crates.io/solana_rbpf CVE-2022-23066: critical 9.1, EPSS 2.52%
Incorrect Calculation in solana_rbpf
Action: Upgrade solana_rbpf to 0.2.28 or later.
cargo update -p solana_rbpf --precise 0.2.28Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.2.26 | 0.2.28 | - |
Fixed versions
| 0.2.28 |
Sources
- osv: GHSA-9qmm-4mfr-r3wj
- https://nvd.nist.gov/vuln/detail/CVE-2022-23066
- https://github.com/solana-labs/rbpf/commit/e61e045f8c244de978401d186dcfd50838817297
- https://blocksecteam.medium.com/how-a-critical-bug-in-solana-network-was-detected-and-timely-patched-a701870e1324
- https://github.com/solana-labs/rbpf
- https://www.whitesourcesoftware.com/vulnerability-database/CVE-2022-23066
CVE-2022-23066 · published · modified · JSON