CVE-2021-45293: Buffer Overflow

Published Dec 21, 2021

Updated

A Denial of Service vulnerability exists in Binaryen 103 due to an Invalid memory address dereference in wasm::WasmBinaryBuilder::visitLet.

Affected Software

3 affected components

WebAssembly Binaryen=103

fedoraproject fedora=34

fedoraproject fedora=35

Remediation

Patch Available

https://github.com/WebAssembly/binaryen/issues/4384

Event History

Dec 21, 2021

CVE Published

via MITRE·05:54 PM

Data Sourced

via MITRE·05:54 PM

Description

Data Sourced

via NVD·06:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2021-45293?

The severity of CVE-2021-45293 is medium with a severity value of 5.5.

What is the affected software for CVE-2021-45293?

The affected software for CVE-2021-45293 includes Webassembly Binaryen version 103, Fedoraproject Fedora version 34, and Fedoraproject Fedora version 35.

How can I fix CVE-2021-45293?

To fix CVE-2021-45293, it is recommended to update to a patched version of the affected software.

Where can I find more information about CVE-2021-45293?

More information about CVE-2021-45293 can be found at the following references: [GitHub Issue](https://github.com/WebAssembly/binaryen/issues/4384), [Fedora Advisory](https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UKGCHPS7UAIOOBGSXDJAUFE5CROTTF6J/), [Fedora Advisory](https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YCWLB4PWYQO55F7IGNC7KUYN2MFZE3JP/).

What is CWE-119?

CWE-119 is a common weakness enumeration category that refers to Improper Restriction of Operations within the Bounds of a Memory Buffer.