Webassembly CVE-2023-30300

MEDIUM

Loop with Unreachable Exit Condition (Infinite Loop) (CWE-835)

2023-05-03 cve@mitre.org

Denial Of Service Webassembly W3

5.5

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

5.5 MEDIUM

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

1

CVE Published

May 03, 2023 - 20:15 nvd

MEDIUM 5.5

DescriptionNVD

An issue in the component hang.wasm of WebAssembly 1.0 causes an infinite loop.

AnalysisAI

An issue in the component hang.wasm of WebAssembly 1.0 causes an infinite loop. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-835. An issue in the component hang.wasm of WebAssembly 1.0 causes an infinite loop. Affected products include: W3 Webassembly.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Webassembly

View all

CVE-2023-27117 HIGH This Week POC

WebAssembly v1.0.29 was discovered to contain a heap overflow via the component component wabt::Node::operator. Rated hi

CVE-2022-43281 HIGH This Week POC

wasm-interp v1.0.29 was discovered to contain a heap overflow via the component std::vector<wabt::Type, std::allocator<w

CVE-2023-31670 HIGH This Week POC

An issue in wasm2c 1.0.32, wasm2wat 1.0.32, wasm-decompile 1.0.32, and wasm-validate 1.0.32 allows attackers to cause a

CVE-2021-45290 HIGH This Week POC

A Denial of Service vulnerability exits in Binaryen 103 due to an assertion abort in wasm::handle_unreachable. Rated hig

CVE-2026-90648 HIGH This Week POC

Sandbox escape in wasm2c (wabt ≤ 1.0.41) allows an attacker controlling WebAssembly content to achieve arbitrary read/wr

CVE-2022-43282 HIGH This Week POC

wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallIndirectExpr->GetRetur

CVE-2022-43280 HIGH This Week POC

wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallExpr->GetReturnCallDro

CVE-2019-15759 MEDIUM This Month POC

An issue was discovered in Binaryen 1.38.32. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitabl

CVE-2019-15758 MEDIUM This Month POC

An issue was discovered in Binaryen 1.38.32. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitabl

CVE-2019-7704 MEDIUM This Month POC

wasm::WasmBinaryBuilder::readUserSection in wasm-binary.cpp in Binaryen 1.38.22 triggers an attempt at excessive memory

CVE-2019-7703 MEDIUM This Month POC

In Binaryen 1.38.22, there is a use-after-free problem in wasm::WasmBinaryBuilder::visitCall in wasm-binary.cpp. Rated m

CVE-2019-7702 MEDIUM This Month POC

A NULL pointer dereference was discovered in wasm::SExpressionWasmBuilder::parseExpression in wasm-s-parser.cpp in Binar

Same weakness CWE-835 – Loop with Unreachable Exit Condition (Infinite Loop)

View all

CVE-2024-20353 HIGH POC

CVE-2020-13935 HIGH POC

CVE-2017-16944 HIGH POC

CVE-2022-0778 HIGH POC

CVE-2024-43366 CRITICAL POC

CVE-2026-25533 HIGH POC

CVE-2018-8002 HIGH POC

CVE-2026-66730 HIGH POC

Same technique Denial Of Service

View all

CVE-2015-5119 CRITICAL POC

CVE-2011-2462 CRITICAL POC

CVE-2011-0611 HIGH POC

CVE-2012-1889 HIGH POC

CVE-2012-0507 CRITICAL POC

CVE-2014-1761 HIGH POC

CVE-2015-5122 CRITICAL POC

CVE-2011-0609 HIGH POC

Share

CVE-2023-30300 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy