CVE-2024-7884
2 advisories.
crates.io/ic_cdk CVE-2024-7884: high 7.5, EPSS 0.69%
ic-cdk has a memory leak when calling a canister method via `ic_cdk::call`
Action: Upgrade ic_cdk to 0.8.2 or later.
cargo update -p ic_cdk --precise 0.8.2cargo update -p ic_cdk --precise 0.9.3cargo update -p ic_cdk --precise 0.10.1cargo update -p ic_cdk --precise 0.11.6cargo update -p ic_cdk --precise 0.12.2cargo update -p ic_cdk --precise 0.13.5cargo update -p ic_cdk --precise 0.14.1cargo update -p ic_cdk --precise 0.15.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.8.0 | 0.8.2 | - |
| 0.9.0 | 0.9.3 | - |
| 0.10.0 | 0.10.1 | - |
| 0.11.0 | 0.11.6 | - |
| 0.12.0 | 0.12.2 | - |
| 0.13.0 | 0.13.5 | - |
| 0.14.0 | 0.14.1 | - |
| 0.15.0 | 0.15.1 | - |
Fixed versions
| 0.8.2 | 0.9.3 | 0.10.1 | 0.11.6 | 0.12.2 | 0.13.5 | 0.14.1 | 0.15.1 |
Sources
- osv: GHSA-rwq6-crjg-9cpw
- https://github.com/dfinity/cdk-rs/security/advisories/GHSA-rwq6-crjg-9cpw
- https://nvd.nist.gov/vuln/detail/CVE-2024-7884
- https://github.com/dfinity/cdk-rs/pull/509
- https://github.com/dfinity/cdk-rs/commit/bd17d57a7b8ca59665fea5fad6143ca02724d03b
- https://docs.rs/ic-cdk/latest/ic_cdk
- https://github.com/dfinity/cdk-rs
- https://internetcomputer.org/docs/current/references/ic-interface-spec
- https://rustsec.org/advisories/RUSTSEC-2024-0372.html
CVE-2024-7884 · published · modified · JSON
crates.io/ic-cdk CVE-2024-7884: high 7.5, EPSS 0.69%
Memory leak when calling a canister method via `ic_cdk::call`
Action: Upgrade ic-cdk to 0.8.2 or later.
cargo update -p ic-cdk --precise 0.8.2cargo update -p ic-cdk --precise 0.9.3cargo update -p ic-cdk --precise 0.10.1cargo update -p ic-cdk --precise 0.11.6cargo update -p ic-cdk --precise 0.12.2cargo update -p ic-cdk --precise 0.13.5cargo update -p ic-cdk --precise 0.14.1cargo update -p ic-cdk --precise 0.15.1cargo update -p ic-cdk --precise 0.16.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.8.0 | 0.8.2 | - |
| 0.9.0-0 | 0.9.3 | - |
| 0.10.0-0 | 0.10.1 | - |
| 0.11.0-0 | 0.11.6 | - |
| 0.12.0-0 | 0.12.2 | - |
| 0.13.0-0 | 0.13.5 | - |
| 0.14.0-0 | 0.14.1 | - |
| 0.15.0-0 | 0.15.1 | - |
| 0.16.0-0 | 0.16.0 | - |
Fixed versions
| 0.8.2 | 0.9.3 | 0.10.1 | 0.11.6 | 0.12.2 | 0.13.5 | 0.14.1 | 0.15.1 | 0.16.0 |
Sources
- osv: RUSTSEC-2024-0372
- https://crates.io/crates/ic-cdk
- https://rustsec.org/advisories/RUSTSEC-2024-0372.html
- https://github.com/dfinity/cdk-rs/pull/509
CVE-2024-7884 · published · modified · JSON