Lucene search

CVE-2017-16046

🗓️ 04 Jun 2018 19:02:29Reported by hackeroneType

CVE-2017-16046, malicious 'mariadb' npm module hijacking environment variables

Reporter	Title	Published	Views	Family All 9
Cvelist	CVE-2017-16046	4 Jun 201819:00	–	cvelist
Node.js	Hijacked Environment Variables	8 Aug 201721:43	–	nodejs
NVD	CVE-2017-16046	4 Jun 201819:29	–	nvd
OSV	mariadb is malware	18 Jul 201818:28	–	osv
CBLMariner	CVE-2017-16046 affecting package mariadb 10.3.17-3	6 May 202123:57	–	cbl_mariner
Prion	Code injection	4 Jun 201819:29	–	prion
Veracode	Malicious Typo-Squatting	5 Jun 201806:54	–	veracode
Github Security Blog	Withdrawn Advisory: mariadb was malware	18 Jul 201818:28	–	github
OpenVAS	Malicious JavaScript Package Detection	12 Jun 201800:00	–	openvas

Nvd

Node

mariadb mariadbMatch2.13.0node.js

[
  {
    "product": "mariadb node module",
    "vendor": "HackerOne",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  }
]

Source	Link
nodesecurity	www.nodesecurity.io/advisories/495

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

04 Jun 2018 19:29Current

7.3High risk

Vulners AI Score7.3

CVSS25

CVSS37.5

EPSS0.0014

CWE-506