Lucene search
Veracode Vulnerability DatabaseVERACODE:42931HistoryAug 24, 2023 - 4:48 a.m.
Privilege Escalation
2023-08-2404:48:48
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
nodejs
privilege escalation
process binding api
policy mechanism
elevated privileges
software
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
19.3%
nodejs is vulnerable to Privilege Escalation. This vulnerability exists due to a flaw in the way the process.binding() API can be used to bypass the policy mechanism. An attacker can exploit this vulnerability to gain elevated privileges.
Related
cbl_mariner
cbl_mariner
CVE-2023-32559 affecting package nodejs18 for versions less than 18.17.1-2
2023-09-27 18:02:50
CVE-2023-32559 affecting package nodejs for versions less than 16.20.2-2
2023-09-27 18:02:50
cvelist
cvelist
CVE-2023-32559
2023-08-24 01:23:29
osv
osv
CVE-2023-32559
2023-08-24 02:15:09
BIT-node-2023-32559
2024-03-06 10:59:36
nodejs vulnerabilities
2024-06-10 08:42:42
nvd
nvd
CVE-2023-32559
2023-08-24 02:15:09
cve
cve
CVE-2023-32559
2023-08-24 02:15:09
alpinelinux
alpinelinux
CVE-2023-32559
2023-08-24 02:15:09
cgr
cgr
CVE-2023-32559 vulnerabilities
2024-05-19 03:07:16
ibm
ibm
debiancve
debiancve
CVE-2023-32559
2023-08-24 02:15:09
ubuntucve
ubuntucve
CVE-2023-32559
2023-08-24 00:00:00
redhatcve
redhatcve
CVE-2023-32559
2023-08-22 07:49:12
prion
prion
Privilege escalation
2023-08-24 02:15:00
hackerone
hackerone
Node.js: Dependency Policy Bypass via process.binding
2023-04-13 23:35:52
wolfi
wolfi
CVE-2023-32559 vulnerabilities
2024-06-18 09:08:19
ubuntu
ubuntu
Node.js vulnerabilities
2024-06-10 00:00:00
rocky
rocky
nodejs security and bug fix update
2023-10-14 02:08:35
nodejs:18 security, bug fix, and enhancement update
2023-10-05 21:35:58
nessus
nessus
Rocky Linux 9 : nodejs (RLSA-2023:5532)
2023-10-14 00:00:00
Oracle Linux 9 : nodejs (ELSA-2023-5532)
2023-10-10 00:00:00
Ubuntu 22.04 LTS / 23.10 : Node.js vulnerabilities (USN-6822-1)
2024-06-10 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6822-1)
2024-06-11 00:00:00
openSUSE: Security Advisory for nodejs16 (SUSE-SU-2023:3379-1)
2024-03-04 00:00:00
openSUSE: Security Advisory for nodejs18 (SUSE-SU-2023:3378-1)
2024-03-04 00:00:00
almalinux
almalinux
Important: nodejs security and bug fix update
2023-10-09 00:00:00
Important: nodejs:18 security, bug fix, and enhancement update
2023-09-26 00:00:00
Important: nodejs:18 security, bug fix, and enhancement update
2023-09-26 00:00:00
mageia
mageia
Updated nodejs packages fix security vulnerability
2023-09-25 01:16:18
redhat
redhat
(RHSA-2023:5532) Important: nodejs security and bug fix update
2023-10-09 09:46:53
oraclelinux
oraclelinux
nodejs security and bug fix update
2023-10-10 00:00:00
nodejs:16 security, bug fix, and enhancement update
2023-09-28 00:00:00
nodejs:18 security, bug fix, and enhancement update
2023-10-05 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2023-3.0-0642
2023-09-01 00:00:00
Critical Photon OS Security Update - PHSA-2023-5.0-0082
2023-08-29 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: nodejs16-16.20.2-1.fc37
2023-08-19 00:48:28
[SECURITY] Fedora 37 Update: nodejs18-18.17.1-1.fc37
2023-08-19 00:48:28
[SECURITY] Fedora 37 Update: nodejs20-20.5.1-1.fc37
2023-08-19 00:48:29
f5
f5
K000135997 : Multiple Node.js vulnerabilities
2023-08-28 00:00:00
debian
debian
[SECURITY] [DSA 5589-1] nodejs security update
2023-12-27 22:12:40
gentoo
gentoo
Node.js: Multiple Vulnerabilities
2024-05-08 00:00:00
ics
ics
Siemens SINEC NMS
2024-02-15 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
19.3%
Related for VERACODE:42931