CVE-2024-30266

LOW3.3EPSS 0.02%

Panic when using a dropped extenref-typed element segment

發布日:2024/4/2修改日:2025/5/2

也稱為:GHSA-75hq-h6g9-h4q5CGA-qfvq-fr33-2qxrRUSTSEC-2024-0441

描述

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-75hq-h6g9-h4q5. For more information see the GitHub-hosted security advisory.

受影響套件(3)

crates.io/wasmtime>= 19.0.0, < 19.0.1
crates.io/wasmtime>= 19.0.0, < 19.0.1
Debian/rust-wasmtimefrom 0, < 21.0.2+dfsg-1

CVSS 分數

來源	版本	嚴重程度	向量
osv	CVSS 3.1	LOW3.3	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

參考連結(10)

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2024-30266
ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2024-30266
PATCHhttps://crates.io/crates/wasmtime
PATCHhttps://github.com/bytecodealliance/wasmtime
WEBhttps://github.com/bytecodealliance/wasmtime/commit/7f57d0bb0948fa56cc950278d0db230ed10e8664
WEBhttps://github.com/bytecodealliance/wasmtime/issues/8281
WEBhttps://github.com/bytecodealliance/wasmtime/pull/8018
WEBhttps://github.com/bytecodealliance/wasmtime/pull/8283
WEBhttps://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-75hq-h6g9-h4q5
WEBhttps://rustsec.org/advisories/RUSTSEC-2024-0441.html