CVE-2024-34251

2024-05-0600:00:00

ubuntu.com

cve-2024-34251

bytecode alliance wasm-micro-runtime

remote attacker

denial of service

block_type_get_arity

memory read vulnerability

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

An out-of-bound memory read vulnerability was discovered in Bytecode
Alliance wasm-micro-runtime v2.0.0 which allows a remote attacker to cause
a denial of service via the “block_type_get_arity” function in
core/iwasm/interpreter/wasm.h.

Notes

Author	Note
rodrigo-zaiden	netdata embeds wasm-micro-runtime code.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchnetdata< anyUNKNOWN
ubuntu20.04noarchnetdata< anyUNKNOWN
ubuntu22.04noarchnetdata< anyUNKNOWN
ubuntu23.10noarchnetdata< anyUNKNOWN
ubuntu24.04noarchnetdata< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	netdata	< any	UNKNOWN
ubuntu	20.04	noarch	netdata	< any	UNKNOWN
ubuntu	22.04	noarch	netdata	< any	UNKNOWN
ubuntu	23.10	noarch	netdata	< any	UNKNOWN
ubuntu	24.04	noarch	netdata	< any	UNKNOWN