Lucene search
+L

869 matches found

vulnersOsv
vulnersOsv
added 2022/04/01 1:36 p.m.3 views

wasmtime-cli (>=0.35.0 <=0.35.1) potentially affected by CVE-2022-24791 via wasmtime (>=0.35.0 <=0.35.1)

wasmtime CARGO version =0.35.0, =0.35.0, =0.35.1 Source cves: CVE-2022-24791 Source advisory: OSV:GHSA-GWC9-348X-QWV2...

9.8CVSS7.2AI score0.01161EPSS
SaveExploits0
vulnersOsv
vulnersOsv
added 2022/04/01 1:36 p.m.3 views

auto-wasi (=0.1.0), ceres-executor (>=0.1.0 <=0.2.0) +47 more potentially affected by CVE-2022-24791 via wasmtime (>=0.10.0 <=0.34.1)

wasmtime CARGO version =0.10.0, =0.1.0, =0.0.0, =0.40.1, =0.45.0, =0.1.0, =0.1.0, =0.1.0, =0.3.3, =0.1.0, =0.8.0, =0.8.0, =0.9.0 and more Source cves: CVE-2022-24791 Source advisory: OSV:GHSA-GWC9-348X-QWV2...

9.8CVSS7.2AI score0.01161EPSS
SaveExploits0
Github Security Blog
Github Security Blog
added 2022/04/01 1:36 p.m.36 views

Use after free in Wasmtime

There is a use after free vulnerability in Wasmtime when both running Wasm that uses externrefs and enabling epoch interruption in Wasmtime. If you are not explicitly enabling epoch interruption it is disabled by default then you are not affected. If you are explicitly disabling the Wasm referenc...

9.8CVSS1.1AI score0.01161EPSS
SaveExploits0References8Affected Software1
NVD
NVD
added 2022/03/31 11:15 p.m.24 views

CVE-2022-24791

Wasmtime is a standalone JIT-style runtime for WebAssembly, using Cranelift. There is a use after free vulnerability in Wasmtime when both running Wasm that uses externrefs and enabling epoch interruption in Wasmtime. If you are not explicitly enabling epoch interruption it is disabled by default...

9.8CVSS0.01161EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2022/03/31 11:15 p.m.37 views

CVE-2022-24791

Wasmtime is a standalone JIT-style runtime for WebAssembly, using Cranelift. There is a use after free vulnerability in Wasmtime when both running Wasm that uses externrefs and enabling epoch interruption in Wasmtime. If you are not explicitly enabling epoch interruption it is disabled by default...

9.8CVSS7.2AI score0.01161EPSS
SaveExploits0References3
Prion
Prion
added 2022/03/31 11:15 p.m.17 views

Design/Logic Flaw

Wasmtime is a standalone JIT-style runtime for WebAssembly, using Cranelift. There is a use after free vulnerability in Wasmtime when both running Wasm that uses externrefs and enabling epoch interruption in Wasmtime. If you are not explicitly enabling epoch interruption it is disabled by default...

6.8CVSS9.6AI score0.01161EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2022/03/31 11:15 p.m.7 views

UBUNTU-CVE-2022-24791

Wasmtime is a standalone JIT-style runtime for WebAssembly, using Cranelift. There is a use after free vulnerability in Wasmtime when both running Wasm that uses externrefs and enabling epoch interruption in Wasmtime. If you are not explicitly enabling epoch interruption it is disabled by default...

9.8CVSS7.3AI score0.01161EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2022/03/31 11:0 p.m.42 views

CVE-2022-24791 Use after free in Wasmtime

Wasmtime is a standalone JIT-style runtime for WebAssembly, using Cranelift. There is a use after free vulnerability in Wasmtime when both running Wasm that uses externrefs and enabling epoch interruption in Wasmtime. If you are not explicitly enabling epoch interruption it is disabled by default...

8.1CVSS9.9AI score0.01161EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2022/03/31 11:0 p.m.8 views

CVE-2022-24791

Wasmtime is a standalone JIT-style runtime for WebAssembly, using Cranelift. There is a use after free vulnerability in Wasmtime when both running Wasm that uses externrefs and enabling epoch interruption in Wasmtime. If you are not explicitly enabling epoch interruption it is disabled by default...

9.8CVSS9.7AI score0.01161EPSS
SaveExploits0
CVE
CVE
added 2022/03/31 11:0 p.m.129 views

CVE-2022-24791

The CVE refers to Wasmtime (WebAssembly JIT runtime using Cranelift) with a use-after-free vulnerability that occurs when running Wasm code using externrefs while epoch interruption is enabled. The issue is caused by Cranelift failing to emit stack maps for safepoints inside cold blocks, which re...

9.8CVSS9.1AI score0.01161EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2022/03/31 11:0 p.m.19 views

CVE-2022-24791 Use after free in Wasmtime

Wasmtime is a standalone JIT-style runtime for WebAssembly, using Cranelift. There is a use after free vulnerability in Wasmtime when both running Wasm that uses externrefs and enabling epoch interruption in Wasmtime. If you are not explicitly enabling epoch interruption it is disabled by default...

8.1CVSS9.2AI score0.01161EPSS
SaveExploits0References4
vulnersOsv
vulnersOsv
added 2022/03/31 12:0 p.m.4 views

wasmtime-cli (>=0.35.0 <=0.35.1) potentially affected by CVE-2022-24791 via wasmtime (>=0.35.0 <=0.35.1)

wasmtime CARGO version =0.35.0, =0.35.0, =0.35.1 Source cves: CVE-2022-24791 Source advisory: OSV:RUSTSEC-2022-0016...

9.8CVSS7.2AI score0.01161EPSS
SaveExploits0
RustSec
RustSec
added 2022/03/31 12:0 p.m.29 views

Use after free with `externref`s and epoch interruption in Wasmtime

Use after free with externrefs and epoch interruption in Wasmtime...

9.8CVSS1.6AI score0.01161EPSS
SaveExploits0Affected Software1
vulnersOsv
vulnersOsv
added 2022/03/31 12:0 p.m.4 views

wasmtime-cli (>=0.34.0 <=0.34.1) potentially affected by CVE-2022-24791 via wasmtime (>=0.34.0 <=0.34.1)

wasmtime CARGO version =0.34.0, =0.34.0, =0.34.1 Source cves: CVE-2022-24791 Source advisory: OSV:RUSTSEC-2022-0016...

9.8CVSS7.2AI score0.01161EPSS
SaveExploits0
OSV
OSV
added 2022/03/31 12:0 p.m.5 views

RUSTSEC-2022-0016 Use after free with `externref`s and epoch interruption in Wasmtime

Use after free with externrefs and epoch interruption in Wasmtime...

9.8CVSS7.2AI score0.01161EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/03/31 12:0 a.m.8 views

Wasmtime 资源管理错误漏洞

Wasmtime, a Bytecode Consortium project, is a standalone wasm-optimized runtime for WebAssembly and WASI only. a resource management error vulnerability exists in Wasmtime, which stems from the fact that when running Wasm with externrefs and epoch interrupts are enabled in Wasmtime, a use after...

9.8CVSS5.5AI score0.01161EPSS
SaveExploits0References3
vulnersOsv
vulnersOsv
added 2022/03/28 12:0 p.m.8 views

wasmtime-cli (>=0.35.0 <=0.35.1) potentially affected by CVE-2022-24791 via wasmtime (>=0.35.0 <=0.35.1)

wasmtime CARGO version =0.35.0, =0.35.0, =0.35.1 Source cves: CVE-2022-24791 Source advisory: OSV:RUSTSEC-2022-0099...

9.8CVSS7.2AI score0.01161EPSS
SaveExploits0
OSV
OSV
added 2022/03/28 12:0 p.m.6 views

RUSTSEC-2022-0099 Use after free with `externref`s and epoch interruption in Wasmtime

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-gwc9-348x-qwv2. For more information see the GitHub-hosted security advisory...

9.8CVSS7.2AI score0.01161EPSS
SaveExploits0References3
RustSec
RustSec
added 2022/03/28 12:0 p.m.6 views

Use after free with `externref`s and epoch interruption in Wasmtime

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-gwc9-348x-qwv2. For more information see the GitHub-hosted security advisory...

9.8CVSS7AI score0.01161EPSS
SaveExploits0Affected Software1
vulnersOsv
vulnersOsv
added 2022/03/28 12:0 p.m.4 views

auto-wasi (=0.1.0), ceres-executor (>=0.1.0 <=0.2.0) +47 more potentially affected by CVE-2022-24791 via wasmtime (>=0.10.0 <=0.34.1)

wasmtime CARGO version =0.10.0, =0.1.0, =0.0.0, =0.40.1, =0.45.0, =0.1.0, =0.1.0, =0.1.0, =0.3.3, =0.1.0, =0.8.0, =0.8.0, =0.9.0 and more Source cves: CVE-2022-24791 Source advisory: OSV:RUSTSEC-2022-0099...

9.8CVSS7.2AI score0.01161EPSS
SaveExploits0
Rows per page
Query Builder