solana-labs

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

solana-labs records in CISA KEV

No solana-labs vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Rbpf 2 records LOW Pay 1 record LOW

Records

2 records in Rbpf · all components

TI-2021-21061 CVE-2021-46102 · GHSA-xwqr-xmgg-j69q

From version 0.2.14 to 0.2.16 for Solana rBPF, function "relocate" in the file src/elf.rs…

LOW 37

From version 0.2.14 to 0.2.16 for Solana rBPF, function "relocate" in the file src/elf.rs has an integer overflow bug because the sym.st_value is read directly from ELF file without checking.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01872 Published 2022-01-27 Fixed in 0.2.17 CWE-190

TI-2022-13297 CVE-2022-31264 · GHSA-ffx3-8qvm-pq3j

Solana solana_rbpf before 0.2.29 has an addition integer overflow via invalid ELF program…

LOW 36

Solana solana_rbpf before 0.2.29 has an addition integer overflow via invalid ELF program headers.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01361 Published 2022-05-21 Fixed in 0.2.29 CWE-190

Open these records in search →

Critical	1
High	4
Medium	1
Low	0
No CVSS	0