CVE-2023-28445

CRITICAL9.9EPSS 0.77%

Deno improperly handles resizable ArrayBuffer

發布日:2023/3/23修改日:2023/11/8

描述

### Impact [Resizable ArrayBuffers](https://github.com/tc39/proposal-resizablearraybuffer) passed to asynchronous native functions that are shrunk during the asynchronous operation could result in an out-of-bound read/write. It is unlikely that this has been exploited in the wild, as the only version affected is Deno 1.32.0. Deno Deploy users are not affected. ### Patches The problem has been resolved by disabling resizable ArrayBuffers temporarily in Deno 1.32.1. A future version of Deno will re-enable resizable ArrayBuffers with a proper fix. ### Workarounds Upgrade to Deno 1.32.1, or run with `--v8-flags=--no-harmony-rab-gsab` to disable resizable ArrayBuffers.

受影響套件(3)

crates.io/Deno>= 1.32.0, < 1.32.1
crates.io/deno_runtime>= 0.102.0, < 0.103.0
crates.io/serde_v8>= 0.87.0, < 0.88.0

CVSS 分數

來源	版本	嚴重程度	向量
osv	CVSS 3.1	CRITICAL9.9	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

描述

受影響套件(3)

CVSS 分數

參考連結(6)