Lucene search
K

8 matches found

Github Security Blog
Github Security Blog
added 2022/04/01 1:36 p.m.27 views

Use after free in Wasmtime

There is a use after free vulnerability in Wasmtime when both running Wasm that uses externrefs and enabling epoch interruption in Wasmtime. If you are not explicitly enabling epoch interruption it is disabled by default then you are not affected. If you are explicitly disabling the Wasm referenc...

9.8CVSS1.1AI score0.00469EPSS
Exploits0References8Affected Software1
OSV
OSV
added 2022/04/01 1:36 p.m.1 views

GHSA-GWC9-348X-QWV2 Use after free in Wasmtime

There is a use after free vulnerability in Wasmtime when both running Wasm that uses externrefs and enabling epoch interruption in Wasmtime. If you are not explicitly enabling epoch interruption it is disabled by default then you are not affected. If you are explicitly disabling the Wasm referenc...

8.1CVSS6AI score0.00469EPSS
Exploits0References8
NVD
NVD
added 2022/03/31 11:15 p.m.8 views

CVE-2022-24791

Wasmtime is a standalone JIT-style runtime for WebAssembly, using Cranelift. There is a use after free vulnerability in Wasmtime when both running Wasm that uses externrefs and enabling epoch interruption in Wasmtime. If you are not explicitly enabling epoch interruption it is disabled by default...

9.8CVSS0.00469EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2022/03/31 11:15 p.m.28 views

CVE-2022-24791

Wasmtime is a standalone JIT-style runtime for WebAssembly, using Cranelift. There is a use after free vulnerability in Wasmtime when both running Wasm that uses externrefs and enabling epoch interruption in Wasmtime. If you are not explicitly enabling epoch interruption it is disabled by default...

9.8CVSS7.2AI score0.00469EPSS
Exploits0References3
OSV
OSV
added 2022/03/31 11:0 p.m.12 views

CVE-2022-24791 Use after free in Wasmtime

Wasmtime is a standalone JIT-style runtime for WebAssembly, using Cranelift. There is a use after free vulnerability in Wasmtime when both running Wasm that uses externrefs and enabling epoch interruption in Wasmtime. If you are not explicitly enabling epoch interruption it is disabled by default...

8.1CVSS9.2AI score0.00469EPSS
Exploits0References4
Debian CVE
Debian CVE
added 2022/03/31 11:0 p.m.3 views

CVE-2022-24791

Wasmtime is a standalone JIT-style runtime for WebAssembly, using Cranelift. There is a use after free vulnerability in Wasmtime when both running Wasm that uses externrefs and enabling epoch interruption in Wasmtime. If you are not explicitly enabling epoch interruption it is disabled by default...

9.8CVSS9.7AI score0.00469EPSS
Exploits0
OSV
OSV
added 2022/01/11 4:58 a.m.1 views

USN-5218-1 linux-oem-5.13 vulnerabilities

Nadav Amit discovered that the hugetlb implementation in the Linux kernel did not perform TLB flushes under certain conditions. A local attacker could use this to leak or alter data from other processes that use huge pages. CVE-2021-4002 It was discovered that the eBPF implementation in the Linux...

9.8CVSS7.2AI score0.72624EPSS
Exploits5References10
OpenVAS
OpenVAS
added 2021/11/12 12:0 a.m.29 views

Ubuntu: Security Advisory (USN-5140-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7AI score0.0003EPSS
Exploits1References2
Rows per page
Query Builder