UBUNTU-CVE-2024-45056

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/CVE-2024-45056
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-45056.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2024-45056
Related
Withdrawn
2025-06-23T15:59:04Z
Published
2024-08-29T17:15:00Z
Modified
2024-08-29T17:15:00Z
Severity
  • 5.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
Summary
[none]
Details

zksolc is a Solidity compiler for ZKsync. All LLVM versions since 2015 fold (xor (shl 1, x), -1) to (rotl ~1, x) if run with optimizations enabled. Here ~1 is generated as an unsigned 64 bits number (2^64-1). This number is zero-extended to 256 bits on EraVM target while it should have been sign-extended. Thus instead of producing roti 2^256 - 1, x the compiler produces rotl 2^64 - 1, x. Analysis has shown that no contracts were affected by the date of publishing this advisory. This issue has been addressed in version 1.5.3. Users are advised to upgrade and redeploy all contracts. There are no known workarounds for this vulnerability.

References

Affected packages

Ubuntu:20.04:LTS

llvm-toolchain-10

Package

Name
llvm-toolchain-10
Purl
pkg:deb/ubuntu/llvm-toolchain-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

Other

1:10~++20200121023453+de4b2a7fad6-1~exp1

1:10.*

1:10.0.0~+rc1-1~exp1
1:10.0.0~+rc2-2~build2
1:10.0.0~+rc2-2
1:10.0.0~+rc3-1
1:10.0.0~+rc3-1build1
1:10.0.0~+rc4-1
1:10.0.0~+rc5-1ubuntu1
1:10.0.0-1ubuntu1
1:10.0.0-1ubuntu2
1:10.0.0-2ubuntu1
1:10.0.0-2ubuntu2
1:10.0.0-3
1:10.0.0-4ubuntu1

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

llvm-toolchain-11

Package

Name
llvm-toolchain-11
Purl
pkg:deb/ubuntu/llvm-toolchain-11

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:11.*

1:11.0.0-2~ubuntu20.04.1

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

llvm-toolchain-12

Package

Name
llvm-toolchain-12
Purl
pkg:deb/ubuntu/llvm-toolchain-12

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:12.*

1:12.0.0-3ubuntu1~20.04.3
1:12.0.0-3ubuntu1~20.04.4
1:12.0.0-3ubuntu1~20.04.5

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

llvm-toolchain-6.0

Package

Name
llvm-toolchain-6.0
Purl
pkg:deb/ubuntu/llvm-toolchain-6.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:6.*

1:6.0.1-11
1:6.0.1-11ubuntu1
1:6.0.1-12
1:6.0.1-14

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

llvm-toolchain-7

Package

Name
llvm-toolchain-7
Purl
pkg:deb/ubuntu/llvm-toolchain-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:7.*

1:7.0.1-9build1
1:7.0.1-9ubuntu2
1:7.0.1-10
1:7.0.1-10build1
1:7.0.1-12

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

llvm-toolchain-8

Package

Name
llvm-toolchain-8
Purl
pkg:deb/ubuntu/llvm-toolchain-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:8.*

1:8.0.1-3build1
1:8.0.1-4
1:8.0.1-4ubuntu3
1:8.0.1-7build1
1:8.0.1-7ubuntu1
1:8.0.1-8ubuntu1
1:8.0.1-9

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

llvm-toolchain-9

Package

Name
llvm-toolchain-9
Purl
pkg:deb/ubuntu/llvm-toolchain-9

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

Other

1:9-2

1:9.*

1:9.0.0-3ubuntu2
1:9.0.0-4ubuntu4
1:9.0.1~+rc2-1~exp1
1:9.0.1~+rc2-1~exp1ubuntu1
1:9.0.1-1
1:9.0.1-2
1:9.0.1-6build1
1:9.0.1-8build1
1:9.0.1-8ubuntu1
1:9.0.1-9ubuntu1
1:9.0.1-10
1:9.0.1-11
1:9.0.1-11ubuntu1
1:9.0.1-12

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

Ubuntu:22.04:LTS

llvm-toolchain-11

Package

Name
llvm-toolchain-11
Purl
pkg:deb/ubuntu/llvm-toolchain-11

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:11.*

1:11.0.1-2ubuntu5
1:11.1.0-6

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

llvm-toolchain-12

Package

Name
llvm-toolchain-12
Purl
pkg:deb/ubuntu/llvm-toolchain-12

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:12.*

1:12.0.1-8build1
1:12.0.1-16
1:12.0.1-19ubuntu3

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

llvm-toolchain-13

Package

Name
llvm-toolchain-13
Purl
pkg:deb/ubuntu/llvm-toolchain-13

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:13.*

1:13.0.0-2
1:13.0.0-9
1:13.0.1-2ubuntu1
1:13.0.1-2ubuntu2
1:13.0.1-2ubuntu2.1
1:13.0.1-2ubuntu2.2

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

llvm-toolchain-14

Package

Name
llvm-toolchain-14
Purl
pkg:deb/ubuntu/llvm-toolchain-14

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:14.*

1:14.0.0~+rc1-1
1:14.0.0~+rc1-1ubuntu4
1:14.0.0~+rc4-1ubuntu1
1:14.0.0-1ubuntu1
1:14.0.0-1ubuntu1.1

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

llvm-toolchain-15

Package

Name
llvm-toolchain-15
Purl
pkg:deb/ubuntu/llvm-toolchain-15

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:15.*

1:15.0.6-3~ubuntu0.22.04.2
1:15.0.7-0ubuntu0.22.04.1
1:15.0.7-0ubuntu0.22.04.2
1:15.0.7-0ubuntu0.22.04.3

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

Ubuntu:24.04:LTS

llvm-toolchain-14

Package

Name
llvm-toolchain-14
Purl
pkg:deb/ubuntu/llvm-toolchain-14

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:14.*

1:14.0.6-16
1:14.0.6-16build1
1:14.0.6-16build2
1:14.0.6-19build2
1:14.0.6-19build4

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

llvm-toolchain-15

Package

Name
llvm-toolchain-15
Purl
pkg:deb/ubuntu/llvm-toolchain-15

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:15.*

1:15.0.7-10
1:15.0.7-10build1
1:15.0.7-10build2
1:15.0.7-10ubuntu1
1:15.0.7-11
1:15.0.7-14build1
1:15.0.7-14build3

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

llvm-toolchain-16

Package

Name
llvm-toolchain-16
Purl
pkg:deb/ubuntu/llvm-toolchain-16

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:16.*

1:16.0.6-15
1:16.0.6-18
1:16.0.6-19
1:16.0.6-19build1
1:16.0.6-20
1:16.0.6-23ubuntu1
1:16.0.6-23ubuntu3
1:16.0.6-23ubuntu4

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

llvm-toolchain-17

Package

Name
llvm-toolchain-17
Purl
pkg:deb/ubuntu/llvm-toolchain-17

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:17.*

1:17.0.2-1~exp1ubuntu2.1
1:17.0.5-1ubuntu1
1:17.0.5-1ubuntu2
1:17.0.6-2
1:17.0.6-3
1:17.0.6-5build1
1:17.0.6-9build2
1:17.0.6-9build3
1:17.0.6-9ubuntu1

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

llvm-toolchain-18

Package

Name
llvm-toolchain-18
Purl
pkg:deb/ubuntu/llvm-toolchain-18

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:18.*

1:18.1.0~rc1-1
1:18.1.0~rc2-3
1:18.1.0~rc2-4
1:18.1.0~++20240126095841+0991d3c7b53d-1~exp1
1:18.1.2-1ubuntu2
1:18.1.2-1ubuntu3
1:18.1.3-1
1:18.1.3-1ubuntu1

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:14.04:LTS

llvm-toolchain-3.6

Package

Name
llvm-toolchain-3.6
Purl
pkg:deb/ubuntu/llvm-toolchain-3.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:3.*

1:3.6-2ubuntu1~trusty1
1:3.6-2ubuntu1~trusty2

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

llvm-toolchain-3.8

Package

Name
llvm-toolchain-3.8
Purl
pkg:deb/ubuntu/llvm-toolchain-3.8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:3.*

1:3.8-2ubuntu3~trusty4
1:3.8-2ubuntu3~trusty5

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

llvm-toolchain-3.9

Package

Name
llvm-toolchain-3.9
Purl
pkg:deb/ubuntu/llvm-toolchain-3.9

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:3.*

1:3.9.1-4ubuntu3~14.04.2
1:3.9.1-4ubuntu3~14.04.3

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:16.04:LTS

llvm-toolchain-3.6

Package

Name
llvm-toolchain-3.6
Purl
pkg:deb/ubuntu/llvm-toolchain-3.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:3.*

1:3.6.2-1
1:3.6.2-3
1:3.6.2-3build1
1:3.6.2-3ubuntu1
1:3.6.2-3ubuntu2

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

llvm-toolchain-3.8

Package

Name
llvm-toolchain-3.8
Purl
pkg:deb/ubuntu/llvm-toolchain-3.8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:3.*

1:3.8~+rc1-1~exp1ubuntu3
1:3.8~+rc2-1~exp1ubuntu2
1:3.8-2ubuntu1
1:3.8-2ubuntu3
1:3.8-2ubuntu4

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

llvm-toolchain-4.0

Package

Name
llvm-toolchain-4.0
Purl
pkg:deb/ubuntu/llvm-toolchain-4.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:4.*

1:4.0-1ubuntu1~16.04.1
1:4.0-1ubuntu1~16.04.2

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

llvm-toolchain-5.0

Package

Name
llvm-toolchain-5.0
Purl
pkg:deb/ubuntu/llvm-toolchain-5.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:5.*

1:5.0-3~16.04.1

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

llvm-toolchain-6.0

Package

Name
llvm-toolchain-6.0
Purl
pkg:deb/ubuntu/llvm-toolchain-6.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:6.*

1:6.0-1ubuntu2~16.04.1

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

llvm-toolchain-3.5

Package

Name
llvm-toolchain-3.5
Purl
pkg:deb/ubuntu/llvm-toolchain-3.5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:3.*

1:3.5.2-2
1:3.5.2-3
1:3.5.2-3build1
1:3.5.2-3build2
1:3.5.2-3ubuntu1

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

llvm-toolchain-3.7

Package

Name
llvm-toolchain-3.7
Purl
pkg:deb/ubuntu/llvm-toolchain-3.7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:3.*

1:3.7-2ubuntu1
1:3.7-2ubuntu2
1:3.7-4ubuntu1
1:3.7.1-1ubuntu1
1:3.7.1-1ubuntu2
1:3.7.1-1ubuntu3
1:3.7.1-1ubuntu4
1:3.7.1-2ubuntu1
1:3.7.1-2ubuntu2

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

llvm-toolchain-3.9

Package

Name
llvm-toolchain-3.9
Purl
pkg:deb/ubuntu/llvm-toolchain-3.9

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:3.*

1:3.9.1-4ubuntu3~16.04.1
1:3.9.1-4ubuntu3~16.04.2

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

llvm-toolchain-8

Package

Name
llvm-toolchain-8
Purl
pkg:deb/ubuntu/llvm-toolchain-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:8-3~ubuntu16.*

1:8-3~ubuntu16.04.1

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:18.04:LTS

llvm-toolchain-10

Package

Name
llvm-toolchain-10
Purl
pkg:deb/ubuntu/llvm-toolchain-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:10.*

1:10.0.0-4ubuntu1~18.04.1
1:10.0.0-4ubuntu1~18.04.2

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

llvm-toolchain-3.9

Package

Name
llvm-toolchain-3.9
Purl
pkg:deb/ubuntu/llvm-toolchain-3.9

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:3.*

1:3.9.1-17ubuntu1
1:3.9.1-18ubuntu1
1:3.9.1-19ubuntu1

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

llvm-toolchain-6.0

Package

Name
llvm-toolchain-6.0
Purl
pkg:deb/ubuntu/llvm-toolchain-6.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:6.*

1:6.0~+rc1-1
1:6.0~+rc2-1
1:6.0-1ubuntu1
1:6.0-1ubuntu2

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

llvm-toolchain-7

Package

Name
llvm-toolchain-7
Purl
pkg:deb/ubuntu/llvm-toolchain-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:7-3~ubuntu0.*

1:7-3~ubuntu0.18.04.1

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

llvm-toolchain-8

Package

Name
llvm-toolchain-8
Purl
pkg:deb/ubuntu/llvm-toolchain-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:8-3~ubuntu18.*

1:8-3~ubuntu18.04.1
1:8-3~ubuntu18.04.2

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

llvm-toolchain-9

Package

Name
llvm-toolchain-9
Purl
pkg:deb/ubuntu/llvm-toolchain-9

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:9-2~ubuntu18.*

1:9-2~ubuntu18.04.1
1:9-2~ubuntu18.04.2

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

llvm-toolchain-3.7

Package

Name
llvm-toolchain-3.7
Purl
pkg:deb/ubuntu/llvm-toolchain-3.7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:3.*

1:3.7.1-5ubuntu3

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

llvm-toolchain-4.0

Package

Name
llvm-toolchain-4.0
Purl
pkg:deb/ubuntu/llvm-toolchain-4.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:4.*

1:4.0.1-6
1:4.0.1-8
1:4.0.1-10

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

llvm-toolchain-5.0

Package

Name
llvm-toolchain-5.0
Purl
pkg:deb/ubuntu/llvm-toolchain-5.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:5.*

1:5.0-3
1:5.0-4
1:5.0.1-1
1:5.0.1-2
1:5.0.1-4

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}