Out-of-Bound Memory Read Vulnerability in Netdata Package
Summary
UBUNTU-CVE-2024-34251: An out-of-bound memory read vulnerability was discovered in Bytecode Alliance wasm-micro-runtime v2.0.0 which allows a remote attacker to cause a denial of service via the "block_type_get_arity" function in core/iwasm/in... Affects netdata versions < 1.44.3-2ubuntu0.1. Fixed in 1.44.3-2ubuntu0.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Netdata is a real-time performance monitoring tool that provides insights into system metrics, application performance, and resource usage. It is designed to be lightweight and efficient, allowing users to visualize data in real-time. The package version 1.44.3-2ubuntu0.1 is affected by a critical vulnerability that can lead to denial of service, making it essential for users to address this issue promptly.
Vulnerability Detail
An out-of-bound memory read vulnerability was discovered in the Bytecode Alliance wasm-micro-runtime v2.0.0. This vulnerability allows a remote attacker to exploit the 'block_type_get_arity' function in core/iwasm/interpreter/wasm.h, potentially leading to a denial of service. The vulnerability is particularly concerning as it can be triggered remotely, impacting the availability of the affected systems.
How To Fix
Minimum fixed version
1.44.3-2ubuntu0.1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade netdataTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can restrict access to the Netdata service by configuring firewall rules to limit incoming connections. This can help mitigate the risk of exploitation until the package is updated. For example, use the following command to deny access from external IPs:
sudo ufw deny from any to any port 19999'.
Conclusion
The out-of-bound memory read vulnerability in the Netdata package poses a significant risk, allowing remote attackers to cause denial of service. It is crucial for users to update to the patched version to safeguard their systems. Implementing temporary workarounds can help mitigate risks until the update is applied.
See every vulnerability recorded for netdata →
FAQ
The CVSS score of this vulnerability is 7.5, indicating a high severity level.
The vulnerability can lead to a denial of service, making the affected systems unavailable to users.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
No subscription is required to access the fix for this vulnerability; it is available for free.
If you cannot update the package immediately, consider implementing firewall rules to restrict access to the Netdata service as a temporary workaround.
Related vulnerabilities
Recent vulnerabilities recorded for netdata.
