Lucene search
GoogleOSV:USN-6666-1HistoryFeb 28, 2024 - 1:20 p.m.
libuv1 vulnerability
2024-02-2813:20:14
Google
osv.dev
5
libuv1
vulnerability
truncated hostnames
bypass
checks
software
7.3 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
6.7 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
37.0%
It was discovered that libuv incorrectly truncated certain hostnames. A
remote attacker could possibly use this issue with specially crafted
hostnames to bypass certain checks.
Related
ubuntu
ubuntu
libuv vulnerability
2024-02-28 00:00:00
hackerone
hackerone
openvas
openvas
Debian: Security Advisory (DSA-5638-1)
2024-03-11 00:00:00
Huawei EulerOS: Security Advisory for libuv (EulerOS-SA-2024-1728)
2024-05-30 00:00:00
Huawei EulerOS: Security Advisory for libuv (EulerOS-SA-2024-1790)
2024-06-03 00:00:00
nessus
nessus
EulerOS 2.0 SP10 : libuv (EulerOS-SA-2024-1572)
2024-05-09 00:00:00
EulerOS 2.0 SP10 : libuv (EulerOS-SA-2024-1594)
2024-05-09 00:00:00
EulerOS 2.0 SP11 : libuv (EulerOS-SA-2024-1802)
2024-06-03 00:00:00
redos
redos
ROS-20240611-10
2024-06-11 00:00:00
ubuntucve
ubuntucve
CVE-2024-24806
2024-02-07 00:00:00
amazon
amazon
Medium: libuv
2024-02-29 10:03:00
nvd
nvd
CVE-2024-24806
2024-02-07 22:15:10
redhatcve
redhatcve
CVE-2024-24806
2024-02-08 12:39:02
prion
prion
Improper access control
2024-02-07 22:15:00
cgr
cgr
CVE-2024-24806 vulnerabilities
2024-05-19 03:07:16
osv
osv
libuv1 - security update
2024-03-05 00:00:00
libuv1 - security update
2024-03-10 00:00:00
CVE-2024-24806
2024-02-07 22:15:10
debian
debian
[SECURITY] [DLA 3752-1] libuv1 security update
2024-03-05 21:54:56
[SECURITY] [DSA 5638-1] libuv1 security update
2024-03-10 13:02:23
cbl_mariner
cbl_mariner
CVE-2024-24806 affecting package cmake for versions less than 3.28.2-6
2024-06-21 09:32:44
CVE-2024-24806 affecting package libuv for versions less than 1.43.0-2
2024-03-05 17:52:42
CVE-2024-24806 affecting package nodejs18 for versions less than 18.18.2-4
2024-03-05 17:52:42
cve
cve
CVE-2024-24806
2024-02-07 22:15:10
veracode
veracode
Server-Side Request Forgery (SSRF)
2024-02-08 08:37:09
slackware
slackware
[slackware-security] libuv
2024-02-20 21:14:06
mageia
mageia
Updated libuv packages fix security vulnerability
2024-03-22 03:19:51
cvelist
cvelist
debiancve
debiancve
CVE-2024-24806
2024-02-07 22:15:10
alpinelinux
alpinelinux
CVE-2024-24806
2024-02-07 22:15:10
wolfi
wolfi
CVE-2024-24806 vulnerabilities
2024-06-26 09:08:30
cloudfoundry
cloudfoundry
USN-6666-1: libuv vulnerability | Cloud Foundry
2024-04-04 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2024-3.0-0728
2024-02-19 00:00:00
Critical Photon OS Security Update - PHSA-2024-4.0-0568
2024-02-19 00:00:00
Critical Photon OS Security Update - PHSA-2024-5.0-0213
2024-02-20 00:00:00
ibm
ibm
hp
hp
HP ThinPro 8.0 SP 9 Security Updates
2024-06-17 00:00:00
7.3 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
6.7 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
37.0%
Related for OSV:USN-6666-1