CVE-2024-44073
1 advisory.
crates.io/miniscript CVE-2024-44073: high 7.5, EPSS 0.63%
Miniscript allows stack consumption
Action: Upgrade miniscript to 9.2.0 or later.
cargo update -p miniscript --precise 12.2.0cargo update -p miniscript --precise 11.2.0cargo update -p miniscript --precise 10.2.0cargo update -p miniscript --precise 9.2.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 12.0.0 | 12.2.0 | - |
| 11.0.0 | 11.2.0 | - |
| 10.0.0 | 10.2.0 | - |
| 0 | 9.2.0 | - |
Fixed versions
| 12.2.0 | 11.2.0 | 10.2.0 | 9.2.0 |
Sources
- osv: GHSA-rv9v-r4vm-gj8x
- https://nvd.nist.gov/vuln/detail/CVE-2024-44073
- https://github.com/rust-bitcoin/rust-miniscript/pull/704
- https://github.com/rust-bitcoin/rust-miniscript/pull/712
- https://github.com/rust-bitcoin/rust-miniscript/pull/712/files
- https://github.com/rust-bitcoin/rust-miniscript/pull/713/files
- https://github.com/rust-bitcoin/rust-miniscript/pull/714/files
- https://github.com/rust-bitcoin/rust-miniscript/pull/715/files
- https://github.com/rust-bitcoin/rust-miniscript/commit/5b0f5e3417f027a22b066debf825dbe6644b575b
- https://github.com/rust-bitcoin/rust-miniscript/commit/8f54b5e3fb7129ed9fbed53f1cb9e6e62ea4c151
- https://github.com/rust-bitcoin/rust-miniscript/compare/11.2.0...12.2.0
CVE-2024-44073 · published · modified · JSON