CVE-2022-31264: Integer Overflow
Published May 21, 2022
·Updated
Solana solanarbpf before 0.2.29 has an addition integer overflow via invalid ELF program headers. elf.rs has a panic via a malformed eBPF program.
Affected Software
1 affected component
Solanalabs Rbpf<0.2.29
Event History
May 21, 2022
CVE Published
via MITRE·08:04 PM
Data Sourced
via MITRE·08:04 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2022-31264?
CVE-2022-31264 is classified as a high severity vulnerability due to the potential for integer overflow leading to crashes or exploitation of the affected software.
2
How do I fix CVE-2022-31264?
To fix CVE-2022-31264, upgrade the Solana rbpf library to version 0.2.29 or later.
3
What software is affected by CVE-2022-31264?
CVE-2022-31264 affects the Solanalabs rbpf library versions prior to 0.2.29.
4
What type of vulnerability is CVE-2022-31264?
CVE-2022-31264 is an integer overflow vulnerability that occurs due to invalid ELF program headers.
5
What are the implications of CVE-2022-31264?
The implications of CVE-2022-31264 include potential application crashes and the risk of executing malformed eBPF programs.