CVE-2024-4068

🗓️ 14 May 2024 00:00:00Reported by ubuntu.comType

NPM package 'braces' fails to limit character input, causing Memory Exhaustion in parse.j

Reporter	Title	Published	Views	Family All 81
OSV	Uncontrolled resource consumption in braces	14 May 202418:30	–	osv
OSV	CGA-jrqh-c82g-rxvm	25 Sep 202405:27	–	osv
OSV	CGA-w95g-rrw2-66h4	5 Jul 202400:34	–	osv
OSV	CGA-g3x5-7mr7-wr8m	15 Jul 202421:57	–	osv
OSV	CGA-hq78-8245-675v	12 Jun 202408:05	–	osv
OSV	CVE-2024-4068	14 May 202415:42	–	osv
OSV	traefik2-2.11.8-1.1 on GA media	10 Aug 202400:00	–	osv
OSV	traefik-3.1.2-1.1 on GA media	10 Aug 202400:00	–	osv
OSV	Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.19 Security update	15 Oct 202400:24	–	osv
OSV	Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.19 Security update	15 Oct 202400:24	–	osv

Source	Link
cve	www.cve.org/CVERecord
github	www.github.com/micromatch/braces/issues/35
devhub	www.devhub.checkmarx.com/cve-details/CVE-2024-4068/
github	www.github.com/micromatch/braces/blob/98414f9f1fabe021736e26836d8306d5de747e0d/lib/parse.js
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-4068
launchpad	www.launchpad.net/bugs/cve/CVE-2024-4068
security-tracker	www.security-tracker.debian.org/tracker/CVE-2024-4068

OS	OS Version	Architecture	Package	Package Version	Filename
ubuntu	18.04	noarch	node-braces	any	UNKNOWN
ubuntu	20.04	noarch	node-braces	any	UNKNOWN
ubuntu	22.04	noarch	node-braces	any	UNKNOWN
ubuntu	24.04	noarch	node-braces	any	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

14 May 2024 00:00Current

7.6High risk

Vulners AI Score7.6

CVSS37.5

EPSS0.000