CVE-2022-3517

🗓️ 17 Oct 2022 00:00:00Reported by redhatType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 375 Views

CVE-2022-3517: Vulnerability in minimatch package leading to ReDoS and Denial of Service

Reporter	Title	Published	Views	Family All 208
IBM Security Bulletins	Security Bulletin: IBM i Modernization Engine for Lifecycle Integration is vulnerable to multiple vulnerabilities	16 May 202420:23	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Marked, Minimatch and Logback might affect IBM Storage Defender Copy Data Management	26 Sep 202519:29	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics Mobile (Android) is affected by multiple vulnerabilities	21 Oct 202415:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to minimatch denial of service (CVE-2022-3517)	7 Dec 202220:26	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in minimatch may affect IBM Robotic Process Automation and result in a denial of service (CVE-2022-3517)	25 Jan 202320:41	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities in moment, ansi-regex, Node.js, and minimatch may affect IBM Spectrum Protect Client and IBM Spectrum Protect for Space Management (CVE-2022-31129, CVE-2022-24785, CVE-2021-3807, CVE-2022-29244, CVE-2022-3517)	17 Mar 202309:26	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source Dependency Vulnerability	15 May 202318:43	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in minimatch affects IBM Process Mining . CVE-2022-3517	1 Feb 202320:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security QRadar Analyst Workflow app for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	3 Jan 202413:16	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in node.js affect Cloud Pak Sytem [CVE-2023-28154, CVE-2022-46175, CVE-2022-3517]	29 Dec 202314:27	–	ibm

NVD

Vulners

Node

minimatch_project minimatchRange<3.0.5node.js

Node

debian debian_linuxMatch10.0

Node

fedoraproject fedoraMatch36

fedoraproject fedoraMatch37

[
  {
    "vendor": "n/a",
    "product": "minimatch",
    "versions": [
      {
        "version": "minimatch versions prior to 3.0.5",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/grafana/grafana-image-renderer/issues/329
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UM6XJ73Q3NAM5KSGCOKJ2ZIA6GUWUJLK/
lists	www.lists.debian.org/debian-lts-announce/2023/01/msg00011.html
github	www.github.com/isaacs/minimatch/commit/a8763f4388e51956be62dc6025cec1126beeb5e6
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MTEUUTNIEBHGKUKKLNUZSV7IEP6IP3Q3/

13 May 2025 14:15Current

7.7High risk

Vulners AI Score7.7

CVSS 3.17.5

EPSS0.00476

SSVC