Denial of Service Vulnerability in WebAssembly Toolchain by WABT
CVE-2023-31670

7.5HIGH

Key Information:

Vendor

Webassembly

Status
Webassembly Binary Toolkit
Vendor
CVE Published:
23 May 2023

What is CVE-2023-31670?

A vulnerability in version 1.0.32 of the wasm2c, wasm2wat, wasm-decompile, and wasm-validate components of the WebAssembly Toolchain allows attackers to trigger a Denial of Service (DoS). This can be accomplished by executing a specially crafted binary, leading to potential disruptions in service availability. Organizations using these tools should assess their exposure and implement appropriate mitigations.

References

https://github.com/WebAssembly/wabt/issues/2199

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2023-31670 : Denial of Service Vulnerability in WebAssembly Toolchain by WABT