NodeJS -- Vulnerabilitiesentered 2024-03-01
no CVE referenced
CVE details
CVE-2024-22017
setuid() does not affect libuv's internal io_uring operations if initialized before the call to setuid(). This allows the process to perform privileged operations despite presumably having dropped such privileges through a call to setuid(). This vulnerability affects all users using version greater or equal than Node.js 18.18.0, Node.js 20.4.0 and Node.js 21.
- Score
- 7.3 high
- Published
- 2024-03-19
- Links
- NVD · cve.org · Report wrong data
Matched ports (0)
No port is within the affected range.
VuXML
electron29 -- setuid() does not affect libuv's internal io_uringentered 2024-05-17
no CVE referenced