CVE-2022-23066criticalCWE-682

CVE-2022-23066: falha crítica em solana-labs rbpf

Solana rBPF - Incorrect Calculation in sdiv instruction

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar rbpf+ Monitorar solana_rbpf

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.1epss 2.5%
In Solana rBPF versions 0.2.26 and 0.2.27 are affected by Incorrect Calculation which is caused by improper implementation of sdiv instruction. This can lead to the wrong execution path, resulting in huge loss in specific cases. For example, the result of a sdiv instruction may decide whether to transfer tokens or not. The vulnerability affects both integrity and may cause serious availability problems.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Produtos afetados
solana-labs · rbpf