U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Vulnerability Change Records for CVE-2023-27477

Change History

Initial Analysis by NIST 3/15/2023 12:56:04 PM

Action Type Old Value New Value
Added CVSS V3.1

								
							
							
						
NIST AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Added CPE Configuration

								
							
							
						
OR
     *cpe:2.3:a:bytecodealliance:cranelift-codegen:*:*:*:*:*:rust:*:* versions from (including) 0.84.0 up to (excluding) 0.91.1
     *cpe:2.3:a:bytecodealliance:cranelift-codegen:0.92.0:*:*:*:*:rust:*:*
     *cpe:2.3:a:bytecodealliance:cranelift-codegen:0.93.0:*:*:*:*:rust:*:*
     *cpe:2.3:a:bytecodealliance:wasmtime:*:*:*:*:*:rust:*:* versions from (including) 0.37.0 up to (excluding) 4.0.1
     *cpe:2.3:a:bytecodealliance:wasmtime:5.0.0:*:*:*:*:rust:*:*
     *cpe:2.3:a:bytecodealliance:wasmtime:6.0.0:*:*:*:*:rust:*:*
Changed Reference Type
https://docs.rs/wasmtime/latest/wasmtime/struct.Config.html#method.wasm_simd No Types Assigned
https://docs.rs/wasmtime/latest/wasmtime/struct.Config.html#method.wasm_simd Product
Changed Reference Type
https://github.com/bytecodealliance/wasmtime/commit/5dc2bbccbb363e474d2c9a1b8e38a89a43bbd5d1 No Types Assigned
https://github.com/bytecodealliance/wasmtime/commit/5dc2bbccbb363e474d2c9a1b8e38a89a43bbd5d1 Patch
Changed Reference Type
https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-xm67-587q-r2vw No Types Assigned
https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-xm67-587q-r2vw Mitigation, Patch, Vendor Advisory
Changed Reference Type
https://github.com/webassembly/simd No Types Assigned
https://github.com/webassembly/simd Not Applicable
Changed Reference Type
https://groups.google.com/a/bytecodealliance.org/g/sec-announce/c/Mov-ItrNJsQ No Types Assigned
https://groups.google.com/a/bytecodealliance.org/g/sec-announce/c/Mov-ItrNJsQ Mailing List, Release Notes, Vendor Advisory