.0, <=0.12.0) +1 more potentially affected by CVE-2022-31264 via solana_rbpf (>=0.1.5, <=0.1.34)

solanarbpf CARGO version =0.1.5, =1.0.0, =0.10.0, =0.12.0 - solang 0.1.5 Source cves: CVE-2022-31264 Source advisory: GHSA-FFX3-8QVM-PQ3J...

GHSA-FFX3-8QVM-PQ3J Integer overflow in solana_rbpf

Solana solanarbpf before 0.2.29 has an addition integer overflow via invalid ELF program headers. elf.rs has a panic via a malformed eBPF program...

CVE-2022-31264

Solana solanarbpf before 0.2.29 has an addition integer overflow via invalid ELF program headers. elf.rs has a panic via a malformed eBPF program...

CVE-2022-31264

Solana solanarbpf before 0.2.29 has an addition integer overflow via invalid ELF program headers. elf.rs has a panic via a malformed eBPF program...

CVE-2022-31264

CVE-2022-31264 affects Solana’s Solana RBPF prior to 0.2.29, where an addition integer overflow can occur due to invalid ELF program headers and the elf.rs component may panic on a malformed eBPF program. Public records from Red Hat, GHSA, OSV and PT Security corroborate a vulnerability in Solana...

CVE-2022-31264: Integer Overflow or Wraparound

Solana solanarbpf before 0.2.29 has an addition integer overflow via invalid ELF program headers. elf.rs has a panic via a malformed eBPF program...