CVE-2024-34250

2024-05-0600:00:00

ubuntu.com

bytecode alliance

denial of service

wasm_loader_check_br

interpreter

netdata

unix

CVSS3

6.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.7

Confidence

High

EPSS

Percentile

9.0%

JSON

A heap buffer overflow vulnerability was discovered in Bytecode Alliance
wasm-micro-runtime v2.0.0 which allows a remote attacker to cause at least
a denial of service via the “wasm_loader_check_br” function in
core/iwasm/interpreter/wasm_loader.c.

Notes

Author	Note
rodrigo-zaiden	netdata embeds wasm-micro-runtime code.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchnetdata< anyUNKNOWN
ubuntu20.04noarchnetdata< anyUNKNOWN
ubuntu22.04noarchnetdata< anyUNKNOWN
ubuntu24.04noarchnetdata< anyUNKNOWN