K000134725: vm2 vulnerability CVE-2023-29017

🗓️ 22 May 2023 16:54:32Reported by f5Type

f5🔗 my.f5.com👁 37 Views

VM2 vulnerability patched in version 3.9.15

Reporter	Title	Published	Views	Family All 33
Huntr	An outdated dependency leads to to remote command execution vulnerability	10 Apr 202316:20	–	huntr
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	27 Apr 202310:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container IntegrationServer and Integration Runtime operands that run Designer flows containing a Box node may be vulnerable to arbitrary code execution due to [CVE-2023-29017]	27 Apr 202315:51	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics is affected but not classified as vulnerable to multiple vulnerabilities	28 Jul 202301:39	–	ibm
BDU FSTEC	The vulnerability of the Error.prepareStackTrace object in the vm2 package manager NPM allows a attacker to exit from a isolated programming environment and execute arbitrary code.	11 Apr 202300:00	–	bdu_fstec
Circl	CVE-2023-29017	6 Apr 202319:00	–	circl
CNNVD	vm2 安全漏洞	6 Apr 202300:00	–	cnnvd
CVE	CVE-2023-29017	6 Apr 202319:18	–	cve
Cvelist	CVE-2023-29017 vm2 Sandbox Escape vulnerability	6 Apr 202319:18	–	cvelist
Github Security Blog	vm2 vulnerable to sandbox escape	7 Apr 202320:35	–	github

22 May 2023 16:54Current

9.4High risk

Vulners AI Score9.4

CVSS 3.19.8 - 10

EPSS0.63207

SSVC

sandbox remote code execution host object threat actor vulnerability unhandled async errors patch