PatchTheCVEsolanalabs vulnerabilities
Recent CVEs affecting solanalabs products. 3 tracked.
solanalabs has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2022-08-01. Highest priority: CVE-2021-46102 (score 56/100).
- CVE-2022-35917 MEDIUM 5.3 UPGRADE Solana Pay is a protocol and set of reference implementations that enable developers to incorporate decentrali
- CVE-2022-31264 HIGH 7.5 UPGRADE Solana solana_rbpf before 0.2.29 has an addition integer overflow via invalid ELF program headers
- CVE-2021-46102 HIGH 7.5 UPGRADE From version 0.2.14 to 0.2.16 for Solana rBPF, function "relocate" in the file src/elf.rs has an integer overf
FAQ
How do I fix solanalabs vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is solanalabs being exploited right now?
None of the tracked solanalabs CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which solanalabs CVE should I patch first?
CVE-2021-46102 currently ranks highest (56/100): From version 0.2.14 to 0.2.16 for Solana rBPF, function "relocate" in the file src/elf.rs has an integer overf.