Privilege Escalation

🗓️ 21 Feb 2024 03:05:12Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 34 Views

Node.js Privilege Escalation vulnerability due to CAP_NET_BIND_SERVICE exception bug

Reporter	Title	Published	Views	Family All 163
IBM Security Bulletins	Security Bulletin: Node.js vulnerabilities affect IBM Spectrum Control	8 Jul 202409:24	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Rational® Application Developer for WebSphere® Software is vulnerable to a denial of service	13 May 202423:54	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js affect IBM Voice Gateway	1 Apr 202418:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operands are vulnerable to loss of confidentiality and denial of service due to [CVE-2023-46809] [CVE-2024-21892] [CVE-2024-22019]	23 Apr 202414:05	–	ibm
IBM Security Bulletins	Security Bulletin: Denial of service vulnerabilities in Node.js affects IBM Rational Developer for i RPG and COBOL + Modernization Tools, Java Edition	30 May 202418:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities	19 Mar 202417:46	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation Fixes for May 2024.	15 Apr 202502:38	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insights 1.6.13 addresses multiple security vulnerabilities.	31 Jul 202411:01	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM SDK for Node.js affect IBM Business Automation Workflow	1 Mar 202419:23	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities present in IBM Answer Retrieval for Watson Discovery versions 2.15 and earlier	19 Mar 202420:32	–	ibm

Vulners

Node

nodejs nodejsMatch12.19.0~dfsg-1debian

AND

debian debian_linuxMatch999

openjdk21 openjdk21Match21.0.2_p13-r2os

AND

openjdk21 openjdk21Match21.0.1_p12-r0os

AND

openjdk21 openjdk21Match21.0.0_p35-r0os

AND

alpinelinux alpine_linuxMatchedge

openjdk21 openjdk21Match21.0.1_p12-r0os

AND

openjdk21 openjdk21Match21.0.2_p13-r0os

AND

alpinelinux alpine_linuxMatch3.19

openjdk17 openjdk17Match17.0.7_p7-r1os

AND

openjdk17 openjdk17Match17.0.9_p8-r0os

AND

openjdk17 openjdk17Match17.0.7_p7-r0os

AND

openjdk17 openjdk17Match17.0.10_p7-r0os

AND

openjdk17 openjdk17Match17.0.8_p7-r0os

AND

alpinelinux alpine_linuxMatch3.18

openjdk17 openjdk17Match17.0.2_p8-r0os

AND

openjdk17 openjdk17Match17.0.3_p7-r2os

AND

openjdk17 openjdk17Match17.0.7_p7-r0os

AND

openjdk17 openjdk17Match17.0.0_p35-r1os

AND

openjdk17 openjdk17Match17.0.2_p8-r1os

AND

openjdk17 openjdk17Match17.0.3_p7-r1os

AND

openjdk17 openjdk17Match17.0.7_p7-r1os

AND

openjdk17 openjdk17Match17.0.8_p7-r2os

AND

openjdk17 openjdk17Match17.0.6_p10-r0os

AND

openjdk17 openjdk17Match17.0.4_p8-r0os

AND

openjdk17 openjdk17Match17.0.4.1_p1-r0os

AND

openjdk17 openjdk17Match17.0.5_p8-r0os

AND

openjdk17 openjdk17Match17.0.7_p7-r2os

AND

openjdk17 openjdk17Match17.0.1_p12-r0os

AND

openjdk17 openjdk17Match17.0.10_p7-r0os

AND

openjdk17 openjdk17Match17.0.5_p8-r2os

AND

openjdk17 openjdk17Match17.0.9_p8-r0os

AND

alpinelinux alpine_linuxMatchedge

openjdk17 openjdk17Match17.0.9_p8-r0os

AND

openjdk17 openjdk17Match17.0.10_p7-r0os

AND

alpinelinux alpine_linuxMatch3.19

openjdk17 openjdk17Match17.0.5_p8-r2os

AND

openjdk17 openjdk17Match17.0.8_p7-r0os

AND

openjdk17 openjdk17Match17.0.10_p7-r0os

AND

openjdk17 openjdk17Match17.0.6_p10-r0os

AND

openjdk17 openjdk17Match17.0.7_p7-r0os

AND

openjdk17 openjdk17Match17.0.9_p8-r0os

AND

alpinelinux alpine_linuxMatch3.17

Source	Link
security-tracker	www.security-tracker.debian.org/tracker/CVE-2024-21892
hackerone	www.hackerone.com/reports/2237545
security	www.security.netapp.com/advisory/ntap-20240322-0003/
openwall	www.openwall.com/lists/oss-security/2024/03/11/1

13 Mar 2025 17:23Current

7High risk

Vulners AI Score7

CVSS 37.5 - 7.8

EPSS0.00448

SSVC