rust-wasmtime vulnerabilities (Ubuntu)
58 vulnerabilities.
-
rust-wasmtimeUbuntu Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction 9.9 Critical -
rust-wasmtimeUbuntu Wasmtime: Panic lowering a host-created component model stream into a guest that expects a different payload type 5.7 Medium -
rust-wasmtimeUbuntu Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilation 9.9 Critical -
rust-wasmtimeUbuntu Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Panic via Zero-Length Stream Writes 5.9 Medium -
rust-wasmtimeUbuntu Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via call_async Drop 5.9 Medium -
rust-wasmtimeUbuntu Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via realloc 6.9 Medium -
rust-wasmtimeUbuntu Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via thread.yield 5.9 Medium -
rust-wasmtimeUbuntu Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via Func::call 5.9 Medium -
rust-wasmtimeUbuntu Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Panic After Trap 5.9 Medium -
rust-wasmtimeUbuntu Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Stack Overflow via Type Registry 6.9 Medium -
rust-wasmtimeUbuntu Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Async-Entrypoint Enforcement Bypass 5.9 Medium -
rust-wasmtimeUbuntu Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Panic via StreamReader Type Mismatch 5.9 Medium -
rust-wasmtimeUbuntu Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 Unbounded Memory Growth via Component-Model Resource Handles 6.9 Medium -
rust-wasmtimeUbuntu Wasmtime 47.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Misaligned VMContext via Exception Tags 2.1 Low -
rust-wasmtimeUbuntu Wasmtime 49.0.0 before 49.0.3 Host Panic via Overlapping String Transcode in Fused Adapter 5.9 Medium -
rust-wasmtimeUbuntu Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via wasi-http 6.9 Medium -
rust-wasmtimeUbuntu Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 HTTP Request Target Smuggling 2.1 Low -
rust-wasmtimeUbuntu Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 Memory Disclosure via fd_readdir 2.1 Low -
rust-wasmtimeUbuntu Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 Host Panic via WASIp3 Timestamps 6.9 Medium -
rust-wasmtimeUbuntu Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 Stack Buffer Overflow 9.4 Critical -
rust-wasmtimeUbuntu Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 GC Heap Corruption via Tag Imports 5.9 Medium -
rust-wasmtimeUbuntu Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 wasi:http Zero Timeout Panic DoS 5.9 Medium -
rust-wasmtimeUbuntu Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 Unbounded Host Memory Allocation via SinkOutputStream write-zeroes 5.9 Medium -
rust-wasmtimeUbuntu Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 Fuel Limit Bypass DoS via WASI Preview 0 poll_oneoff 5.1 Medium -
rust-wasmtimeUbuntu Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 GC Heap Corruption via try_call 6.9 Medium -
rust-wasmtimeUbuntu Wasmtime 47.0.0 before 48.0.3 and 49.0.0 before 49.0.1 Fuel Accounting Bypass DoS 6.9 Medium -
rust-wasmtimeUbuntu Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 Denial of Service via Val API 1.0 Low -
rust-wasmtimeUbuntu Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 Memory Exhaustion DoS via wasmtime-wasi-http Outgoing Body Write 6.9 Medium -
rust-wasmtimeUbuntu Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 Host Panic via WASI Filesystem Timestamp Overflow 6.9 Medium -
rust-wasmtimeUbuntu Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, and 47.0.0 before 47.0.4 Sandbox Escape via Trailing Slashes 8.8 High -
rust-wasmtimeUbuntu Wasmtime 46.0.0 before 46.0.3 and 47.0.0 before 47.0.4 Unbounded Heap Allocation via WASIp3 Streams 6.9 Medium -
rust-wasmtimeUbuntu Wasmtime before 24.0.12, 25.0.0 before 36.0.13, 37.0.0 before 46.0.2, and 47.0.0 before 47.0.3 Cross-Engine Type Confusion 1.0 Low -
rust-wasmtimeUbuntu Wasmtime: Preemption and traps during bulk operations enable breaking internal VM state 2.0 Low -
rust-wasmtimeUbuntu Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destination 6.5 Medium -
rust-wasmtimeUbuntu Wasmtime: Leak in WASIp1 `fd_renumber` implementation 2.3 Low -
rust-wasmtimeUbuntu Wasmtime: WASI path_open(TRUNCATE) bypasses `FilePerms::WRITE` host restriction 7.5 High -
rust-wasmtimeUbuntu Wasmtime: Panic when allocating a table exceeding the size of the host's address space 5.9 Medium -
rust-wasmtimeUbuntu Wasmtime has an out-of-bounds write or crash when transcoding component model strings 6.1 Medium -
rust-wasmtimeUbuntu Wasmtime has an improperly masked return value from `table.grow` with Winch compiler backend 6.1 Medium -
rust-wasmtimeUbuntu Wasmtime leaks data between pooling allocator instances 2.3 Low -
rust-wasmtimeUbuntu Wasmtime with Winch compiler backend on aarch64 may allow a sandbox-escaping memory access 9.0 Critical -
rust-wasmtimeUbuntu Wasmtime has a use-after-free bug after cloning `wasmtime::Linker` 1.0 Low -
rust-wasmtimeUbuntu Wasmtime miscompiled guest heap access enables sandbox escape on aarch64 Cranelift 9.0 Critical -
rust-wasmtimeUbuntu Wasmtime's host panics when Winch compiler executes `table.fill` 5.9 Medium -
rust-wasmtimeUbuntu Wasmtime leaks host data with 64-bit tables and Winch 2.3 Low -
rust-wasmtimeUbuntu Wasmtime segfault or unused out-of-sandbox load with `f64x2.splat` operator on x86-64 4.1 Medium -
rust-wasmtimeUbuntu Wasmtime panics when lifting `flags` component value 5.6 Medium -
rust-wasmtimeUbuntu Wasmtime panics when transcoding misaligned utf-16 strings 5.9 Medium -
rust-wasmtimeUbuntu Wasmtime has a Heap OOB read in component model UTF-16 to latin1+utf16 string transcoding 6.9 Medium -
rust-wasmtimeUbuntu Wasmtime can panic when adding excessive fields to a `wasi:http/types.fields` instance 6.9 Medium - Show olderLoading…