BIT-node-2024-22017
See a problem?- Import Source
- https://github.com/bitnami/vulndb/tree/main/data/node/BIT-node-2024-22017.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/BIT-node-2024-22017
- Aliases
-
- BIT-node-min-2024-22017
- CVE-2024-22017
- Published
- 2024-11-29T14:03:41.826Z
- Modified
- 2024-12-16T15:27:47.337181Z
- Summary
- [none]
- Details
-
setuid() does not affect libuv's internal io_uring operations if initialized before the call to setuid().This allows the process to perform privileged operations despite presumably having dropped such privileges through a call to setuid().This vulnerability affects all users using version greater or equal than Node.js 18.18.0, Node.js 20.4.0 and Node.js 21.
- Database specific
{ "cpes": [ "cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*" ], "severity": "High" }- References
Affected packages
Bitnami / node
Package
- Name
- node
- Purl
- pkg:bitnami/node
Severity
- 7.3 (High) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:L CVSS Calculator