PT-2024-34878 · Wasmtime · Wasmtime

Nathaniel-Daniel · Published 2024-11-02 · Updated 2024-11-06 · CVE-2024-51745

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Wasmtime versions prior to 24.0.2 Wasmtime versions prior to 25.0.3 Wasmtime versions prior to 26.0.1

Description The issue concerns Wasmtime's filesystem sandbox implementation on Windows, which fails to block access to special device filenames using superscript digits, such as "COM¹", "COM²", "LPT⁰", "LPT¹", and so on. This allows untrusted Wasm programs to bypass the sandbox and access devices through these special filenames, potentially gaining access to peripheral devices connected to the computer or network resources mapped to those devices. This can include modems, printers, network printers, and any other device connected to a serial or parallel port, including emulated USB serial ports.

Recommendations For Wasmtime versions 23.0.x and prior, upgrade to one of the patched versions, such as 24.0.2, 25.0.3, or 26.0.1. As there are no known workarounds for this issue, affected Windows users are recommended to upgrade to a patched version.

Exploit

Fix

Incomplete List of Disallowed Inputs

Weakness Enumeration

CWE-67

CWE-184

Related Identifiers

CVE-2024-51745

GHSA-C2F5-JXJV-2HH8

RUSTSEC-2024-0438

Affected Products

Wasmtime

References · 17

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/51xxx/CVE-2024-51745.json · Exploit
• https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-c2f5-jxjv-2hh8 · Vendor Advisory
• https://github.com/bytecodealliance/cap-std/pull/371 · Patch
• https://security-tracker.debian.org/tracker/CVE-2024-51745 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-51745 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-c2f5-jxjv-2hh8 · Vendor Advisory
• https://osv.dev/vulnerability/RUSTSEC-2024-0438 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-51745 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-51745 · Security Note
• https://github.com/bytecodealliance/wasmtime · Note
• https://learn.microsoft.com/en-us/windows/win32/fileio/naming-a-file#naming-conventions · Note
• https://t.me/cvedetector/9954 · Telegram Post
• https://en.wikipedia.org/wiki/ISO/IEC_8859-1 · Note
• https://twitter.com/CVEnew/status/1853943222646779922 · Twitter Post
• https://crates.io/crates/wasmtime · Note