AIKIDO-2024-10534
github.com/cosmwasm/wasmvm is vulnerable to Uncontrolled Resource Consumption
80
High Risk
This Affects:
github.com/cosmwasm/wasmvmTL;DR
Affected versions of this package are vulnerable to Uncontrolled Resource Consumption due to a flaw in the error-handling mechanism. Attackers can exploit this flaw by intentionally triggering a panic condition, leading to excessive resource utilization or a Denial of Service (DoS). This vulnerability can disrupt system availability and impact application reliability.
Who does this affect?
You are affected if you are using a vulnerable version of the package.
Background info
github.com/cosmwasm/wasmvm is vulnerable to Uncontrolled Resource Consumption in versions 0.12.0 - 1.5.4.
How to fix this
Upgrade the github.com/cosmwasm/wasmvm library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
SOC 2Compliant
ISO 27001Compliant