OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2025-12-29 15:56:07 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add CVE-2022-24791 for Wasmtime (#1217)

Browse Source 
* Add CVE-2022-24791 for Wasmtime

* Update CVE-2022-24791

* Update crates/wasmtime/RUSTSEC-0000-0000.md

Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>

Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>
This commit is contained in:
Nick Fitzgerald
2022-03-31 15:41:14 -07:00
committed by GitHub
parent 1aca83f114
commit e6248efe2a
1 changed files with 21 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
crates/wasmtime/RUSTSEC-0000-0000.md Normal file
View File

@@ -0,0 +1,21 @@
```toml
[advisory]
id = "RUSTSEC-0000-0000"
package = "wasmtime"
date = "2022-03-31"
url = "https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-gwc9-348x-qwv2"
categories = ["memory-corruption", "memory-exposure"]
keywords = ["use-after-free", "Wasm", "garbage collection"]
aliases = ["CVE-2022-24791"]
[versions]
patched = [">= 0.35.2", ">= 0.34.2, < 0.35.0"]
unaffected = ["< 0.34.0"]
[affected]
functions = { "wasmtime::Config::epoch_interruption" = ["0.34.0", "0.34.1", "0.35.0", "0.35.1"] }
```
# Use after free with `externref`s and epoch interruption in Wasmtime
[Use after free with `externref`s and epoch interruption in Wasmtime](https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-gwc9-348x-qwv2)