CVE-2023-28445
CRITICAL9.9EPSS 0.77%Deno improperly handles resizable ArrayBuffer
Published: 3/23/2023Modified: 11/8/2023
Also known as:GHSA-c25x-cm9x-qqgx
Description
### Impact [Resizable ArrayBuffers](https://github.com/tc39/proposal-resizablearraybuffer) passed to asynchronous native functions that are shrunk during the asynchronous operation could result in an out-of-bound read/write. It is unlikely that this has been exploited in the wild, as the only version affected is Deno 1.32.0. Deno Deploy users are not affected. ### Patches The problem has been resolved by disabling resizable ArrayBuffers temporarily in Deno 1.32.1. A future version of Deno will re-enable resizable ArrayBuffers with a proper fix. ### Workarounds Upgrade to Deno 1.32.1, or run with `--v8-flags=--no-harmony-rab-gsab` to disable resizable ArrayBuffers.
Affected packages (3)
- crates.io/Deno>= 1.32.0, < 1.32.1
- crates.io/deno_runtime>= 0.102.0, < 0.103.0
- crates.io/serde_v8>= 0.87.0, < 0.88.0
CVSS scores
| Source | Version | Severity | Vector |
|---|---|---|---|
| osv | CVSS 3.1 | CRITICAL9.9 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H |
References (6)
- ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2023-28445
- PATCHhttps://github.com/denoland/deno
- WEBhttps://github.com/denoland/deno/pull/18395
- WEBhttps://github.com/denoland/deno/pull/18452
- WEBhttps://github.com/denoland/deno/releases/tag/v1.32.1
- WEBhttps://github.com/denoland/deno/security/advisories/GHSA-c25x-cm9x-qqgx