What is GHSA-ffx3-8qvm-pq3j?

GHSA-ffx3-8qvm-pq3j is a security advisory published by GitHub Security Advisories with High severity. Integer overflow in solana_rbpf

Which CVE IDs does GHSA-ffx3-8qvm-pq3j cover?

GHSA-ffx3-8qvm-pq3j covers the following CVE IDs: CVE-2022-31264. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-ffx3-8qvm-pq3j?

GHSA-ffx3-8qvm-pq3j has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-ffx3-8qvm-pq3j?

GHSA-ffx3-8qvm-pq3j affects 1 product, including: rust/solana_rbpf:\u003c 0.2.29.

GHSA-ffx3-8qvm-pq3jHighCVSS 7.5

Integer overflow in solana_rbpf

Vendor

GitHub Security Advisories

Published

May 22, 2022

Last Modified

January 27, 2023

🔗 CVE IDs covered (1)

CVE-2022-31264 →

📋 Description

Solana solana_rbpf before 0.2.29 has an addition integer overflow via invalid ELF program headers. elf.rs has a panic via a malformed eBPF program.

🎯 Affected products1

rust/solana_rbpf:< 0.2.29

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2022-31264
https://github.com/Ainevsia/CVE-Request/tree/main/Solana/1
https://github.com/solana-labs/rbpf/releases/tag/v0.2.29
https://github.com/advisories/GHSA-ffx3-8qvm-pq3j