Lucene search

K
cbl_marinerCBL MarinerCBLMARINER:35048
HistoryJun 21, 2024 - 9:32 a.m.

CVE-2024-25629 affecting package nodejs for versions less than 20.14.0-1

2024-06-2109:32:44
CBL Mariner
3
cve-2024
25629
nodejs
package
vulnerability
upgrade
unix

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

AI Score

7

Confidence

Low

CVE-2024-25629 affecting package nodejs for versions less than 20.14.0-1. An upgraded version of the package is available that resolves this issue.

OSVersionArchitecturePackageVersionFilename
Azure Linux3.0allnodejs< 20.14.0-1UNKNOWN

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

AI Score

7

Confidence

Low