| Name | CVE-2019-7151 |
| Description | A NULL pointer dereference was discovered in wasm::Module::getFunctionOrNull in wasm/wasm.cpp in Binaryen 1.38.22. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by wasm-opt. |
| Source | CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
| Debian Bugs | 920853 |
The table below lists information on source packages.
| Source Package | Release | Version | Status |
|---|---|---|---|
| binaryen (PTS) | buster | 68-1 | fixed |
| bullseye | 99-3 | fixed | |
| sid, trixie, bookworm | 108-1 | fixed |
The information below is based on the following data on fixed versions.
| Package | Type | Release | Fixed Version | Urgency | Origin | Debian Bugs |
|---|---|---|---|---|---|---|
| binaryen | source | (unstable) | 66-1 | 920853 |
https://github.com/WebAssembly/binaryen/issues/1881
Same set of fixes as for https://github.com/WebAssembly/binaryen/issues/1879
address the issue.
https://github.com/WebAssembly/binaryen/commit/2127e64f42da55bb5b9b0ab1995b3ca7fc4e0d0b
https://github.com/WebAssembly/binaryen/commit/85e95e315a8023c46eb804fe80ebc244bcfdae3e