Wasmtime Windows Device Filename Sandbox Bypass (CVE-2024-51745)

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Description: - Vulnerability Name: Wasmtime doesn't fully sandbox all the Windows device filenames - Publisher: sunfishcode - Vulnerability ID: GHSA-c2f5-jxjv-2hh8 - Release Date: 4 days ago 2. Affected Versions: - Affected Versions: <= 24.0.1, 25.0.0, 25.0.1, 25.0.2, 26.0.0 - Fixed Versions: 24.0.2, 25.0.3, 26.0.1 3. Vulnerability Description: - Wasmtime’s filesystem sandbox on Windows blocks access to special device filenames (such as “COM1”, “COM2”, “LPT0”, “LPT1”, etc.), but does not block access to special device filenames using superscript digits (such as “COM1^”, “COM2^”, “LPT9”, “LPT1^”, etc.). Untrusted Wasm programs can exploit these superscript-digit device filenames to bypass the sandbox and access peripheral devices connected to the computer, or network resources mapped to these devices, including serial or parallel ports such as modems, printers, network printers, etc. 4. Remediation: - Fixed versions released: 24.0.2, 25.0.3, 26.0.1 - Affected Windows users are advised to upgrade to these fixed versions. 5. References: - Microsoft’s documentation on special device filenames - ISO-8859-1 - Original issue report 6. Vulnerability Severity: - Severity: Low - CVSS v4 Base Metrics: AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/SA:L 7. Vulnerability ID: - CVE-2024-51745 8. Vulnerability Weaknesses: - CWE-67 - CWE-184 9. Contributors: - Reporter: nathaniel-daniel

Goal Reached Thanks to every supporter — we hit 100%!

Wasmtime Windows Device Filename Sandbox Bypass (CVE-2024-51745)

More from this source