CVE-2022-31104

描述

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-jqwc-c49r-4w2x. For more information see the GitHub-hosted security advisory.

如何修補 CVE-2022-31104

要修補 CVE-2022-31104,請將受影響套件升級到下列已修補版本。

• crates.io/cranelift-codegen—升級至 0.85.1 或更新版本
• —升級至 0.38.1 或更新版本
• —升級至 0.38.1 或更新版本

CVE-2022-31104 正在被利用嗎?

低 — EPSS 為 1.6%,目前沒有觀察到大規模利用活動。

受影響套件(3)

• from 0, < 0.85.1
• from 0, < 0.38.1
• >= 0.0.0-0, < 0.38.1

CVSS 分數

參考連結(10)

• ADVISORYnvd.nist.gov/vuln/detail/CVE-2022-31104
• PATCHcrates.io/crates/wasmtime
• PATCHgithub.com/bytecodealliance/wasmtime
• WEBdocs.rs/wasmtime/latest/wasmtime/struct.Config.html#method.wasm_simd
• WEB