Lucene search
CBL MarinerCBLMARINER:35899HistoryJun 21, 2024 - 9:32 a.m.
CVE-2024-22017 affecting package nodejs for versions less than 20.14.0-1
2024-06-2109:32:44
CBL Mariner
8
cve-2024-22017
nodejs
package
security
update
unix
CVSS3
7.3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
HIGH
Availability Impact
LOW
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:L
AI Score
6.9
Confidence
Low
CVE-2024-22017 affecting package nodejs for versions less than 20.14.0-1. An upgraded version of the package is available that resolves this issue.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Azure Linux | 3.0 | all | nodejs | < 20.14.0-1 | UNKNOWN |
Related
f5
f5
K000139573: node.js vulnerability CVE-2024-22017
2024-05-10 00:00:00
cvelist
cvelist
CVE-2024-22017
2024-03-19 04:32:34
vulnrichment
vulnrichment
CVE-2024-22017
2024-03-19 04:32:34
nessus
nessus
FreeBSD : electron29 -- setuid() does not affect libuv's internal io_uring (a431676c-f86c-4371-b48a-b7d2b0bec3a3)
2024-05-18 00:00:00
CBL Mariner 2.0 Security Update: nodejs18 / nodejs / libuv (CVE-2024-22017)
2024-07-02 00:00:00
AlmaLinux 8 : nodejs:20 (ALSA-2024:1687)
2024-04-10 00:00:00
hackerone
hackerone
Node.js: setuid() does not drop all privileges due to io_uring
2023-09-18 13:55:49
nvd
nvd
CVE-2024-22017
2024-03-19 05:15:10
cbl_mariner
cbl_mariner
CVE-2024-22017 affecting package libuv for versions less than 1.48.0-1
2024-05-31 18:55:08
ubuntucve
ubuntucve
CVE-2024-22017
2024-03-19 00:00:00
cve
cve
CVE-2024-22017
2024-03-19 05:15:10
debiancve
debiancve
CVE-2024-22017
2024-03-19 05:15:10
osv
osv
nodejs-electron-29.4.0-1.1 on GA media
2024-06-15 00:00:00
Important: nodejs:20 security update
2024-05-06 13:04:21
Important: nodejs:20 security update
2024-04-08 00:00:00
freebsd
freebsd
electron29 -- setuid() does not affect libuv's internal io_uring
2024-05-15 00:00:00
NodeJS -- Vulnerabilities
2024-02-14 00:00:00
redhatcve
redhatcve
CVE-2024-22017
2024-02-23 20:01:35
rocky
rocky
nodejs:20 security update
2024-05-06 13:04:21
nodejs:20 security update
2024-05-06 13:05:29
oraclelinux
oraclelinux
nodejs:20 security update
2024-04-08 00:00:00
nodejs:20 security update
2024-04-08 00:00:00
almalinux
almalinux
Important: nodejs:20 security update
2024-04-08 00:00:00
Important: nodejs:20 security update
2024-04-08 00:00:00
redhat
redhat
(RHSA-2024:1688) Important: nodejs:20 security update
2024-04-08 08:32:51
(RHSA-2024:1687) Important: nodejs:20 security update
2024-04-08 08:32:43
ibm
ibm
nodejsblog
nodejsblog
Wednesday February 14 2024 Security Releases
2024-02-14 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2024-5.0-0213
2024-02-20 00:00:00
openvas
openvas
Node.js 20.x < 20.11.1, 21.x < 21.6.2 Multiple Vulnerabilities - Windows
2024-02-16 00:00:00
Node.js 20.x < 20.11.1, 21.x < 21.6.2 Multiple Vulnerabilities - Mac OS X
2024-02-16 00:00:00
CVSS3
7.3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
HIGH
Availability Impact
LOW
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:L
AI Score
6.9
Confidence
Low
Related for CBLMARINER:35899