CVE-2022-43281: 
NixOS vulnerability analysis and mitigation

wasm-interp v1.0.29 contains a heap overflow vulnerability identified as CVE-2022-43281. The vulnerability was discovered in the component std::vector::size() function located at /bits/stl_vector.h. The issue was reported on September 5, 2022, and affects the WebAssembly Binary Toolkit (WABT) (GitHub Issue).

The vulnerability is classified as a heap buffer overflow with a CVSS v3.1 base score of 7.8 (HIGH). The attack vector is local (AV:L), with low attack complexity (AC:L), requiring no privileges (PR:N) but user interaction (UI:R). The scope is unchanged (S:U), with high impact on confidentiality, integrity, and availability (C:H/I:H/A:H). The vulnerability is tracked as CWE-787 (Out-of-bounds Write) (NVD).

The heap buffer overflow vulnerability could potentially lead to memory corruption, allowing attackers to cause program crashes or potentially execute arbitrary code. The vulnerability affects the wasm-interp tool, which is part of the WebAssembly Binary Toolkit (Debian Security).

The vulnerability has been fixed in subsequent releases. Debian has patched the issue in version 1.0.32-1 for bookworm and version 1.0.36+dfsg+~cs1.0.36-2 for sid and trixie distributions. Users are advised to upgrade to these fixed versions (Debian Security).