Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2024-22020 (GCVE-0-2024-22020)
Vulnerability from cvelistv5
Vendor | Product | Version | ||
---|---|---|---|---|
NodeJS | Node |
Version: 4.0 ≤ Version: 5.0 ≤ Version: 6.0 ≤ Version: 7.0 ≤ Version: 8.0 ≤ Version: 9.0 ≤ Version: 10.0 ≤ Version: 11.0 ≤ Version: 12.0 ≤ Version: 13.0 ≤ Version: 14.0 ≤ Version: 15.0 ≤ Version: 16.0 ≤ Version: 17.0 ≤ Version: 18.0 ≤ Version: 19.0 ≤ Version: 20.0 ≤ Version: 21.0 ≤ Version: 22.0 ≤ |
{ "containers": { "adp": [ { "affected": [ { "cpes": [ "cpe:2.3:a:nodejs:nodejs:*:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "nodejs", "vendor": "nodejs", "versions": [ { "status": "affected", "version": "21.6.1" }, { "status": "affected", "version": "20.11.0" }, { "status": "affected", "version": "18.19.0" } ] } ], "metrics": [ { "other": { "content": { "id": "CVE-2024-22020", "options": [ { "Exploitation": "none" }, { "Automatable": "no" }, { "Technical Impact": "total" } ], "role": "CISA Coordinator", "timestamp": "2024-07-13T03:55:30.015268Z", "version": "2.0.3" }, "type": "ssvc" } } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-94", "description": "CWE-94 Improper Control of Generation of Code (\u0027Code Injection\u0027)", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2025-03-14T18:21:57.412Z", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP" }, "title": "CISA ADP Vulnrichment" }, { "providerMetadata": { "dateUpdated": "2024-11-22T12:04:47.763Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_transferred" ], "url": "https://hackerone.com/reports/2092749" }, { "tags": [ "x_transferred" ], "url": "http://www.openwall.com/lists/oss-security/2024/07/11/6" }, { "tags": [ "x_transferred" ], "url": "http://www.openwall.com/lists/oss-security/2024/07/19/3" }, { "url": "https://security.netapp.com/advisory/ntap-20241122-0006/" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "defaultStatus": "unaffected", "product": "Node", "vendor": "NodeJS", "versions": [ { "lessThan": "4.*", "status": "affected", "version": "4.0", "versionType": "semver" }, { "lessThan": "5.*", "status": "affected", "version": "5.0", "versionType": "semver" }, { "lessThan": "6.*", "status": "affected", "version": "6.0", "versionType": "semver" }, { "lessThan": "7.*", "status": "affected", "version": "7.0", "versionType": "semver" }, { "lessThan": "8.*", "status": "affected", "version": "8.0", "versionType": "semver" }, { "lessThan": "9.*", "status": "affected", "version": "9.0", "versionType": "semver" }, { "lessThan": "10.*", "status": "affected", "version": "10.0", "versionType": "semver" }, { "lessThan": "11.*", "status": "affected", "version": "11.0", "versionType": "semver" }, { "lessThan": "12.*", "status": "affected", "version": "12.0", "versionType": "semver" }, { "lessThan": "13.*", "status": "affected", "version": "13.0", "versionType": "semver" }, { "lessThan": "14.*", "status": "affected", "version": "14.0", "versionType": "semver" }, { "lessThan": "15.*", "status": "affected", "version": "15.0", "versionType": "semver" }, { "lessThan": "16.*", "status": "affected", "version": "16.0", "versionType": "semver" }, { "lessThan": "17.*", "status": "affected", "version": "17.0", "versionType": "semver" }, { "lessThan": "18.20.4", "status": "affected", "version": "18.0", "versionType": "semver" }, { "lessThan": "19.*", "status": "affected", "version": "19.0", "versionType": "semver" }, { "lessThan": "20.15.1", "status": "affected", "version": "20.0", "versionType": "semver" }, { "lessThan": "21.*", "status": "affected", "version": "21.0", "versionType": "semver" }, { "lessThan": "22.4.1", "status": "affected", "version": "22.0", "versionType": "semver" } ] } ], "descriptions": [ { "lang": "en", "value": "A security flaw in Node.js allows a bypass of network import restrictions.\nBy embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security.\nVerified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports.\nExploiting this flaw can violate network import security, posing a risk to developers and servers." } ], "metrics": [ { "cvssV3_0": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H", "version": "3.0" } } ], "providerMetadata": { "dateUpdated": "2025-04-30T22:25:20.702Z", "orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1", "shortName": "hackerone" }, "references": [ { "url": "https://hackerone.com/reports/2092749" }, { "url": "http://www.openwall.com/lists/oss-security/2024/07/11/6" }, { "url": "http://www.openwall.com/lists/oss-security/2024/07/19/3" } ] } }, "cveMetadata": { "assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1", "assignerShortName": "hackerone", "cveId": "CVE-2024-22020", "datePublished": "2024-07-09T01:07:28.098Z", "dateReserved": "2024-01-04T01:04:06.574Z", "dateUpdated": "2025-04-30T22:25:20.702Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "vulnerability-lookup:meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2024-22020\",\"sourceIdentifier\":\"support@hackerone.com\",\"published\":\"2024-07-09T02:15:09.973\",\"lastModified\":\"2025-03-14T19:15:44.700\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A security flaw in Node.js allows a bypass of network import restrictions.\\nBy embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security.\\nVerified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports.\\nExploiting this flaw can violate network import security, posing a risk to developers and servers.\"},{\"lang\":\"es\",\"value\":\"Un fallo de seguridad en Node.js permite eludir las restricciones de importaci\u00f3n de la red. Al incorporar importaciones fuera de la red en las URL de datos, un atacante puede ejecutar c\u00f3digo arbitrario, comprometiendo la seguridad del sistema. Verificada en varias plataformas, la vulnerabilidad se mitiga al prohibir las URL de datos en las importaciones de red. La explotaci\u00f3n de este fallo puede violar la seguridad de importaci\u00f3n de la red, lo que representa un riesgo para los desarrolladores y servidores.\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"support@hackerone.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H\",\"baseScore\":6.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.0,\"impactScore\":5.5}]},\"weaknesses\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-94\"}]}],\"references\":[{\"url\":\"http://www.openwall.com/lists/oss-security/2024/07/11/6\",\"source\":\"support@hackerone.com\"},{\"url\":\"http://www.openwall.com/lists/oss-security/2024/07/19/3\",\"source\":\"support@hackerone.com\"},{\"url\":\"https://hackerone.com/reports/2092749\",\"source\":\"support@hackerone.com\"},{\"url\":\"http://www.openwall.com/lists/oss-security/2024/07/11/6\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.openwall.com/lists/oss-security/2024/07/19/3\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://hackerone.com/reports/2092749\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://security.netapp.com/advisory/ntap-20241122-0006/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}", "vulnrichment": { "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://hackerone.com/reports/2092749\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2024/07/11/6\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2024/07/19/3\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20241122-0006/\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-11-22T12:04:47.763Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-22020\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-07-13T03:55:30.015268Z\"}}}], \"affected\": [{\"cpes\": [\"cpe:2.3:a:nodejs:nodejs:*:*:*:*:*:*:*:*\"], \"vendor\": \"nodejs\", \"product\": \"nodejs\", \"versions\": [{\"status\": \"affected\", \"version\": \"21.6.1\"}, {\"status\": \"affected\", \"version\": \"20.11.0\"}, {\"status\": \"affected\", \"version\": \"18.19.0\"}], \"defaultStatus\": \"unknown\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-94\", \"description\": \"CWE-94 Improper Control of Generation of Code (\u0027Code Injection\u0027)\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-07-09T14:15:40.771Z\"}}], \"cna\": {\"metrics\": [{\"cvssV3_0\": {\"version\": \"3.0\", \"baseScore\": 6.5, \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H\"}}], \"affected\": [{\"vendor\": \"NodeJS\", \"product\": \"Node\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.0\", \"lessThan\": \"4.*\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"5.0\", \"lessThan\": \"5.*\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"6.0\", \"lessThan\": \"6.*\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"7.0\", \"lessThan\": \"7.*\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"8.0\", \"lessThan\": \"8.*\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"9.0\", \"lessThan\": \"9.*\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"10.0\", \"lessThan\": \"10.*\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"11.0\", \"lessThan\": \"11.*\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"12.0\", \"lessThan\": \"12.*\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"13.0\", \"lessThan\": \"13.*\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"14.0\", \"lessThan\": \"14.*\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"15.0\", \"lessThan\": \"15.*\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"16.0\", \"lessThan\": \"16.*\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"17.0\", \"lessThan\": \"17.*\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"18.0\", \"lessThan\": \"18.20.4\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"19.0\", \"lessThan\": \"19.*\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"20.0\", \"lessThan\": \"20.15.1\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"21.0\", \"lessThan\": \"21.*\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"22.0\", \"lessThan\": \"22.4.1\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}], \"references\": [{\"url\": \"https://hackerone.com/reports/2092749\"}, {\"url\": \"http://www.openwall.com/lists/oss-security/2024/07/11/6\"}, {\"url\": \"http://www.openwall.com/lists/oss-security/2024/07/19/3\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A security flaw in Node.js allows a bypass of network import restrictions.\\nBy embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security.\\nVerified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports.\\nExploiting this flaw can violate network import security, posing a risk to developers and servers.\"}], \"providerMetadata\": {\"orgId\": \"36234546-b8fa-4601-9d6f-f4e334aa8ea1\", \"shortName\": \"hackerone\", \"dateUpdated\": \"2025-04-30T22:25:20.702Z\"}}}", "cveMetadata": "{\"cveId\": \"CVE-2024-22020\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-04-30T22:25:20.702Z\", \"dateReserved\": \"2024-01-04T01:04:06.574Z\", \"assignerOrgId\": \"36234546-b8fa-4601-9d6f-f4e334aa8ea1\", \"datePublished\": \"2024-07-09T01:07:28.098Z\", \"assignerShortName\": \"hackerone\"}", "dataType": "CVE_RECORD", "dataVersion": "5.1" } } }
CERTFR-2025-AVI-0055
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans Oracle PeopleSoft. Elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneVendor | Product | Description | ||
---|---|---|---|---|
Oracle | PeopleSoft | PeopleSoft Enterprise PeopleTools version 8.60 | ||
Oracle | PeopleSoft | PeopleSoft Enterprise CC Common Application Objects version 9.2 | ||
Oracle | PeopleSoft | PeopleSoft Enterprise PeopleTools version 8.61 | ||
Oracle | PeopleSoft | PeopleSoft Enterprise SCM Purchasing version 9.2 | ||
Oracle | PeopleSoft | PeopleSoft Enterprise FIN Cash Management version 9.2 | ||
Oracle | PeopleSoft | PeopleSoft Enterprise FIN eSettlements version 9.2 |
Title | Publication Time | Tags | |||
---|---|---|---|---|---|
|
{ "$ref": "https://www.cert.ssi.gouv.fr/openapi.json", "affected_systems": [ { "description": "PeopleSoft Enterprise PeopleTools version 8.60", "product": { "name": "PeopleSoft", "vendor": { "name": "Oracle", "scada": false } } }, { "description": "PeopleSoft Enterprise CC Common Application Objects version 9.2", "product": { "name": "PeopleSoft", "vendor": { "name": "Oracle", "scada": false } } }, { "description": "PeopleSoft Enterprise PeopleTools version 8.61", "product": { "name": "PeopleSoft", "vendor": { "name": "Oracle", "scada": false } } }, { "description": "PeopleSoft Enterprise SCM Purchasing version 9.2", "product": { "name": "PeopleSoft", "vendor": { "name": "Oracle", "scada": false } } }, { "description": "PeopleSoft Enterprise FIN Cash Management version 9.2", "product": { "name": "PeopleSoft", "vendor": { "name": "Oracle", "scada": false } } }, { "description": "PeopleSoft Enterprise FIN eSettlements version 9.2", "product": { "name": "PeopleSoft", "vendor": { "name": "Oracle", "scada": false } } } ], "affected_systems_content": null, "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).", "cves": [ { "name": "CVE-2025-21562", "url": "https://www.cve.org/CVERecord?id=CVE-2025-21562" }, { "name": "CVE-2024-36138", "url": "https://www.cve.org/CVERecord?id=CVE-2024-36138" }, { "name": "CVE-2024-22020", "url": "https://www.cve.org/CVERecord?id=CVE-2024-22020" }, { "name": "CVE-2024-37891", "url": "https://www.cve.org/CVERecord?id=CVE-2024-37891" }, { "name": "CVE-2024-28849", "url": "https://www.cve.org/CVERecord?id=CVE-2024-28849" }, { "name": "CVE-2020-22218", "url": "https://www.cve.org/CVERecord?id=CVE-2020-22218" }, { "name": "CVE-2024-6232", "url": "https://www.cve.org/CVERecord?id=CVE-2024-6232" }, { "name": "CVE-2025-21537", "url": "https://www.cve.org/CVERecord?id=CVE-2025-21537" }, { "name": "CVE-2024-27280", "url": "https://www.cve.org/CVERecord?id=CVE-2024-27280" }, { "name": "CVE-2024-29025", "url": "https://www.cve.org/CVERecord?id=CVE-2024-29025" }, { "name": "CVE-2024-4030", "url": "https://www.cve.org/CVERecord?id=CVE-2024-4030" }, { "name": "CVE-2023-48795", "url": "https://www.cve.org/CVERecord?id=CVE-2023-48795" }, { "name": "CVE-2024-22019", "url": "https://www.cve.org/CVERecord?id=CVE-2024-22019" }, { "name": "CVE-2025-21561", "url": "https://www.cve.org/CVERecord?id=CVE-2025-21561" }, { "name": "CVE-2024-5535", "url": "https://www.cve.org/CVERecord?id=CVE-2024-5535" }, { "name": "CVE-2024-37372", "url": "https://www.cve.org/CVERecord?id=CVE-2024-37372" }, { "name": "CVE-2025-21545", "url": "https://www.cve.org/CVERecord?id=CVE-2025-21545" }, { "name": "CVE-2024-35195", "url": "https://www.cve.org/CVERecord?id=CVE-2024-35195" }, { "name": "CVE-2025-21539", "url": "https://www.cve.org/CVERecord?id=CVE-2025-21539" }, { "name": "CVE-2024-27281", "url": "https://www.cve.org/CVERecord?id=CVE-2024-27281" }, { "name": "CVE-2024-7592", "url": "https://www.cve.org/CVERecord?id=CVE-2024-7592" }, { "name": "CVE-2024-22018", "url": "https://www.cve.org/CVERecord?id=CVE-2024-22018" }, { "name": "CVE-2024-6119", "url": "https://www.cve.org/CVERecord?id=CVE-2024-6119" }, { "name": "CVE-2024-0397", "url": "https://www.cve.org/CVERecord?id=CVE-2024-0397" }, { "name": "CVE-2024-4603", "url": "https://www.cve.org/CVERecord?id=CVE-2024-4603" }, { "name": "CVE-2025-21530", "url": "https://www.cve.org/CVERecord?id=CVE-2025-21530" }, { "name": "CVE-2024-27282", "url": "https://www.cve.org/CVERecord?id=CVE-2024-27282" }, { "name": "CVE-2024-4741", "url": "https://www.cve.org/CVERecord?id=CVE-2024-4741" }, { "name": "CVE-2024-4032", "url": "https://www.cve.org/CVERecord?id=CVE-2024-4032" }, { "name": "CVE-2024-2511", "url": "https://www.cve.org/CVERecord?id=CVE-2024-2511" }, { "name": "CVE-2025-21563", "url": "https://www.cve.org/CVERecord?id=CVE-2025-21563" }, { "name": "CVE-2024-36137", "url": "https://www.cve.org/CVERecord?id=CVE-2024-36137" } ], "initial_release_date": "2025-01-22T00:00:00", "last_revision_date": "2025-01-22T00:00:00", "links": [], "reference": "CERTFR-2025-AVI-0055", "revisions": [ { "description": "Version initiale", "revision_date": "2025-01-22T00:00:00.000000" } ], "risks": [ { "description": "D\u00e9ni de service \u00e0 distance" }, { "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es" }, { "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es" } ], "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Oracle PeopleSoft. Elles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.", "title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle PeopleSoft", "vendor_advisories": [ { "published_at": "2025-01-21", "title": "Bulletin de s\u00e9curit\u00e9 Oracle PeopleSoft cpujan2025", "url": "https://www.oracle.com/security-alerts/cpujan2025.html" } ] }
CERTFR-2024-AVI-1103
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Vendor | Product | Description | ||
---|---|---|---|---|
IBM | Cognos Analytics | Cognos Analytics versions 12.0.x antérieures à 12.0.4 | ||
IBM | Sterling | Sterling External Authentication Server versions 6.1.0.x antérieures à 6.1.0.2 ifix 01 | ||
IBM | QRadar SIEM | Security QRadar Log Management AQL Plugin versions antérieures à 1.1.0 | ||
IBM | Sterling | Sterling Secure Proxy versions 6.0.x antérieures à 6.0.3.1 (fixpack) GA | ||
IBM | Cognos Analytics | Cognos Analytics versions 11.2.x antérieures à 11.2.4 FP5 | ||
IBM | Sterling | Sterling Secure Proxy versions 6.1.x antérieures à 6.1.0.1 (fixpack) GA | ||
IBM | Sterling | Sterling Secure Proxy versions 6.2.x antérieures à 6.2.0.0 ifix 01 | ||
IBM | Sterling Connect:Direct | Sterling Connect:Direct Web Services versions 6.3.x antérieures à 6.3.0.11_ifix001 |
Title | Publication Time | Tags | ||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
{ "$ref": "https://www.cert.ssi.gouv.fr/openapi.json", "affected_systems": [ { "description": "Cognos Analytics versions 12.0.x ant\u00e9rieures \u00e0 12.0.4", "product": { "name": "Cognos Analytics", "vendor": { "name": "IBM", "scada": false } } }, { "description": "Sterling External Authentication Server versions 6.1.0.x ant\u00e9rieures \u00e0 6.1.0.2 ifix 01", "product": { "name": "Sterling", "vendor": { "name": "IBM", "scada": false } } }, { "description": " Security QRadar Log Management AQL Plugin versions ant\u00e9rieures \u00e0 1.1.0", "product": { "name": "QRadar SIEM", "vendor": { "name": "IBM", "scada": false } } }, { "description": "Sterling Secure Proxy versions 6.0.x ant\u00e9rieures \u00e0 6.0.3.1 (fixpack) GA", "product": { "name": "Sterling", "vendor": { "name": "IBM", "scada": false } } }, { "description": "Cognos Analytics versions 11.2.x ant\u00e9rieures \u00e0 11.2.4 FP5", "product": { "name": "Cognos Analytics", "vendor": { "name": "IBM", "scada": false } } }, { "description": "Sterling Secure Proxy versions 6.1.x ant\u00e9rieures \u00e0 6.1.0.1 (fixpack) GA", "product": { "name": "Sterling", "vendor": { "name": "IBM", "scada": false } } }, { "description": "Sterling Secure Proxy versions 6.2.x ant\u00e9rieures \u00e0 6.2.0.0 ifix 01", "product": { "name": "Sterling", "vendor": { "name": "IBM", "scada": false } } }, { "description": "Sterling Connect:Direct Web Services versions 6.3.x ant\u00e9rieures \u00e0 6.3.0.11_ifix001", "product": { "name": "Sterling Connect:Direct", "vendor": { "name": "IBM", "scada": false } } } ], "affected_systems_content": "", "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).", "cves": [ { "name": "CVE-2010-1205", "url": "https://www.cve.org/CVERecord?id=CVE-2010-1205" }, { "name": "CVE-2014-1544", "url": "https://www.cve.org/CVERecord?id=CVE-2014-1544" }, { "name": "CVE-2014-1568", "url": "https://www.cve.org/CVERecord?id=CVE-2014-1568" }, { "name": "CVE-2015-7182", "url": "https://www.cve.org/CVERecord?id=CVE-2015-7182" }, { "name": "CVE-2015-7181", "url": "https://www.cve.org/CVERecord?id=CVE-2015-7181" }, { "name": "CVE-2015-7575", "url": "https://www.cve.org/CVERecord?id=CVE-2015-7575" }, { "name": "CVE-2016-1938", "url": "https://www.cve.org/CVERecord?id=CVE-2016-1938" }, { "name": "CVE-2017-5461", "url": "https://www.cve.org/CVERecord?id=CVE-2017-5461" }, { "name": "CVE-2018-12384", "url": "https://www.cve.org/CVERecord?id=CVE-2018-12384" }, { "name": "CVE-2019-7317", "url": "https://www.cve.org/CVERecord?id=CVE-2019-7317" }, { "name": "CVE-2019-11729", "url": "https://www.cve.org/CVERecord?id=CVE-2019-11729" }, { "name": "CVE-2019-11727", "url": "https://www.cve.org/CVERecord?id=CVE-2019-11727" }, { "name": "CVE-2019-11719", "url": "https://www.cve.org/CVERecord?id=CVE-2019-11719" }, { "name": "CVE-2018-12404", "url": "https://www.cve.org/CVERecord?id=CVE-2018-12404" }, { "name": "CVE-2019-11756", "url": "https://www.cve.org/CVERecord?id=CVE-2019-11756" }, { "name": "CVE-2019-11745", "url": "https://www.cve.org/CVERecord?id=CVE-2019-11745" }, { "name": "CVE-2019-8331", "url": "https://www.cve.org/CVERecord?id=CVE-2019-8331" }, { "name": "CVE-2019-11358", "url": "https://www.cve.org/CVERecord?id=CVE-2019-11358" }, { "name": "CVE-2019-17023", "url": "https://www.cve.org/CVERecord?id=CVE-2019-17023" }, { "name": "CVE-2020-11022", "url": "https://www.cve.org/CVERecord?id=CVE-2020-11022" }, { "name": "CVE-2020-11023", "url": "https://www.cve.org/CVERecord?id=CVE-2020-11023" }, { "name": "CVE-2020-12400", "url": "https://www.cve.org/CVERecord?id=CVE-2020-12400" }, { "name": "CVE-2020-12401", "url": "https://www.cve.org/CVERecord?id=CVE-2020-12401" }, { "name": "CVE-2020-6829", "url": "https://www.cve.org/CVERecord?id=CVE-2020-6829" }, { "name": "CVE-2019-17006", "url": "https://www.cve.org/CVERecord?id=CVE-2019-17006" }, { "name": "CVE-2018-18508", "url": "https://www.cve.org/CVERecord?id=CVE-2018-18508" }, { "name": "CVE-2019-17007", "url": "https://www.cve.org/CVERecord?id=CVE-2019-17007" }, { "name": "CVE-2018-20677", "url": "https://www.cve.org/CVERecord?id=CVE-2018-20677" }, { "name": "CVE-2018-14040", "url": "https://www.cve.org/CVERecord?id=CVE-2018-14040" }, { "name": "CVE-2018-14042", "url": "https://www.cve.org/CVERecord?id=CVE-2018-14042" }, { "name": "CVE-2016-10735", "url": "https://www.cve.org/CVERecord?id=CVE-2016-10735" }, { "name": "CVE-2018-20676", "url": "https://www.cve.org/CVERecord?id=CVE-2018-20676" }, { "name": "CVE-2017-12652", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12652" }, { "name": "CVE-2020-25648", "url": "https://www.cve.org/CVERecord?id=CVE-2020-25648" }, { "name": "CVE-2022-23990", "url": "https://www.cve.org/CVERecord?id=CVE-2022-23990" }, { "name": "CVE-2021-45960", "url": "https://www.cve.org/CVERecord?id=CVE-2021-45960" }, { "name": "CVE-2022-22827", "url": "https://www.cve.org/CVERecord?id=CVE-2022-22827" }, { "name": "CVE-2022-22825", "url": "https://www.cve.org/CVERecord?id=CVE-2022-22825" }, { "name": "CVE-2022-22824", "url": "https://www.cve.org/CVERecord?id=CVE-2022-22824" }, { "name": "CVE-2022-22826", "url": "https://www.cve.org/CVERecord?id=CVE-2022-22826" }, { "name": "CVE-2022-23852", "url": "https://www.cve.org/CVERecord?id=CVE-2022-23852" }, { "name": "CVE-2022-22823", "url": "https://www.cve.org/CVERecord?id=CVE-2022-22823" }, { "name": "CVE-2020-12403", "url": "https://www.cve.org/CVERecord?id=CVE-2020-12403" }, { "name": "CVE-2021-38153", "url": "https://www.cve.org/CVERecord?id=CVE-2021-38153" }, { "name": "CVE-2021-43138", "url": "https://www.cve.org/CVERecord?id=CVE-2021-43138" }, { "name": "CVE-2022-34749", "url": "https://www.cve.org/CVERecord?id=CVE-2022-34749" }, { "name": "CVE-2022-40897", "url": "https://www.cve.org/CVERecord?id=CVE-2022-40897" }, { "name": "CVE-2023-0286", "url": "https://www.cve.org/CVERecord?id=CVE-2023-0286" }, { "name": "CVE-2023-0767", "url": "https://www.cve.org/CVERecord?id=CVE-2023-0767" }, { "name": "CVE-2023-23931", "url": "https://www.cve.org/CVERecord?id=CVE-2023-23931" }, { "name": "CVE-2023-2650", "url": "https://www.cve.org/CVERecord?id=CVE-2023-2650" }, { "name": "CVE-2023-31130", "url": "https://www.cve.org/CVERecord?id=CVE-2023-31130" }, { "name": "CVE-2023-32067", "url": "https://www.cve.org/CVERecord?id=CVE-2023-32067" }, { "name": "CVE-2023-25194", "url": "https://www.cve.org/CVERecord?id=CVE-2023-25194" }, { "name": "CVE-2023-3446", "url": "https://www.cve.org/CVERecord?id=CVE-2023-3446" }, { "name": "CVE-2023-32681", "url": "https://www.cve.org/CVERecord?id=CVE-2023-32681" }, { "name": "CVE-2023-38325", "url": "https://www.cve.org/CVERecord?id=CVE-2023-38325" }, { "name": "CVE-2023-4807", "url": "https://www.cve.org/CVERecord?id=CVE-2023-4807" }, { "name": "CVE-2023-30774", "url": "https://www.cve.org/CVERecord?id=CVE-2023-30774" }, { "name": "CVE-2023-5678", "url": "https://www.cve.org/CVERecord?id=CVE-2023-5678" }, { "name": "CVE-2023-40217", "url": "https://www.cve.org/CVERecord?id=CVE-2023-40217" }, { "name": "CVE-2023-4813", "url": "https://www.cve.org/CVERecord?id=CVE-2023-4813" }, { "name": "CVE-2023-4806", "url": "https://www.cve.org/CVERecord?id=CVE-2023-4806" }, { "name": "CVE-2020-19189", "url": "https://www.cve.org/CVERecord?id=CVE-2020-19189" }, { "name": "CVE-2023-5156", "url": "https://www.cve.org/CVERecord?id=CVE-2023-5156" }, { "name": "CVE-2021-46848", "url": "https://www.cve.org/CVERecord?id=CVE-2021-46848" }, { "name": "CVE-2022-21699", "url": "https://www.cve.org/CVERecord?id=CVE-2022-21699" }, { "name": "CVE-2023-6237", "url": "https://www.cve.org/CVERecord?id=CVE-2023-6237" }, { "name": "CVE-2023-30086", "url": "https://www.cve.org/CVERecord?id=CVE-2023-30086" }, { "name": "CVE-2023-26965", "url": "https://www.cve.org/CVERecord?id=CVE-2023-26965" }, { "name": "CVE-2023-3316", "url": "https://www.cve.org/CVERecord?id=CVE-2023-3316" }, { "name": "CVE-2023-6129", "url": "https://www.cve.org/CVERecord?id=CVE-2023-6129" }, { "name": "CVE-2022-48554", "url": "https://www.cve.org/CVERecord?id=CVE-2022-48554" }, { "name": "CVE-2020-23064", "url": "https://www.cve.org/CVERecord?id=CVE-2020-23064" }, { "name": "CVE-2023-5388", "url": "https://www.cve.org/CVERecord?id=CVE-2023-5388" }, { "name": "CVE-2023-49083", "url": "https://www.cve.org/CVERecord?id=CVE-2023-49083" }, { "name": "CVE-2024-25710", "url": "https://www.cve.org/CVERecord?id=CVE-2024-25710" }, { "name": "CVE-2024-26308", "url": "https://www.cve.org/CVERecord?id=CVE-2024-26308" }, { "name": "CVE-2024-22195", "url": "https://www.cve.org/CVERecord?id=CVE-2024-22195" }, { "name": "CVE-2023-50782", "url": "https://www.cve.org/CVERecord?id=CVE-2023-50782" }, { "name": "CVE-2023-52426", "url": "https://www.cve.org/CVERecord?id=CVE-2023-52426" }, { "name": "CVE-2024-21011", "url": "https://www.cve.org/CVERecord?id=CVE-2024-21011" }, { "name": "CVE-2024-21094", "url": "https://www.cve.org/CVERecord?id=CVE-2024-21094" }, { "name": "CVE-2024-21085", "url": "https://www.cve.org/CVERecord?id=CVE-2024-21085" }, { "name": "CVE-2024-29133", "url": "https://www.cve.org/CVERecord?id=CVE-2024-29133" }, { "name": "CVE-2024-29131", "url": "https://www.cve.org/CVERecord?id=CVE-2024-29131" }, { "name": "CVE-2024-28849", "url": "https://www.cve.org/CVERecord?id=CVE-2024-28849" }, { "name": "CVE-2024-22201", "url": "https://www.cve.org/CVERecord?id=CVE-2024-22201" }, { "name": "CVE-2024-25629", "url": "https://www.cve.org/CVERecord?id=CVE-2024-25629" }, { "name": "CVE-2023-52425", "url": "https://www.cve.org/CVERecord?id=CVE-2023-52425" }, { "name": "CVE-2024-4367", "url": "https://www.cve.org/CVERecord?id=CVE-2024-4367" }, { "name": "CVE-2024-27983", "url": "https://www.cve.org/CVERecord?id=CVE-2024-27983" }, { "name": "CVE-2023-51074", "url": "https://www.cve.org/CVERecord?id=CVE-2023-51074" }, { "name": "CVE-2024-23944", "url": "https://www.cve.org/CVERecord?id=CVE-2024-23944" }, { "name": "CVE-2023-38264", "url": "https://www.cve.org/CVERecord?id=CVE-2023-38264" }, { "name": "CVE-2024-29025", "url": "https://www.cve.org/CVERecord?id=CVE-2024-29025" }, { "name": "CVE-2024-34102", "url": "https://www.cve.org/CVERecord?id=CVE-2024-34102" }, { "name": "CVE-2024-28757", "url": "https://www.cve.org/CVERecord?id=CVE-2024-28757" }, { "name": "CVE-2024-29041", "url": "https://www.cve.org/CVERecord?id=CVE-2024-29041" }, { "name": "CVE-2024-29857", "url": "https://www.cve.org/CVERecord?id=CVE-2024-29857" }, { "name": "CVE-2024-30171", "url": "https://www.cve.org/CVERecord?id=CVE-2024-30171" }, { "name": "CVE-2024-30172", "url": "https://www.cve.org/CVERecord?id=CVE-2024-30172" }, { "name": "CVE-2021-36770", "url": "https://www.cve.org/CVERecord?id=CVE-2021-36770" }, { "name": "CVE-2024-2398", "url": "https://www.cve.org/CVERecord?id=CVE-2024-2398" }, { "name": "CVE-2024-28176", "url": "https://www.cve.org/CVERecord?id=CVE-2024-28176" }, { "name": "CVE-2024-28863", "url": "https://www.cve.org/CVERecord?id=CVE-2024-28863" }, { "name": "CVE-2024-4067", "url": "https://www.cve.org/CVERecord?id=CVE-2024-4067" }, { "name": "CVE-2024-4068", "url": "https://www.cve.org/CVERecord?id=CVE-2024-4068" }, { "name": "CVE-2023-50495", "url": "https://www.cve.org/CVERecord?id=CVE-2023-50495" }, { "name": "CVE-2024-27982", "url": "https://www.cve.org/CVERecord?id=CVE-2024-27982" }, { "name": "CVE-2023-52356", "url": "https://www.cve.org/CVERecord?id=CVE-2023-52356" }, { "name": "CVE-2023-6228", "url": "https://www.cve.org/CVERecord?id=CVE-2023-6228" }, { "name": "CVE-2023-6277", "url": "https://www.cve.org/CVERecord?id=CVE-2023-6277" }, { "name": "CVE-2024-6345", "url": "https://www.cve.org/CVERecord?id=CVE-2024-6345" }, { "name": "CVE-2024-37890", "url": "https://www.cve.org/CVERecord?id=CVE-2024-37890" }, { "name": "CVE-2024-39008", "url": "https://www.cve.org/CVERecord?id=CVE-2024-39008" }, { "name": "CVE-2023-3164", "url": "https://www.cve.org/CVERecord?id=CVE-2023-3164" }, { "name": "CVE-2024-22018", "url": "https://www.cve.org/CVERecord?id=CVE-2024-22018" }, { "name": "CVE-2024-22020", "url": "https://www.cve.org/CVERecord?id=CVE-2024-22020" }, { "name": "CVE-2024-27980", "url": "https://www.cve.org/CVERecord?id=CVE-2024-27980" }, { "name": "CVE-2024-36137", "url": "https://www.cve.org/CVERecord?id=CVE-2024-36137" }, { "name": "CVE-2024-36138", "url": "https://www.cve.org/CVERecord?id=CVE-2024-36138" }, { "name": "CVE-2024-37372", "url": "https://www.cve.org/CVERecord?id=CVE-2024-37372" }, { "name": "CVE-2024-39338", "url": "https://www.cve.org/CVERecord?id=CVE-2024-39338" }, { "name": "CVE-2024-7264", "url": "https://www.cve.org/CVERecord?id=CVE-2024-7264" }, { "name": "CVE-2024-22871", "url": "https://www.cve.org/CVERecord?id=CVE-2024-22871" }, { "name": "CVE-2018-15209", "url": "https://www.cve.org/CVERecord?id=CVE-2018-15209" }, { "name": "CVE-2023-37536", "url": "https://www.cve.org/CVERecord?id=CVE-2023-37536" }, { "name": "CVE-2024-45296", "url": "https://www.cve.org/CVERecord?id=CVE-2024-45296" }, { "name": "CVE-2024-34447", "url": "https://www.cve.org/CVERecord?id=CVE-2024-34447" }, { "name": "CVE-2024-43796", "url": "https://www.cve.org/CVERecord?id=CVE-2024-43796" }, { "name": "CVE-2024-45590", "url": "https://www.cve.org/CVERecord?id=CVE-2024-45590" }, { "name": "CVE-2018-14041", "url": "https://www.cve.org/CVERecord?id=CVE-2018-14041" }, { "name": "CVE-2024-36114", "url": "https://www.cve.org/CVERecord?id=CVE-2024-36114" }, { "name": "CVE-2024-25638", "url": "https://www.cve.org/CVERecord?id=CVE-2024-25638" }, { "name": "CVE-2024-51504", "url": "https://www.cve.org/CVERecord?id=CVE-2024-51504" }, { "name": "CVE-2024-7006", "url": "https://www.cve.org/CVERecord?id=CVE-2024-7006" }, { "name": "CVE-2013-2099", "url": "https://www.cve.org/CVERecord?id=CVE-2013-2099" }, { "name": "CVE-2014-1569", "url": "https://www.cve.org/CVERecord?id=CVE-2014-1569" }, { "name": "CVE-2017-11613", "url": "https://www.cve.org/CVERecord?id=CVE-2017-11613" }, { "name": "CVE-2017-11695", "url": "https://www.cve.org/CVERecord?id=CVE-2017-11695" }, { "name": "CVE-2017-11696", "url": "https://www.cve.org/CVERecord?id=CVE-2017-11696" }, { "name": "CVE-2017-11697", "url": "https://www.cve.org/CVERecord?id=CVE-2017-11697" }, { "name": "CVE-2017-11698", "url": "https://www.cve.org/CVERecord?id=CVE-2017-11698" }, { "name": "CVE-2017-12627", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12627" }, { "name": "CVE-2017-18013", "url": "https://www.cve.org/CVERecord?id=CVE-2017-18013" }, { "name": "CVE-2017-18869", "url": "https://www.cve.org/CVERecord?id=CVE-2017-18869" }, { "name": "CVE-2017-9937", "url": "https://www.cve.org/CVERecord?id=CVE-2017-9937" }, { "name": "CVE-2018-16335", "url": "https://www.cve.org/CVERecord?id=CVE-2018-16335" }, { "name": "CVE-2018-17000", "url": "https://www.cve.org/CVERecord?id=CVE-2018-17000" }, { "name": "CVE-2018-17100", "url": "https://www.cve.org/CVERecord?id=CVE-2018-17100" }, { "name": "CVE-2018-17101", "url": "https://www.cve.org/CVERecord?id=CVE-2018-17101" }, { "name": "CVE-2018-19210", "url": "https://www.cve.org/CVERecord?id=CVE-2018-19210" }, { "name": "CVE-2018-5784", "url": "https://www.cve.org/CVERecord?id=CVE-2018-5784" }, { "name": "CVE-2018-7456", "url": "https://www.cve.org/CVERecord?id=CVE-2018-7456" }, { "name": "CVE-2019-10255", "url": "https://www.cve.org/CVERecord?id=CVE-2019-10255" }, { "name": "CVE-2019-14973", "url": "https://www.cve.org/CVERecord?id=CVE-2019-14973" }, { "name": "CVE-2019-17546", "url": "https://www.cve.org/CVERecord?id=CVE-2019-17546" }, { "name": "CVE-2019-6128", "url": "https://www.cve.org/CVERecord?id=CVE-2019-6128" }, { "name": "CVE-2020-15110", "url": "https://www.cve.org/CVERecord?id=CVE-2020-15110" }, { "name": "CVE-2020-18768", "url": "https://www.cve.org/CVERecord?id=CVE-2020-18768" }, { "name": "CVE-2020-19131", "url": "https://www.cve.org/CVERecord?id=CVE-2020-19131" }, { "name": "CVE-2020-19144", "url": "https://www.cve.org/CVERecord?id=CVE-2020-19144" }, { "name": "CVE-2020-26261", "url": "https://www.cve.org/CVERecord?id=CVE-2020-26261" }, { "name": "CVE-2020-35521", "url": "https://www.cve.org/CVERecord?id=CVE-2020-35521" }, { "name": "CVE-2020-35522", "url": "https://www.cve.org/CVERecord?id=CVE-2020-35522" }, { "name": "CVE-2020-35523", "url": "https://www.cve.org/CVERecord?id=CVE-2020-35523" }, { "name": "CVE-2020-35524", "url": "https://www.cve.org/CVERecord?id=CVE-2020-35524" }, { "name": "CVE-2020-36191", "url": "https://www.cve.org/CVERecord?id=CVE-2020-36191" }, { "name": "CVE-2021-32862", "url": "https://www.cve.org/CVERecord?id=CVE-2021-32862" }, { "name": "CVE-2022-0561", "url": "https://www.cve.org/CVERecord?id=CVE-2022-0561" }, { "name": "CVE-2022-0562", "url": "https://www.cve.org/CVERecord?id=CVE-2022-0562" }, { "name": "CVE-2022-0891", "url": "https://www.cve.org/CVERecord?id=CVE-2022-0891" }, { "name": "CVE-2022-0908", "url": "https://www.cve.org/CVERecord?id=CVE-2022-0908" }, { "name": "CVE-2022-2056", "url": "https://www.cve.org/CVERecord?id=CVE-2022-2056" }, { "name": "CVE-2022-2057", "url": "https://www.cve.org/CVERecord?id=CVE-2022-2057" }, { "name": "CVE-2022-2058", "url": "https://www.cve.org/CVERecord?id=CVE-2022-2058" }, { "name": "CVE-2022-22844", "url": "https://www.cve.org/CVERecord?id=CVE-2022-22844" }, { "name": "CVE-2022-2867", "url": "https://www.cve.org/CVERecord?id=CVE-2022-2867" }, { "name": "CVE-2022-2868", "url": "https://www.cve.org/CVERecord?id=CVE-2022-2868" }, { "name": "CVE-2022-2869", "url": "https://www.cve.org/CVERecord?id=CVE-2022-2869" }, { "name": "CVE-2022-34266", "url": "https://www.cve.org/CVERecord?id=CVE-2022-34266" }, { "name": "CVE-2022-34526", "url": "https://www.cve.org/CVERecord?id=CVE-2022-34526" }, { "name": "CVE-2022-3479", "url": "https://www.cve.org/CVERecord?id=CVE-2022-3479" }, { "name": "CVE-2022-3570", "url": "https://www.cve.org/CVERecord?id=CVE-2022-3570" }, { "name": "CVE-2022-3597", "url": "https://www.cve.org/CVERecord?id=CVE-2022-3597" }, { "name": "CVE-2022-3598", "url": "https://www.cve.org/CVERecord?id=CVE-2022-3598" }, { "name": "CVE-2022-3599", "url": "https://www.cve.org/CVERecord?id=CVE-2022-3599" }, { "name": "CVE-2022-3626", "url": "https://www.cve.org/CVERecord?id=CVE-2022-3626" }, { "name": "CVE-2022-3627", "url": "https://www.cve.org/CVERecord?id=CVE-2022-3627" }, { "name": "CVE-2022-40090", "url": "https://www.cve.org/CVERecord?id=CVE-2022-40090" }, { "name": "CVE-2022-4645", "url": "https://www.cve.org/CVERecord?id=CVE-2022-4645" }, { "name": "CVE-2023-0795", "url": "https://www.cve.org/CVERecord?id=CVE-2023-0795" }, { "name": "CVE-2023-0796", "url": "https://www.cve.org/CVERecord?id=CVE-2023-0796" }, { "name": "CVE-2023-0797", "url": "https://www.cve.org/CVERecord?id=CVE-2023-0797" }, { "name": "CVE-2023-0798", "url": "https://www.cve.org/CVERecord?id=CVE-2023-0798" }, { "name": "CVE-2023-0799", "url": "https://www.cve.org/CVERecord?id=CVE-2023-0799" }, { "name": "CVE-2023-0800", "url": "https://www.cve.org/CVERecord?id=CVE-2023-0800" }, { "name": "CVE-2023-0801", "url": "https://www.cve.org/CVERecord?id=CVE-2023-0801" }, { "name": "CVE-2023-0802", "url": "https://www.cve.org/CVERecord?id=CVE-2023-0802" }, { "name": "CVE-2023-0803", "url": "https://www.cve.org/CVERecord?id=CVE-2023-0803" }, { "name": "CVE-2023-0804", "url": "https://www.cve.org/CVERecord?id=CVE-2023-0804" }, { "name": "CVE-2023-1916", "url": "https://www.cve.org/CVERecord?id=CVE-2023-1916" }, { "name": "CVE-2023-24816", "url": "https://www.cve.org/CVERecord?id=CVE-2023-24816" }, { "name": "CVE-2023-25434", "url": "https://www.cve.org/CVERecord?id=CVE-2023-25434" }, { "name": "CVE-2023-25435", "url": "https://www.cve.org/CVERecord?id=CVE-2023-25435" }, { "name": "CVE-2023-2731", "url": "https://www.cve.org/CVERecord?id=CVE-2023-2731" }, { "name": "CVE-2023-2908", "url": "https://www.cve.org/CVERecord?id=CVE-2023-2908" }, { "name": "CVE-2023-30775", "url": "https://www.cve.org/CVERecord?id=CVE-2023-30775" }, { "name": "CVE-2023-3576", "url": "https://www.cve.org/CVERecord?id=CVE-2023-3576" }, { "name": "CVE-2023-38288", "url": "https://www.cve.org/CVERecord?id=CVE-2023-38288" }, { "name": "CVE-2023-38289", "url": "https://www.cve.org/CVERecord?id=CVE-2023-38289" }, { "name": "CVE-2023-40745", "url": "https://www.cve.org/CVERecord?id=CVE-2023-40745" }, { "name": "CVE-2023-41175", "url": "https://www.cve.org/CVERecord?id=CVE-2023-41175" }, { "name": "CVE-2023-41334", "url": "https://www.cve.org/CVERecord?id=CVE-2023-41334" }, { "name": "CVE-2023-4421", "url": "https://www.cve.org/CVERecord?id=CVE-2023-4421" }, { "name": "CVE-2023-4759", "url": "https://www.cve.org/CVERecord?id=CVE-2023-4759" }, { "name": "CVE-2023-50291", "url": "https://www.cve.org/CVERecord?id=CVE-2023-50291" }, { "name": "CVE-2023-50292", "url": "https://www.cve.org/CVERecord?id=CVE-2023-50292" }, { "name": "CVE-2023-50298", "url": "https://www.cve.org/CVERecord?id=CVE-2023-50298" }, { "name": "CVE-2023-50386", "url": "https://www.cve.org/CVERecord?id=CVE-2023-50386" }, { "name": "CVE-2023-50447", "url": "https://www.cve.org/CVERecord?id=CVE-2023-50447" }, { "name": "CVE-2024-25016", "url": "https://www.cve.org/CVERecord?id=CVE-2024-25016" }, { "name": "CVE-2024-29896", "url": "https://www.cve.org/CVERecord?id=CVE-2024-29896" }, { "name": "CVE-2024-33883", "url": "https://www.cve.org/CVERecord?id=CVE-2024-33883" }, { "name": "CVE-2024-38337", "url": "https://www.cve.org/CVERecord?id=CVE-2024-38337" }, { "name": "CVE-2024-41752", "url": "https://www.cve.org/CVERecord?id=CVE-2024-41752" }, { "name": "CVE-2024-45082", "url": "https://www.cve.org/CVERecord?id=CVE-2024-45082" } ], "initial_release_date": "2024-12-20T00:00:00", "last_revision_date": "2024-12-20T00:00:00", "links": [], "reference": "CERTFR-2024-AVI-1103", "revisions": [ { "description": "Version initiale", "revision_date": "2024-12-20T00:00:00.000000" } ], "risks": [ { "description": "Ex\u00e9cution de code arbitraire \u00e0 distance" }, { "description": "\u00c9l\u00e9vation de privil\u00e8ges" }, { "description": "D\u00e9ni de service \u00e0 distance" }, { "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es" }, { "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es" }, { "description": "Contournement de la politique de s\u00e9curit\u00e9" }, { "description": "Injection de requ\u00eates ill\u00e9gitimes par rebond (CSRF)" }, { "description": "Injection de code indirecte \u00e0 distance (XSS)" }, { "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur" } ], "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits IBM. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.", "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits IBM", "vendor_advisories": [ { "published_at": "2024-12-17", "title": "Bulletin de s\u00e9curit\u00e9 IBM 7177142", "url": "https://www.ibm.com/support/pages/node/7177142" }, { "published_at": "2024-12-17", "title": "Bulletin de s\u00e9curit\u00e9 IBM 7177223", "url": "https://www.ibm.com/support/pages/node/7177223" }, { "published_at": "2024-12-16", "title": "Bulletin de s\u00e9curit\u00e9 IBM 7179044", "url": "https://www.ibm.com/support/pages/node/7179044" }, { "published_at": "2024-12-17", "title": "Bulletin de s\u00e9curit\u00e9 IBM 7179156", "url": "https://www.ibm.com/support/pages/node/7179156" }, { "published_at": "2024-12-17", "title": "Bulletin de s\u00e9curit\u00e9 IBM 7179166", "url": "https://www.ibm.com/support/pages/node/7179166" }, { "published_at": "2024-12-13", "title": "Bulletin de s\u00e9curit\u00e9 IBM 7178835", "url": "https://www.ibm.com/support/pages/node/7178835" } ] }
CERTFR-2024-AVI-0883
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans Oracle Java SE. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Title | Publication Time | Tags | |||
---|---|---|---|---|---|
|
{ "$ref": "https://www.cert.ssi.gouv.fr/openapi.json", "affected_systems": [ { "description": "Oracle GraalVM Enterprise Edition versions 20.3.15 et 21.3.11 ", "product": { "name": "Java SE", "vendor": { "name": "Oracle", "scada": false } } }, { "description": "Oracle GraalVM for JDK versions 17.0.12, 21.0.4 et 23", "product": { "name": "Java SE", "vendor": { "name": "Oracle", "scada": false } } }, { "description": "Oracle Java SE versions 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4 et 23", "product": { "name": "Java SE", "vendor": { "name": "Oracle", "scada": false } } } ], "affected_systems_content": "", "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).", "cves": [ { "name": "CVE-2024-36138", "url": "https://www.cve.org/CVERecord?id=CVE-2024-36138" }, { "name": "CVE-2024-21235", "url": "https://www.cve.org/CVERecord?id=CVE-2024-21235" }, { "name": "CVE-2024-22020", "url": "https://www.cve.org/CVERecord?id=CVE-2024-22020" }, { "name": "CVE-2024-21211", "url": "https://www.cve.org/CVERecord?id=CVE-2024-21211" }, { "name": "CVE-2023-42956", "url": "https://www.cve.org/CVERecord?id=CVE-2023-42956" }, { "name": "CVE-2024-23280", "url": "https://www.cve.org/CVERecord?id=CVE-2024-23280" }, { "name": "CVE-2024-23252", "url": "https://www.cve.org/CVERecord?id=CVE-2024-23252" }, { "name": "CVE-2024-27834", "url": "https://www.cve.org/CVERecord?id=CVE-2024-27834" }, { "name": "CVE-2024-23254", "url": "https://www.cve.org/CVERecord?id=CVE-2024-23254" }, { "name": "CVE-2024-25062", "url": "https://www.cve.org/CVERecord?id=CVE-2024-25062" }, { "name": "CVE-2023-42843", "url": "https://www.cve.org/CVERecord?id=CVE-2023-42843" }, { "name": "CVE-2023-42950", "url": "https://www.cve.org/CVERecord?id=CVE-2023-42950" }, { "name": "CVE-2024-23263", "url": "https://www.cve.org/CVERecord?id=CVE-2024-23263" }, { "name": "CVE-2024-23284", "url": "https://www.cve.org/CVERecord?id=CVE-2024-23284" }, { "name": "CVE-2024-21210", "url": "https://www.cve.org/CVERecord?id=CVE-2024-21210" }, { "name": "CVE-2024-21217", "url": "https://www.cve.org/CVERecord?id=CVE-2024-21217" }, { "name": "CVE-2024-21208", "url": "https://www.cve.org/CVERecord?id=CVE-2024-21208" } ], "initial_release_date": "2024-10-16T00:00:00", "last_revision_date": "2024-10-16T00:00:00", "links": [], "reference": "CERTFR-2024-AVI-0883", "revisions": [ { "description": "Version initiale", "revision_date": "2024-10-16T00:00:00.000000" } ], "risks": [ { "description": "D\u00e9ni de service \u00e0 distance" }, { "description": "Ex\u00e9cution de code arbitraire \u00e0 distance" }, { "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es" }, { "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es" } ], "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Oracle Java SE. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.", "title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle Java SE", "vendor_advisories": [ { "published_at": "2024-10-15", "title": "Bulletin de s\u00e9curit\u00e9 Oracle Java SE cpuoct2024", "url": "https://www.oracle.com/security-alerts/cpuoct2024.html" } ] }
CERTFR-2025-AVI-0021
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Vendor | Product | Description | ||
---|---|---|---|---|
IBM | Security QRadar EDR | Security QRadar EDR versions antérieures à 3.12.14 | ||
IBM | Spectrum | Spectrum Control versions 5.4.x antérieures à 5.4.13 | ||
IBM | Spectrum | Spectrum Protect Plus versions 10.1.x antérieures à 10.1.6.4 pour Linux | ||
IBM | QRadar SIEM | QRadar SIEM versions 7.5.x sans les derniers correctifs de sécurité | ||
IBM | QRadar | QRadar Analyst Workflow versions antérieures à 2.34.0 | ||
IBM | Db2 | Db2 Big SQL versions antérieures à 7.4.2 pour Cloud Pak for Data |
Title | Publication Time | Tags | ||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
{ "$ref": "https://www.cert.ssi.gouv.fr/openapi.json", "affected_systems": [ { "description": "Security QRadar EDR versions ant\u00e9rieures \u00e0 3.12.14", "product": { "name": "Security QRadar EDR", "vendor": { "name": "IBM", "scada": false } } }, { "description": "Spectrum Control versions 5.4.x ant\u00e9rieures \u00e0 5.4.13 ", "product": { "name": "Spectrum", "vendor": { "name": "IBM", "scada": false } } }, { "description": "Spectrum Protect Plus versions 10.1.x ant\u00e9rieures \u00e0 10.1.6.4 pour Linux", "product": { "name": "Spectrum", "vendor": { "name": "IBM", "scada": false } } }, { "description": "QRadar SIEM versions 7.5.x sans les derniers correctifs de s\u00e9curit\u00e9 ", "product": { "name": "QRadar SIEM", "vendor": { "name": "IBM", "scada": false } } }, { "description": "QRadar Analyst Workflow versions ant\u00e9rieures \u00e0 2.34.0", "product": { "name": "QRadar", "vendor": { "name": "IBM", "scada": false } } }, { "description": "Db2 Big SQL versions ant\u00e9rieures \u00e0 7.4.2 pour Cloud Pak for Data", "product": { "name": "Db2", "vendor": { "name": "IBM", "scada": false } } } ], "affected_systems_content": "", "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).", "cves": [ { "name": "CVE-2024-24790", "url": "https://www.cve.org/CVERecord?id=CVE-2024-24790" }, { "name": "CVE-2023-52471", "url": "https://www.cve.org/CVERecord?id=CVE-2023-52471" }, { "name": "CVE-2024-36889", "url": "https://www.cve.org/CVERecord?id=CVE-2024-36889" }, { "name": "CVE-2015-2156", "url": "https://www.cve.org/CVERecord?id=CVE-2015-2156" }, { "name": "CVE-2023-43642", "url": "https://www.cve.org/CVERecord?id=CVE-2023-43642" }, { "name": "CVE-2024-42246", "url": "https://www.cve.org/CVERecord?id=CVE-2024-42246" }, { "name": "CVE-2024-22020", "url": "https://www.cve.org/CVERecord?id=CVE-2024-22020" }, { "name": "CVE-2024-26614", "url": "https://www.cve.org/CVERecord?id=CVE-2024-26614" }, { "name": "CVE-2022-25869", "url": "https://www.cve.org/CVERecord?id=CVE-2022-25869" }, { "name": "CVE-2024-9355", "url": "https://www.cve.org/CVERecord?id=CVE-2024-9355" }, { "name": "CVE-2023-26116", "url": "https://www.cve.org/CVERecord?id=CVE-2023-26116" }, { "name": "CVE-2024-26595", "url": "https://www.cve.org/CVERecord?id=CVE-2024-26595" }, { "name": "CVE-2024-55565", "url": "https://www.cve.org/CVERecord?id=CVE-2024-55565" }, { "name": "CVE-2024-26586", "url": "https://www.cve.org/CVERecord?id=CVE-2024-26586" }, { "name": "CVE-2024-26638", "url": "https://www.cve.org/CVERecord?id=CVE-2024-26638" }, { "name": "CVE-2024-47831", "url": "https://www.cve.org/CVERecord?id=CVE-2024-47831" }, { "name": "CVE-2020-7238", "url": "https://www.cve.org/CVERecord?id=CVE-2020-7238" }, { "name": "CVE-2021-46939", "url": "https://www.cve.org/CVERecord?id=CVE-2021-46939" }, { "name": "CVE-2024-43799", "url": "https://www.cve.org/CVERecord?id=CVE-2024-43799" }, { "name": "CVE-2024-49766", "url": "https://www.cve.org/CVERecord?id=CVE-2024-49766" }, { "name": "CVE-2024-36886", "url": "https://www.cve.org/CVERecord?id=CVE-2024-36886" }, { "name": "CVE-2021-32036", "url": "https://www.cve.org/CVERecord?id=CVE-2021-32036" }, { "name": "CVE-2024-26802", "url": "https://www.cve.org/CVERecord?id=CVE-2024-26802" }, { "name": "CVE-2024-36883", "url": "https://www.cve.org/CVERecord?id=CVE-2024-36883" }, { "name": "CVE-2024-26665", "url": "https://www.cve.org/CVERecord?id=CVE-2024-26665" }, { "name": "CVE-2024-40960", "url": "https://www.cve.org/CVERecord?id=CVE-2024-40960" }, { "name": "CVE-2024-40997", "url": "https://www.cve.org/CVERecord?id=CVE-2024-40997" }, { "name": "CVE-2023-44270", "url": "https://www.cve.org/CVERecord?id=CVE-2023-44270" }, { "name": "CVE-2019-20444", "url": "https://www.cve.org/CVERecord?id=CVE-2019-20444" }, { "name": "CVE-2023-34454", "url": "https://www.cve.org/CVERecord?id=CVE-2023-34454" }, { "name": "CVE-2024-26645", "url": "https://www.cve.org/CVERecord?id=CVE-2024-26645" }, { "name": "CVE-2024-42240", "url": "https://www.cve.org/CVERecord?id=CVE-2024-42240" }, { "name": "CVE-2024-40972", "url": "https://www.cve.org/CVERecord?id=CVE-2024-40972" }, { "name": "CVE-2024-29025", "url": "https://www.cve.org/CVERecord?id=CVE-2024-29025" }, { "name": "CVE-2024-40959", "url": "https://www.cve.org/CVERecord?id=CVE-2024-40959" }, { "name": "CVE-2023-34453", "url": "https://www.cve.org/CVERecord?id=CVE-2023-34453" }, { "name": "CVE-2023-5072", "url": "https://www.cve.org/CVERecord?id=CVE-2023-5072" }, { "name": "CVE-2024-45590", "url": "https://www.cve.org/CVERecord?id=CVE-2024-45590" }, { "name": "CVE-2019-10202", "url": "https://www.cve.org/CVERecord?id=CVE-2019-10202" }, { "name": "CVE-2024-43796", "url": "https://www.cve.org/CVERecord?id=CVE-2024-43796" }, { "name": "CVE-2021-32040", "url": "https://www.cve.org/CVERecord?id=CVE-2021-32040" }, { "name": "CVE-2024-34158", "url": "https://www.cve.org/CVERecord?id=CVE-2024-34158" }, { "name": "CVE-2024-40974", "url": "https://www.cve.org/CVERecord?id=CVE-2024-40974" }, { "name": "CVE-2024-4067", "url": "https://www.cve.org/CVERecord?id=CVE-2024-4067" }, { "name": "CVE-2024-42124", "url": "https://www.cve.org/CVERecord?id=CVE-2024-42124" }, { "name": "CVE-2023-26117", "url": "https://www.cve.org/CVERecord?id=CVE-2023-26117" }, { "name": "CVE-2022-3786", "url": "https://www.cve.org/CVERecord?id=CVE-2022-3786" }, { "name": "CVE-2023-52486", "url": "https://www.cve.org/CVERecord?id=CVE-2023-52486" }, { "name": "CVE-2014-0193", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0193" }, { "name": "CVE-2022-21680", "url": "https://www.cve.org/CVERecord?id=CVE-2022-21680" }, { "name": "CVE-2024-39502", "url": "https://www.cve.org/CVERecord?id=CVE-2024-39502" }, { "name": "CVE-2024-36005", "url": "https://www.cve.org/CVERecord?id=CVE-2024-36005" }, { "name": "CVE-2024-26929", "url": "https://www.cve.org/CVERecord?id=CVE-2024-26929" }, { "name": "CVE-2019-14863", "url": "https://www.cve.org/CVERecord?id=CVE-2019-14863" }, { "name": "CVE-2023-52683", "url": "https://www.cve.org/CVERecord?id=CVE-2023-52683" }, { "name": "CVE-2024-42131", "url": "https://www.cve.org/CVERecord?id=CVE-2024-42131" }, { "name": "CVE-2024-35944", "url": "https://www.cve.org/CVERecord?id=CVE-2024-35944" }, { "name": "CVE-2024-21538", "url": "https://www.cve.org/CVERecord?id=CVE-2024-21538" }, { "name": "CVE-2023-52469", "url": "https://www.cve.org/CVERecord?id=CVE-2023-52469" }, { "name": "CVE-2024-35809", "url": "https://www.cve.org/CVERecord?id=CVE-2024-35809" }, { "name": "CVE-2024-47764", "url": "https://www.cve.org/CVERecord?id=CVE-2024-47764" }, { "name": "CVE-2023-52809", "url": "https://www.cve.org/CVERecord?id=CVE-2023-52809" }, { "name": "CVE-2023-52451", "url": "https://www.cve.org/CVERecord?id=CVE-2023-52451" }, { "name": "CVE-2024-39472", "url": "https://www.cve.org/CVERecord?id=CVE-2024-39472" }, { "name": "CVE-2023-34455", "url": "https://www.cve.org/CVERecord?id=CVE-2023-34455" }, { "name": "CVE-2024-45296", "url": "https://www.cve.org/CVERecord?id=CVE-2024-45296" }, { "name": "CVE-2021-21295", "url": "https://www.cve.org/CVERecord?id=CVE-2021-21295" }, { "name": "CVE-2024-26733", "url": "https://www.cve.org/CVERecord?id=CVE-2024-26733" }, { "name": "CVE-2024-7254", "url": "https://www.cve.org/CVERecord?id=CVE-2024-7254" }, { "name": "CVE-2024-40998", "url": "https://www.cve.org/CVERecord?id=CVE-2024-40998" }, { "name": "CVE-2022-46751", "url": "https://www.cve.org/CVERecord?id=CVE-2022-46751" }, { "name": "CVE-2023-52470", "url": "https://www.cve.org/CVERecord?id=CVE-2023-52470" }, { "name": "CVE-2021-43797", "url": "https://www.cve.org/CVERecord?id=CVE-2021-43797" }, { "name": "CVE-2020-7676", "url": "https://www.cve.org/CVERecord?id=CVE-2020-7676" }, { "name": "CVE-2024-40995", "url": "https://www.cve.org/CVERecord?id=CVE-2024-40995" }, { "name": "CVE-2023-26118", "url": "https://www.cve.org/CVERecord?id=CVE-2023-26118" }, { "name": "CVE-2024-42238", "url": "https://www.cve.org/CVERecord?id=CVE-2024-42238" }, { "name": "CVE-2024-34156", "url": "https://www.cve.org/CVERecord?id=CVE-2024-34156" }, { "name": "CVE-2024-43830", "url": "https://www.cve.org/CVERecord?id=CVE-2024-43830" }, { "name": "CVE-2024-39501", "url": "https://www.cve.org/CVERecord?id=CVE-2024-39501" }, { "name": "CVE-2023-52730", "url": "https://www.cve.org/CVERecord?id=CVE-2023-52730" }, { "name": "CVE-2024-42090", "url": "https://www.cve.org/CVERecord?id=CVE-2024-42090" }, { "name": "CVE-2024-26960", "url": "https://www.cve.org/CVERecord?id=CVE-2024-26960" }, { "name": "CVE-2024-40901", "url": "https://www.cve.org/CVERecord?id=CVE-2024-40901" }, { "name": "CVE-2021-47321", "url": "https://www.cve.org/CVERecord?id=CVE-2021-47321" }, { "name": "CVE-2024-26640", "url": "https://www.cve.org/CVERecord?id=CVE-2024-26640" }, { "name": "CVE-2024-40954", "url": "https://www.cve.org/CVERecord?id=CVE-2024-40954" }, { "name": "CVE-2024-49767", "url": "https://www.cve.org/CVERecord?id=CVE-2024-49767" }, { "name": "CVE-2024-22018", "url": "https://www.cve.org/CVERecord?id=CVE-2024-22018" }, { "name": "CVE-2019-10172", "url": "https://www.cve.org/CVERecord?id=CVE-2019-10172" }, { "name": "CVE-2024-6119", "url": "https://www.cve.org/CVERecord?id=CVE-2024-6119" }, { "name": "CVE-2024-37890", "url": "https://www.cve.org/CVERecord?id=CVE-2024-37890" }, { "name": "CVE-2024-47874", "url": "https://www.cve.org/CVERecord?id=CVE-2024-47874" }, { "name": "CVE-2024-42322", "url": "https://www.cve.org/CVERecord?id=CVE-2024-42322" }, { "name": "CVE-2024-27019", "url": "https://www.cve.org/CVERecord?id=CVE-2024-27019" }, { "name": "CVE-2024-43800", "url": "https://www.cve.org/CVERecord?id=CVE-2024-43800" }, { "name": "CVE-2024-28863", "url": "https://www.cve.org/CVERecord?id=CVE-2024-28863" }, { "name": "CVE-2024-39338", "url": "https://www.cve.org/CVERecord?id=CVE-2024-39338" }, { "name": "CVE-2024-41055", "url": "https://www.cve.org/CVERecord?id=CVE-2024-41055" }, { "name": "CVE-2024-41076", "url": "https://www.cve.org/CVERecord?id=CVE-2024-41076" }, { "name": "CVE-2024-39506", "url": "https://www.cve.org/CVERecord?id=CVE-2024-39506" }, { "name": "CVE-2024-40978", "url": "https://www.cve.org/CVERecord?id=CVE-2024-40978" }, { "name": "CVE-2021-21290", "url": "https://www.cve.org/CVERecord?id=CVE-2021-21290" }, { "name": "CVE-2019-10768", "url": "https://www.cve.org/CVERecord?id=CVE-2019-10768" }, { "name": "CVE-2022-3602", "url": "https://www.cve.org/CVERecord?id=CVE-2022-3602" }, { "name": "CVE-2024-41044", "url": "https://www.cve.org/CVERecord?id=CVE-2024-41044" }, { "name": "CVE-2024-40958", "url": "https://www.cve.org/CVERecord?id=CVE-2024-40958" }, { "name": "CVE-2024-26717", "url": "https://www.cve.org/CVERecord?id=CVE-2024-26717" }, { "name": "CVE-2023-26136", "url": "https://www.cve.org/CVERecord?id=CVE-2023-26136" }, { "name": "CVE-2024-42152", "url": "https://www.cve.org/CVERecord?id=CVE-2024-42152" }, { "name": "CVE-2024-39499", "url": "https://www.cve.org/CVERecord?id=CVE-2024-39499" }, { "name": "CVE-2024-36006", "url": "https://www.cve.org/CVERecord?id=CVE-2024-36006" }, { "name": "CVE-2023-52476", "url": "https://www.cve.org/CVERecord?id=CVE-2023-52476" }, { "name": "CVE-2023-52463", "url": "https://www.cve.org/CVERecord?id=CVE-2023-52463" }, { "name": "CVE-2024-41064", "url": "https://www.cve.org/CVERecord?id=CVE-2024-41064" }, { "name": "CVE-2024-34155", "url": "https://www.cve.org/CVERecord?id=CVE-2024-34155" }, { "name": "CVE-2023-52530", "url": "https://www.cve.org/CVERecord?id=CVE-2023-52530" }, { "name": "CVE-2024-36000", "url": "https://www.cve.org/CVERecord?id=CVE-2024-36000" }, { "name": "CVE-2024-26855", "url": "https://www.cve.org/CVERecord?id=CVE-2024-26855" }, { "name": "CVE-2019-16869", "url": "https://www.cve.org/CVERecord?id=CVE-2019-16869" }, { "name": "CVE-2022-21681", "url": "https://www.cve.org/CVERecord?id=CVE-2022-21681" }, { "name": "CVE-2024-42237", "url": "https://www.cve.org/CVERecord?id=CVE-2024-42237" }, { "name": "CVE-2024-24789", "url": "https://www.cve.org/CVERecord?id=CVE-2024-24789" }, { "name": "CVE-2024-27011", "url": "https://www.cve.org/CVERecord?id=CVE-2024-27011" }, { "name": "CVE-2019-20445", "url": "https://www.cve.org/CVERecord?id=CVE-2019-20445" } ], "initial_release_date": "2025-01-10T00:00:00", "last_revision_date": "2025-01-10T00:00:00", "links": [], "reference": "CERTFR-2025-AVI-0021", "revisions": [ { "description": "Version initiale", "revision_date": "2025-01-10T00:00:00.000000" } ], "risks": [ { "description": "D\u00e9ni de service \u00e0 distance" }, { "description": "Injection de code indirecte \u00e0 distance (XSS)" }, { "description": "Ex\u00e9cution de code arbitraire \u00e0 distance" }, { "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur" }, { "description": "Contournement de la politique de s\u00e9curit\u00e9" }, { "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es" } ], "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits IBM. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.", "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits IBM", "vendor_advisories": [ { "published_at": "2025-01-08", "title": "Bulletin de s\u00e9curit\u00e9 IBM 7180462", "url": "https://www.ibm.com/support/pages/node/7180462" }, { "published_at": "2025-01-07", "title": "Bulletin de s\u00e9curit\u00e9 IBM 7180361", "url": "https://www.ibm.com/support/pages/node/7180361" }, { "published_at": "2025-01-04", "title": "Bulletin de s\u00e9curit\u00e9 IBM 7180282", "url": "https://www.ibm.com/support/pages/node/7180282" }, { "published_at": "2025-01-06", "title": "Bulletin de s\u00e9curit\u00e9 IBM 7180314", "url": "https://www.ibm.com/support/pages/node/7180314" }, { "published_at": "2025-01-09", "title": "Bulletin de s\u00e9curit\u00e9 IBM 7180450", "url": "https://www.ibm.com/support/pages/node/7180450" }, { "published_at": "2025-01-08", "title": "Bulletin de s\u00e9curit\u00e9 IBM 7180545", "url": "https://www.ibm.com/support/pages/node/7180545" } ] }
wid-sec-w-2024-1548
Vulnerability from csaf_certbund
Notes
{ "document": { "aggregate_severity": { "text": "hoch" }, "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "de-DE", "notes": [ { "category": "legal_disclaimer", "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen." }, { "category": "description", "text": "Node.js ist eine Plattform zur Entwicklung von Netzwerkanwendungen.", "title": "Produktbeschreibung" }, { "category": "summary", "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Node.js ausnutzen, um beliebigen Code auszuf\u00fchren oder um Sicherheitsma\u00dfnahmen zu umgehen.", "title": "Angriff" }, { "category": "general", "text": "- Linux\n- Windows", "title": "Betroffene Betriebssysteme" } ], "publisher": { "category": "other", "contact_details": "csaf-provider@cert-bund.de", "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik", "namespace": "https://www.bsi.bund.de" }, "references": [ { "category": "self", "summary": "WID-SEC-W-2024-1548 - CSAF Version", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1548.json" }, { "category": "self", "summary": "WID-SEC-2024-1548 - Portal Version", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1548" }, { "category": "external", "summary": "NodeJS Security Releases vom 2024-07-08", "url": "https://nodejs.org/en/blog/vulnerability/july-2024-security-releases" }, { "category": "external", "summary": "Securityonline.info Cybersecurity News", "url": "https://securityonline.info/cve-2024-36138-high-severity-vulnerability-in-node-js-allows-code-execution-on-windows/" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2024:2496-1 vom 2024-07-16", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-July/018981.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2024:2542-1 vom 2024-07-17", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-July/018991.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2024:2543-1 vom 2024-07-17", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-July/018990.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2024:2574-1 vom 2024-07-22", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-July/019017.html" }, { "category": "external", "summary": "IBM Security Bulletin 7165870 vom 2024-08-19", "url": "https://www.ibm.com/support/pages/node/7165870" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:5814 vom 2024-08-26", "url": "https://access.redhat.com/errata/RHSA-2024:5814" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:5815 vom 2024-08-26", "url": "https://access.redhat.com/errata/RHSA-2024:5815" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2024-5814 vom 2024-08-26", "url": "https://linux.oracle.com/errata/ELSA-2024-5814.html" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2024-5815 vom 2024-08-27", "url": "https://linux.oracle.com/errata/ELSA-2024-5815.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:6147 vom 2024-09-03", "url": "https://access.redhat.com/errata/RHSA-2024:6147" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:6148 vom 2024-09-03", "url": "https://access.redhat.com/errata/RHSA-2024:6148" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2024-6147 vom 2024-09-05", "url": "https://linux.oracle.com/errata/ELSA-2024-6147.html" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2024-6148 vom 2024-09-04", "url": "https://linux.oracle.com/errata/ELSA-2024-6148.html" }, { "category": "external", "summary": "Rocky Linux Security Advisory RLSA-2024:5814 vom 2024-09-17", "url": "https://errata.build.resf.org/RLSA-2024:5814" }, { "category": "external", "summary": "Rocky Linux Security Advisory RLSA-2024:5815 vom 2024-09-17", "url": "https://errata.build.resf.org/RLSA-2024:5815" }, { "category": "external", "summary": "Rocky Linux Security Advisory RLSA-2024:6147 vom 2024-09-17", "url": "https://errata.build.resf.org/RLSA-2024:6147" }, { "category": "external", "summary": "IBM Security Bulletin 7172688 vom 2024-10-09", "url": "https://www.ibm.com/support/pages/node/7172688" }, { "category": "external", "summary": "openSUSE Security Update OPENSUSE-SU-2024:14435-1 vom 2024-10-31", "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/OWCPL7VTEVIGUDVKLEV2D2ITNTWKC4AZ/" }, { "category": "external", "summary": "IBM Security Bulletin 7178877 vom 2024-12-13", "url": "https://www.ibm.com/support/pages/node/7178877" }, { "category": "external", "summary": "Hitachi Vulnerability Information HITACHI-SEC-2024-150 vom 2024-12-17", "url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2024-150/index.html" }, { "category": "external", "summary": "XEROX Security Advisory XRX25-001 vom 2025-01-13", "url": "https://securitydocs.business.xerox.com/wp-content/uploads/2025/01/Xerox-Security-Bulletin-XRX25-001-for-Xerox%C2%AE-FreeFlow%C2%AE-Print-Server-v9.pdf" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2025-1446 vom 2025-02-14", "url": "https://linux.oracle.com/errata/ELSA-2025-1446.html" }, { "category": "external", "summary": "Gentoo Linux Security Advisory GLSA-202505-11 vom 2025-05-14", "url": "https://security.gentoo.org/glsa/202505-11" }, { "category": "external", "summary": "Debian Security Advisory DSA-5991 vom 2025-08-29", "url": "https://lists.debian.org/debian-security-announce/2025/msg00155.html" } ], "source_lang": "en-US", "title": "Node.js: Mehrere Schwachstellen", "tracking": { "current_release_date": "2025-08-31T22:00:00.000+00:00", "generator": { "date": "2025-09-01T07:26:19.350+00:00", "engine": { "name": "BSI-WID", "version": "1.4.0" } }, "id": "WID-SEC-W-2024-1548", "initial_release_date": "2024-07-08T22:00:00.000+00:00", "revision_history": [ { "date": "2024-07-08T22:00:00.000+00:00", "number": "1", "summary": "Initiale Fassung" }, { "date": "2024-07-09T22:00:00.000+00:00", "number": "2", "summary": "Korrektur: CVE-2024-27980 hier falsch referenziert" }, { "date": "2024-07-15T22:00:00.000+00:00", "number": "3", "summary": "Neue Updates von SUSE aufgenommen" }, { "date": "2024-07-16T22:00:00.000+00:00", "number": "4", "summary": "Neue Updates von SUSE aufgenommen" }, { "date": "2024-07-22T22:00:00.000+00:00", "number": "5", "summary": "Neue Updates von SUSE aufgenommen" }, { "date": "2024-08-19T22:00:00.000+00:00", "number": "6", "summary": "Neue Updates von IBM aufgenommen" }, { "date": "2024-08-25T22:00:00.000+00:00", "number": "7", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2024-08-26T22:00:00.000+00:00", "number": "8", "summary": "Neue Updates von Oracle Linux aufgenommen" }, { "date": "2024-09-02T22:00:00.000+00:00", "number": "9", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2024-09-04T22:00:00.000+00:00", "number": "10", "summary": "Neue Updates von Oracle Linux aufgenommen" }, { "date": "2024-09-16T22:00:00.000+00:00", "number": "11", "summary": "Neue Updates von Rocky Enterprise Software Foundation aufgenommen" }, { "date": "2024-10-09T22:00:00.000+00:00", "number": "12", "summary": "Neue Updates von IBM aufgenommen" }, { "date": "2024-10-31T23:00:00.000+00:00", "number": "13", "summary": "Neue Updates von openSUSE aufgenommen" }, { "date": "2024-12-15T23:00:00.000+00:00", "number": "14", "summary": "Neue Updates von IBM aufgenommen" }, { "date": "2024-12-17T23:00:00.000+00:00", "number": "15", "summary": "Neue Updates von HITACHI aufgenommen" }, { "date": "2025-01-12T23:00:00.000+00:00", "number": "16", "summary": "Neue Updates von XEROX aufgenommen" }, { "date": "2025-02-16T23:00:00.000+00:00", "number": "17", "summary": "Neue Updates von Oracle Linux aufgenommen" }, { "date": "2025-05-14T22:00:00.000+00:00", "number": "18", "summary": "Neue Updates von Gentoo aufgenommen" }, { "date": "2025-08-31T22:00:00.000+00:00", "number": "19", "summary": "Neue Updates von Debian aufgenommen" } ], "status": "final", "version": "19" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_name", "name": "Debian Linux", "product": { "name": "Debian Linux", "product_id": "2951", "product_identification_helper": { "cpe": "cpe:/o:debian:debian_linux:-" } } } ], "category": "vendor", "name": "Debian" }, { "branches": [ { "category": "product_name", "name": "Gentoo Linux", "product": { "name": "Gentoo Linux", "product_id": "T012167", "product_identification_helper": { "cpe": "cpe:/o:gentoo:linux:-" } } } ], "category": "vendor", "name": "Gentoo" }, { "branches": [ { "category": "product_name", "name": "Hitachi Ops Center", "product": { "name": "Hitachi Ops Center", "product_id": "T038840", "product_identification_helper": { "cpe": "cpe:/a:hitachi:ops_center:-" } } } ], "category": "vendor", "name": "Hitachi" }, { "branches": [ { "category": "product_name", "name": "IBM Business Automation Workflow", "product": { "name": "IBM Business Automation Workflow", "product_id": "T019704", "product_identification_helper": { "cpe": "cpe:/a:ibm:business_automation_workflow:-" } } }, { "branches": [ { "category": "product_version", "name": "11.7", "product": { "name": "IBM InfoSphere Information Server 11.7", "product_id": "444803", "product_identification_helper": { "cpe": "cpe:/a:ibm:infosphere_information_server:11.7" } } } ], "category": "product_name", "name": "InfoSphere Information Server" }, { "branches": [ { "category": "product_version", "name": "9.6", "product": { "name": "IBM Rational Application Developer for WebSphere Software 9.6", "product_id": "T012259", "product_identification_helper": { "cpe": "cpe:/a:ibm:rational_application_developer_for_websphere_software:9.6" } } }, { "category": "product_version", "name": "9.7", "product": { "name": "IBM Rational Application Developer for WebSphere Software 9.7", "product_id": "T033489", "product_identification_helper": { "cpe": "cpe:/a:ibm:rational_application_developer_for_websphere_software:9.7" } } } ], "category": "product_name", "name": "Rational Application Developer for WebSphere Software" } ], "category": "vendor", "name": "IBM" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "\u003c18.20.4", "product": { "name": "Open Source Node.js \u003c18.20.4", "product_id": "T035875" } }, { "category": "product_version", "name": "18.20.4", "product": { "name": "Open Source Node.js 18.20.4", "product_id": "T035875-fixed", "product_identification_helper": { "cpe": "cpe:/a:nodejs:nodejs:18.20.4" } } }, { "category": "product_version_range", "name": "\u003c20.15.1", "product": { "name": "Open Source Node.js \u003c20.15.1", "product_id": "T035876" } }, { "category": "product_version", "name": "20.15.1", "product": { "name": "Open Source Node.js 20.15.1", "product_id": "T035876-fixed", "product_identification_helper": { "cpe": "cpe:/a:nodejs:nodejs:20.15.1" } } }, { "category": "product_version_range", "name": "\u003c22.4.1", "product": { "name": "Open Source Node.js \u003c22.4.1", "product_id": "T035877" } }, { "category": "product_version", "name": "22.4.1", "product": { "name": "Open Source Node.js 22.4.1", "product_id": "T035877-fixed", "product_identification_helper": { "cpe": "cpe:/a:nodejs:nodejs:22.4.1" } } } ], "category": "product_name", "name": "Node.js" } ], "category": "vendor", "name": "Open Source" }, { "branches": [ { "category": "product_name", "name": "Oracle Linux", "product": { "name": "Oracle Linux", "product_id": "T004914", "product_identification_helper": { "cpe": "cpe:/o:oracle:linux:-" } } } ], "category": "vendor", "name": "Oracle" }, { "branches": [ { "category": "product_name", "name": "RESF Rocky Linux", "product": { "name": "RESF Rocky Linux", "product_id": "T032255", "product_identification_helper": { "cpe": "cpe:/o:resf:rocky_linux:-" } } } ], "category": "vendor", "name": "RESF" }, { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux", "product": { "name": "Red Hat Enterprise Linux", "product_id": "67646", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:-" } } } ], "category": "vendor", "name": "Red Hat" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux", "product": { "name": "SUSE Linux", "product_id": "T002207", "product_identification_helper": { "cpe": "cpe:/o:suse:suse_linux:-" } } }, { "category": "product_name", "name": "SUSE openSUSE", "product": { "name": "SUSE openSUSE", "product_id": "T027843", "product_identification_helper": { "cpe": "cpe:/o:suse:opensuse:-" } } } ], "category": "vendor", "name": "SUSE" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "v9 for Solaris", "product": { "name": "Xerox FreeFlow Print Server v9 for Solaris", "product_id": "T028053", "product_identification_helper": { "cpe": "cpe:/a:xerox:freeflow_print_server:v9_for_solaris" } } } ], "category": "product_name", "name": "FreeFlow Print Server" } ], "category": "vendor", "name": "Xerox" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-22018", "product_status": { "known_affected": [ "T035877", "T028053", "T035876", "T033489", "T035875", "67646", "T012259", "T012167", "T004914", "T032255", "T038840", "2951", "T002207", "444803", "T019704", "T027843" ] }, "release_date": "2024-07-08T22:00:00.000+00:00", "title": "CVE-2024-22018" }, { "cve": "CVE-2024-22020", "product_status": { "known_affected": [ "T035877", "T028053", "T035876", "T033489", "T035875", "67646", "T012259", "T012167", "T004914", "T032255", "T038840", "2951", "T002207", "444803", "T019704", "T027843" ] }, "release_date": "2024-07-08T22:00:00.000+00:00", "title": "CVE-2024-22020" }, { "cve": "CVE-2024-36137", "product_status": { "known_affected": [ "T035877", "T028053", "T035876", "T033489", "T035875", "67646", "T012259", "T012167", "T004914", "T032255", "T038840", "2951", "T002207", "444803", "T019704", "T027843" ] }, "release_date": "2024-07-08T22:00:00.000+00:00", "title": "CVE-2024-36137" }, { "cve": "CVE-2024-36138", "product_status": { "known_affected": [ "T035877", "T028053", "T035876", "T033489", "T035875", "67646", "T012259", "T012167", "T004914", "T032255", "T038840", "2951", "T002207", "444803", "T019704", "T027843" ] }, "release_date": "2024-07-08T22:00:00.000+00:00", "title": "CVE-2024-36138" }, { "cve": "CVE-2024-37372", "product_status": { "known_affected": [ "T035877", "T028053", "T035876", "T033489", "T035875", "67646", "T012259", "T012167", "T004914", "T032255", "T038840", "2951", "T002207", "444803", "T019704", "T027843" ] }, "release_date": "2024-07-08T22:00:00.000+00:00", "title": "CVE-2024-37372" } ] }
WID-SEC-W-2024-3195
Vulnerability from csaf_certbund
Notes
{ "document": { "aggregate_severity": { "text": "hoch" }, "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "de-DE", "notes": [ { "category": "legal_disclaimer", "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen." }, { "category": "description", "text": "Oracle Communications umfasst branchenspezifische L\u00f6sungen f\u00fcr die Telekommunikationsbranche.", "title": "Produktbeschreibung" }, { "category": "summary", "text": "Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Communications ausnutzen, um die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit zu gef\u00e4hrden.", "title": "Angriff" }, { "category": "general", "text": "- Sonstiges", "title": "Betroffene Betriebssysteme" } ], "publisher": { "category": "other", "contact_details": "csaf-provider@cert-bund.de", "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik", "namespace": "https://www.bsi.bund.de" }, "references": [ { "category": "self", "summary": "WID-SEC-W-2024-3195 - CSAF Version", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3195.json" }, { "category": "self", "summary": "WID-SEC-2024-3195 - Portal Version", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3195" }, { "category": "external", "summary": "Oracle Critical Patch Update Advisory - October 2024 - Appendix Oracle Communications vom 2024-10-15", "url": "https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixCGBU" } ], "source_lang": "en-US", "title": "Oracle Communications: Mehrere Schwachstellen", "tracking": { "current_release_date": "2024-10-15T22:00:00.000+00:00", "generator": { "date": "2024-10-16T10:12:35.400+00:00", "engine": { "name": "BSI-WID", "version": "1.3.8" } }, "id": "WID-SEC-W-2024-3195", "initial_release_date": "2024-10-15T22:00:00.000+00:00", "revision_history": [ { "date": "2024-10-15T22:00:00.000+00:00", "number": "1", "summary": "Initiale Fassung" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "9.1.1.3.0", "product": { "name": "Oracle Communications 9.1.1.3.0", "product_id": "T027333", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:9.1.1.3.0" } } }, { "category": "product_version", "name": "12.6.1.0.0", "product": { "name": "Oracle Communications 12.6.1.0.0", "product_id": "T027338", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:12.6.1.0.0" } } }, { "category": "product_version", "name": "5.1", "product": { "name": "Oracle Communications 5.1", "product_id": "T028684", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:5.1" } } }, { "category": "product_version", "name": "15.0.0.0.0", "product": { "name": "Oracle Communications 15.0.0.0.0", "product_id": "T032090", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:15.0.0.0.0" } } }, { "category": "product_version", "name": "23.4.0", "product": { "name": "Oracle Communications 23.4.0", "product_id": "T032091", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:23.4.0" } } }, { "category": "product_version", "name": "23.4.2", "product": { "name": "Oracle Communications 23.4.2", "product_id": "T034144", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:23.4.2" } } }, { "category": "product_version", "name": "24.1.0", "product": { "name": "Oracle Communications 24.1.0", "product_id": "T034145", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:24.1.0" } } }, { "category": "product_version", "name": "5.2", "product": { "name": "Oracle Communications 5.2", "product_id": "T034146", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:5.2" } } }, { "category": "product_version", "name": "24.1.0.0.0", "product": { "name": "Oracle Communications 24.1.0.0.0", "product_id": "T034147", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:24.1.0.0.0" } } }, { "category": "product_version", "name": "23.4.3", "product": { "name": "Oracle Communications 23.4.3", "product_id": "T036195", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:23.4.3" } } }, { "category": "product_version", "name": "23.4.4", "product": { "name": "Oracle Communications 23.4.4", "product_id": "T036196", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:23.4.4" } } }, { "category": "product_version_range", "name": "\u003c=24.2.0", "product": { "name": "Oracle Communications \u003c=24.2.0", "product_id": "T036197" } }, { "category": "product_version_range", "name": "\u003c=24.2.0", "product": { "name": "Oracle Communications \u003c=24.2.0", "product_id": "T036197-fixed" } }, { "category": "product_version", "name": "4.1.0", "product": { "name": "Oracle Communications 4.1.0", "product_id": "T036205", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:4.1.0" } } }, { "category": "product_version", "name": "4.2.0", "product": { "name": "Oracle Communications 4.2.0", "product_id": "T036206", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:4.2.0" } } }, { "category": "product_version", "name": "9.2.0", "product": { "name": "Oracle Communications 9.2.0", "product_id": "T036207", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:9.2.0" } } }, { "category": "product_version", "name": "9.3.0", "product": { "name": "Oracle Communications 9.3.0", "product_id": "T036208", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:9.3.0" } } }, { "category": "product_version", "name": "12.11.0", "product": { "name": "Oracle Communications 12.11.0", "product_id": "T036209", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:12.11.0" } } }, { "category": "product_version", "name": "9.0.1.10.0", "product": { "name": "Oracle Communications 9.0.1.10.0", "product_id": "T038373", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:9.0.1.10.0" } } }, { "category": "product_version_range", "name": "\u003c=23.4.5", "product": { "name": "Oracle Communications \u003c=23.4.5", "product_id": "T038375" } }, { "category": "product_version_range", "name": "\u003c=23.4.5", "product": { "name": "Oracle Communications \u003c=23.4.5", "product_id": "T038375-fixed" } }, { "category": "product_version", "name": "24.2.1", "product": { "name": "Oracle Communications 24.2.1", "product_id": "T038376", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:24.2.1" } } }, { "category": "product_version_range", "name": "\u003c=23.4.6", "product": { "name": "Oracle Communications \u003c=23.4.6", "product_id": "T038377" } }, { "category": "product_version_range", "name": "\u003c=23.4.6", "product": { "name": "Oracle Communications \u003c=23.4.6", "product_id": "T038377-fixed" } }, { "category": "product_version", "name": "24.1.1", "product": { "name": "Oracle Communications 24.1.1", "product_id": "T038378", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:24.1.1" } } }, { "category": "product_version", "name": "24.2.2", "product": { "name": "Oracle Communications 24.2.2", "product_id": "T038379", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:24.2.2" } } }, { "category": "product_version", "name": "9.1.5", "product": { "name": "Oracle Communications 9.1.5", "product_id": "T038380", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:9.1.5" } } }, { "category": "product_version", "name": "9.1.0", "product": { "name": "Oracle Communications 9.1.0", "product_id": "T038381", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:9.1.0" } } }, { "category": "product_version", "name": "14", "product": { "name": "Oracle Communications 14.0", "product_id": "T038382", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:14.0" } } }, { "category": "product_version", "name": "9.1.1.9.0", "product": { "name": "Oracle Communications 9.1.1.9.0", "product_id": "T038383", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:9.1.1.9.0" } } }, { "category": "product_version", "name": "14.0.0.1", "product": { "name": "Oracle Communications 14.0.0.1", "product_id": "T038384", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:14.0.0.1" } } }, { "category": "product_version", "name": "17.0.1", "product": { "name": "Oracle Communications 17.0.1", "product_id": "T038385", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:17.0.1" } } }, { "category": "product_version_range", "name": "\u003c10.4.0.4", "product": { "name": "Oracle Communications \u003c10.4.0.4", "product_id": "T038386" } }, { "category": "product_version", "name": "10.4.0.4", "product": { "name": "Oracle Communications 10.4.0.4", "product_id": "T038386-fixed", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:10.4.0.4" } } }, { "category": "product_version_range", "name": "\u003c=9.1.1.8.0", "product": { "name": "Oracle Communications \u003c=9.1.1.8.0", "product_id": "T038426" } }, { "category": "product_version_range", "name": "\u003c=9.1.1.8.0", "product": { "name": "Oracle Communications \u003c=9.1.1.8.0", "product_id": "T038426-fixed" } } ], "category": "product_name", "name": "Communications" } ], "category": "vendor", "name": "Oracle" } ] }, "vulnerabilities": [ { "cve": "CVE-2022-2068", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2022-2068" }, { "cve": "CVE-2022-23437", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2022-23437" }, { "cve": "CVE-2022-2601", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2022-2601" }, { "cve": "CVE-2022-36760", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2022-36760" }, { "cve": "CVE-2023-2953", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2023-2953" }, { "cve": "CVE-2023-3635", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2023-3635" }, { "cve": "CVE-2023-38408", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2023-38408" }, { "cve": "CVE-2023-4043", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2023-4043" }, { "cve": "CVE-2023-46136", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2023-46136" }, { "cve": "CVE-2023-48795", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2023-48795" }, { "cve": "CVE-2023-51775", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2023-51775" }, { "cve": "CVE-2023-5685", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2023-5685" }, { "cve": "CVE-2023-6597", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2023-6597" }, { "cve": "CVE-2023-6816", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2023-6816" }, { "cve": "CVE-2024-0450", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-0450" }, { "cve": "CVE-2024-22020", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-22020" }, { "cve": "CVE-2024-22257", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-22257" }, { "cve": "CVE-2024-22262", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-22262" }, { "cve": "CVE-2024-23672", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-23672" }, { "cve": "CVE-2024-2398", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-2398" }, { "cve": "CVE-2024-25062", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-25062" }, { "cve": "CVE-2024-25638", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-25638" }, { "cve": "CVE-2024-26308", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-26308" }, { "cve": "CVE-2024-28182", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-28182" }, { "cve": "CVE-2024-28849", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-28849" }, { "cve": "CVE-2024-29025", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-29025" }, { "cve": "CVE-2024-29736", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-29736" }, { "cve": "CVE-2024-29857", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-29857" }, { "cve": "CVE-2024-30251", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-30251" }, { "cve": "CVE-2024-31080", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-31080" }, { "cve": "CVE-2024-31744", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-31744" }, { "cve": "CVE-2024-32760", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-32760" }, { "cve": "CVE-2024-33602", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-33602" }, { "cve": "CVE-2024-34750", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-34750" }, { "cve": "CVE-2024-37371", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-37371" }, { "cve": "CVE-2024-37891", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-37891" }, { "cve": "CVE-2024-38816", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-38816" }, { "cve": "CVE-2024-40898", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-40898" }, { "cve": "CVE-2024-43044", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-43044" }, { "cve": "CVE-2024-45492", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-45492" }, { "cve": "CVE-2024-4577", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-4577" }, { "cve": "CVE-2024-4603", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-4603" }, { "cve": "CVE-2024-5971", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-5971" }, { "cve": "CVE-2024-6162", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-6162" }, { "cve": "CVE-2024-6387", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-6387" }, { "cve": "CVE-2024-7254", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-7254" } ] }
WID-SEC-W-2024-1548
Vulnerability from csaf_certbund
Notes
{ "document": { "aggregate_severity": { "text": "hoch" }, "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "de-DE", "notes": [ { "category": "legal_disclaimer", "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen." }, { "category": "description", "text": "Node.js ist eine Plattform zur Entwicklung von Netzwerkanwendungen.", "title": "Produktbeschreibung" }, { "category": "summary", "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Node.js ausnutzen, um beliebigen Code auszuf\u00fchren oder um Sicherheitsma\u00dfnahmen zu umgehen.", "title": "Angriff" }, { "category": "general", "text": "- Linux\n- Windows", "title": "Betroffene Betriebssysteme" } ], "publisher": { "category": "other", "contact_details": "csaf-provider@cert-bund.de", "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik", "namespace": "https://www.bsi.bund.de" }, "references": [ { "category": "self", "summary": "WID-SEC-W-2024-1548 - CSAF Version", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1548.json" }, { "category": "self", "summary": "WID-SEC-2024-1548 - Portal Version", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1548" }, { "category": "external", "summary": "NodeJS Security Releases vom 2024-07-08", "url": "https://nodejs.org/en/blog/vulnerability/july-2024-security-releases" }, { "category": "external", "summary": "Securityonline.info Cybersecurity News", "url": "https://securityonline.info/cve-2024-36138-high-severity-vulnerability-in-node-js-allows-code-execution-on-windows/" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2024:2496-1 vom 2024-07-16", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-July/018981.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2024:2542-1 vom 2024-07-17", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-July/018991.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2024:2543-1 vom 2024-07-17", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-July/018990.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2024:2574-1 vom 2024-07-22", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-July/019017.html" }, { "category": "external", "summary": "IBM Security Bulletin 7165870 vom 2024-08-19", "url": "https://www.ibm.com/support/pages/node/7165870" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:5814 vom 2024-08-26", "url": "https://access.redhat.com/errata/RHSA-2024:5814" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:5815 vom 2024-08-26", "url": "https://access.redhat.com/errata/RHSA-2024:5815" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2024-5814 vom 2024-08-26", "url": "https://linux.oracle.com/errata/ELSA-2024-5814.html" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2024-5815 vom 2024-08-27", "url": "https://linux.oracle.com/errata/ELSA-2024-5815.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:6147 vom 2024-09-03", "url": "https://access.redhat.com/errata/RHSA-2024:6147" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:6148 vom 2024-09-03", "url": "https://access.redhat.com/errata/RHSA-2024:6148" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2024-6147 vom 2024-09-05", "url": "https://linux.oracle.com/errata/ELSA-2024-6147.html" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2024-6148 vom 2024-09-04", "url": "https://linux.oracle.com/errata/ELSA-2024-6148.html" }, { "category": "external", "summary": "Rocky Linux Security Advisory RLSA-2024:5814 vom 2024-09-17", "url": "https://errata.build.resf.org/RLSA-2024:5814" }, { "category": "external", "summary": "Rocky Linux Security Advisory RLSA-2024:5815 vom 2024-09-17", "url": "https://errata.build.resf.org/RLSA-2024:5815" }, { "category": "external", "summary": "Rocky Linux Security Advisory RLSA-2024:6147 vom 2024-09-17", "url": "https://errata.build.resf.org/RLSA-2024:6147" }, { "category": "external", "summary": "IBM Security Bulletin 7172688 vom 2024-10-09", "url": "https://www.ibm.com/support/pages/node/7172688" }, { "category": "external", "summary": "openSUSE Security Update OPENSUSE-SU-2024:14435-1 vom 2024-10-31", "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/OWCPL7VTEVIGUDVKLEV2D2ITNTWKC4AZ/" }, { "category": "external", "summary": "IBM Security Bulletin 7178877 vom 2024-12-13", "url": "https://www.ibm.com/support/pages/node/7178877" }, { "category": "external", "summary": "Hitachi Vulnerability Information HITACHI-SEC-2024-150 vom 2024-12-17", "url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2024-150/index.html" }, { "category": "external", "summary": "XEROX Security Advisory XRX25-001 vom 2025-01-13", "url": "https://securitydocs.business.xerox.com/wp-content/uploads/2025/01/Xerox-Security-Bulletin-XRX25-001-for-Xerox%C2%AE-FreeFlow%C2%AE-Print-Server-v9.pdf" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2025-1446 vom 2025-02-14", "url": "https://linux.oracle.com/errata/ELSA-2025-1446.html" }, { "category": "external", "summary": "Gentoo Linux Security Advisory GLSA-202505-11 vom 2025-05-14", "url": "https://security.gentoo.org/glsa/202505-11" }, { "category": "external", "summary": "Debian Security Advisory DSA-5991 vom 2025-08-29", "url": "https://lists.debian.org/debian-security-announce/2025/msg00155.html" } ], "source_lang": "en-US", "title": "Node.js: Mehrere Schwachstellen", "tracking": { "current_release_date": "2025-08-31T22:00:00.000+00:00", "generator": { "date": "2025-09-01T07:26:19.350+00:00", "engine": { "name": "BSI-WID", "version": "1.4.0" } }, "id": "WID-SEC-W-2024-1548", "initial_release_date": "2024-07-08T22:00:00.000+00:00", "revision_history": [ { "date": "2024-07-08T22:00:00.000+00:00", "number": "1", "summary": "Initiale Fassung" }, { "date": "2024-07-09T22:00:00.000+00:00", "number": "2", "summary": "Korrektur: CVE-2024-27980 hier falsch referenziert" }, { "date": "2024-07-15T22:00:00.000+00:00", "number": "3", "summary": "Neue Updates von SUSE aufgenommen" }, { "date": "2024-07-16T22:00:00.000+00:00", "number": "4", "summary": "Neue Updates von SUSE aufgenommen" }, { "date": "2024-07-22T22:00:00.000+00:00", "number": "5", "summary": "Neue Updates von SUSE aufgenommen" }, { "date": "2024-08-19T22:00:00.000+00:00", "number": "6", "summary": "Neue Updates von IBM aufgenommen" }, { "date": "2024-08-25T22:00:00.000+00:00", "number": "7", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2024-08-26T22:00:00.000+00:00", "number": "8", "summary": "Neue Updates von Oracle Linux aufgenommen" }, { "date": "2024-09-02T22:00:00.000+00:00", "number": "9", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2024-09-04T22:00:00.000+00:00", "number": "10", "summary": "Neue Updates von Oracle Linux aufgenommen" }, { "date": "2024-09-16T22:00:00.000+00:00", "number": "11", "summary": "Neue Updates von Rocky Enterprise Software Foundation aufgenommen" }, { "date": "2024-10-09T22:00:00.000+00:00", "number": "12", "summary": "Neue Updates von IBM aufgenommen" }, { "date": "2024-10-31T23:00:00.000+00:00", "number": "13", "summary": "Neue Updates von openSUSE aufgenommen" }, { "date": "2024-12-15T23:00:00.000+00:00", "number": "14", "summary": "Neue Updates von IBM aufgenommen" }, { "date": "2024-12-17T23:00:00.000+00:00", "number": "15", "summary": "Neue Updates von HITACHI aufgenommen" }, { "date": "2025-01-12T23:00:00.000+00:00", "number": "16", "summary": "Neue Updates von XEROX aufgenommen" }, { "date": "2025-02-16T23:00:00.000+00:00", "number": "17", "summary": "Neue Updates von Oracle Linux aufgenommen" }, { "date": "2025-05-14T22:00:00.000+00:00", "number": "18", "summary": "Neue Updates von Gentoo aufgenommen" }, { "date": "2025-08-31T22:00:00.000+00:00", "number": "19", "summary": "Neue Updates von Debian aufgenommen" } ], "status": "final", "version": "19" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_name", "name": "Debian Linux", "product": { "name": "Debian Linux", "product_id": "2951", "product_identification_helper": { "cpe": "cpe:/o:debian:debian_linux:-" } } } ], "category": "vendor", "name": "Debian" }, { "branches": [ { "category": "product_name", "name": "Gentoo Linux", "product": { "name": "Gentoo Linux", "product_id": "T012167", "product_identification_helper": { "cpe": "cpe:/o:gentoo:linux:-" } } } ], "category": "vendor", "name": "Gentoo" }, { "branches": [ { "category": "product_name", "name": "Hitachi Ops Center", "product": { "name": "Hitachi Ops Center", "product_id": "T038840", "product_identification_helper": { "cpe": "cpe:/a:hitachi:ops_center:-" } } } ], "category": "vendor", "name": "Hitachi" }, { "branches": [ { "category": "product_name", "name": "IBM Business Automation Workflow", "product": { "name": "IBM Business Automation Workflow", "product_id": "T019704", "product_identification_helper": { "cpe": "cpe:/a:ibm:business_automation_workflow:-" } } }, { "branches": [ { "category": "product_version", "name": "11.7", "product": { "name": "IBM InfoSphere Information Server 11.7", "product_id": "444803", "product_identification_helper": { "cpe": "cpe:/a:ibm:infosphere_information_server:11.7" } } } ], "category": "product_name", "name": "InfoSphere Information Server" }, { "branches": [ { "category": "product_version", "name": "9.6", "product": { "name": "IBM Rational Application Developer for WebSphere Software 9.6", "product_id": "T012259", "product_identification_helper": { "cpe": "cpe:/a:ibm:rational_application_developer_for_websphere_software:9.6" } } }, { "category": "product_version", "name": "9.7", "product": { "name": "IBM Rational Application Developer for WebSphere Software 9.7", "product_id": "T033489", "product_identification_helper": { "cpe": "cpe:/a:ibm:rational_application_developer_for_websphere_software:9.7" } } } ], "category": "product_name", "name": "Rational Application Developer for WebSphere Software" } ], "category": "vendor", "name": "IBM" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "\u003c18.20.4", "product": { "name": "Open Source Node.js \u003c18.20.4", "product_id": "T035875" } }, { "category": "product_version", "name": "18.20.4", "product": { "name": "Open Source Node.js 18.20.4", "product_id": "T035875-fixed", "product_identification_helper": { "cpe": "cpe:/a:nodejs:nodejs:18.20.4" } } }, { "category": "product_version_range", "name": "\u003c20.15.1", "product": { "name": "Open Source Node.js \u003c20.15.1", "product_id": "T035876" } }, { "category": "product_version", "name": "20.15.1", "product": { "name": "Open Source Node.js 20.15.1", "product_id": "T035876-fixed", "product_identification_helper": { "cpe": "cpe:/a:nodejs:nodejs:20.15.1" } } }, { "category": "product_version_range", "name": "\u003c22.4.1", "product": { "name": "Open Source Node.js \u003c22.4.1", "product_id": "T035877" } }, { "category": "product_version", "name": "22.4.1", "product": { "name": "Open Source Node.js 22.4.1", "product_id": "T035877-fixed", "product_identification_helper": { "cpe": "cpe:/a:nodejs:nodejs:22.4.1" } } } ], "category": "product_name", "name": "Node.js" } ], "category": "vendor", "name": "Open Source" }, { "branches": [ { "category": "product_name", "name": "Oracle Linux", "product": { "name": "Oracle Linux", "product_id": "T004914", "product_identification_helper": { "cpe": "cpe:/o:oracle:linux:-" } } } ], "category": "vendor", "name": "Oracle" }, { "branches": [ { "category": "product_name", "name": "RESF Rocky Linux", "product": { "name": "RESF Rocky Linux", "product_id": "T032255", "product_identification_helper": { "cpe": "cpe:/o:resf:rocky_linux:-" } } } ], "category": "vendor", "name": "RESF" }, { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux", "product": { "name": "Red Hat Enterprise Linux", "product_id": "67646", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:-" } } } ], "category": "vendor", "name": "Red Hat" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux", "product": { "name": "SUSE Linux", "product_id": "T002207", "product_identification_helper": { "cpe": "cpe:/o:suse:suse_linux:-" } } }, { "category": "product_name", "name": "SUSE openSUSE", "product": { "name": "SUSE openSUSE", "product_id": "T027843", "product_identification_helper": { "cpe": "cpe:/o:suse:opensuse:-" } } } ], "category": "vendor", "name": "SUSE" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "v9 for Solaris", "product": { "name": "Xerox FreeFlow Print Server v9 for Solaris", "product_id": "T028053", "product_identification_helper": { "cpe": "cpe:/a:xerox:freeflow_print_server:v9_for_solaris" } } } ], "category": "product_name", "name": "FreeFlow Print Server" } ], "category": "vendor", "name": "Xerox" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-22018", "product_status": { "known_affected": [ "T035877", "T028053", "T035876", "T033489", "T035875", "67646", "T012259", "T012167", "T004914", "T032255", "T038840", "2951", "T002207", "444803", "T019704", "T027843" ] }, "release_date": "2024-07-08T22:00:00.000+00:00", "title": "CVE-2024-22018" }, { "cve": "CVE-2024-22020", "product_status": { "known_affected": [ "T035877", "T028053", "T035876", "T033489", "T035875", "67646", "T012259", "T012167", "T004914", "T032255", "T038840", "2951", "T002207", "444803", "T019704", "T027843" ] }, "release_date": "2024-07-08T22:00:00.000+00:00", "title": "CVE-2024-22020" }, { "cve": "CVE-2024-36137", "product_status": { "known_affected": [ "T035877", "T028053", "T035876", "T033489", "T035875", "67646", "T012259", "T012167", "T004914", "T032255", "T038840", "2951", "T002207", "444803", "T019704", "T027843" ] }, "release_date": "2024-07-08T22:00:00.000+00:00", "title": "CVE-2024-36137" }, { "cve": "CVE-2024-36138", "product_status": { "known_affected": [ "T035877", "T028053", "T035876", "T033489", "T035875", "67646", "T012259", "T012167", "T004914", "T032255", "T038840", "2951", "T002207", "444803", "T019704", "T027843" ] }, "release_date": "2024-07-08T22:00:00.000+00:00", "title": "CVE-2024-36138" }, { "cve": "CVE-2024-37372", "product_status": { "known_affected": [ "T035877", "T028053", "T035876", "T033489", "T035875", "67646", "T012259", "T012167", "T004914", "T032255", "T038840", "2951", "T002207", "444803", "T019704", "T027843" ] }, "release_date": "2024-07-08T22:00:00.000+00:00", "title": "CVE-2024-37372" } ] }
wid-sec-w-2024-3195
Vulnerability from csaf_certbund
Notes
{ "document": { "aggregate_severity": { "text": "hoch" }, "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "de-DE", "notes": [ { "category": "legal_disclaimer", "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen." }, { "category": "description", "text": "Oracle Communications umfasst branchenspezifische L\u00f6sungen f\u00fcr die Telekommunikationsbranche.", "title": "Produktbeschreibung" }, { "category": "summary", "text": "Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Communications ausnutzen, um die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit zu gef\u00e4hrden.", "title": "Angriff" }, { "category": "general", "text": "- Sonstiges", "title": "Betroffene Betriebssysteme" } ], "publisher": { "category": "other", "contact_details": "csaf-provider@cert-bund.de", "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik", "namespace": "https://www.bsi.bund.de" }, "references": [ { "category": "self", "summary": "WID-SEC-W-2024-3195 - CSAF Version", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3195.json" }, { "category": "self", "summary": "WID-SEC-2024-3195 - Portal Version", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3195" }, { "category": "external", "summary": "Oracle Critical Patch Update Advisory - October 2024 - Appendix Oracle Communications vom 2024-10-15", "url": "https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixCGBU" } ], "source_lang": "en-US", "title": "Oracle Communications: Mehrere Schwachstellen", "tracking": { "current_release_date": "2024-10-15T22:00:00.000+00:00", "generator": { "date": "2024-10-16T10:12:35.400+00:00", "engine": { "name": "BSI-WID", "version": "1.3.8" } }, "id": "WID-SEC-W-2024-3195", "initial_release_date": "2024-10-15T22:00:00.000+00:00", "revision_history": [ { "date": "2024-10-15T22:00:00.000+00:00", "number": "1", "summary": "Initiale Fassung" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "9.1.1.3.0", "product": { "name": "Oracle Communications 9.1.1.3.0", "product_id": "T027333", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:9.1.1.3.0" } } }, { "category": "product_version", "name": "12.6.1.0.0", "product": { "name": "Oracle Communications 12.6.1.0.0", "product_id": "T027338", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:12.6.1.0.0" } } }, { "category": "product_version", "name": "5.1", "product": { "name": "Oracle Communications 5.1", "product_id": "T028684", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:5.1" } } }, { "category": "product_version", "name": "15.0.0.0.0", "product": { "name": "Oracle Communications 15.0.0.0.0", "product_id": "T032090", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:15.0.0.0.0" } } }, { "category": "product_version", "name": "23.4.0", "product": { "name": "Oracle Communications 23.4.0", "product_id": "T032091", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:23.4.0" } } }, { "category": "product_version", "name": "23.4.2", "product": { "name": "Oracle Communications 23.4.2", "product_id": "T034144", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:23.4.2" } } }, { "category": "product_version", "name": "24.1.0", "product": { "name": "Oracle Communications 24.1.0", "product_id": "T034145", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:24.1.0" } } }, { "category": "product_version", "name": "5.2", "product": { "name": "Oracle Communications 5.2", "product_id": "T034146", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:5.2" } } }, { "category": "product_version", "name": "24.1.0.0.0", "product": { "name": "Oracle Communications 24.1.0.0.0", "product_id": "T034147", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:24.1.0.0.0" } } }, { "category": "product_version", "name": "23.4.3", "product": { "name": "Oracle Communications 23.4.3", "product_id": "T036195", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:23.4.3" } } }, { "category": "product_version", "name": "23.4.4", "product": { "name": "Oracle Communications 23.4.4", "product_id": "T036196", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:23.4.4" } } }, { "category": "product_version_range", "name": "\u003c=24.2.0", "product": { "name": "Oracle Communications \u003c=24.2.0", "product_id": "T036197" } }, { "category": "product_version_range", "name": "\u003c=24.2.0", "product": { "name": "Oracle Communications \u003c=24.2.0", "product_id": "T036197-fixed" } }, { "category": "product_version", "name": "4.1.0", "product": { "name": "Oracle Communications 4.1.0", "product_id": "T036205", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:4.1.0" } } }, { "category": "product_version", "name": "4.2.0", "product": { "name": "Oracle Communications 4.2.0", "product_id": "T036206", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:4.2.0" } } }, { "category": "product_version", "name": "9.2.0", "product": { "name": "Oracle Communications 9.2.0", "product_id": "T036207", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:9.2.0" } } }, { "category": "product_version", "name": "9.3.0", "product": { "name": "Oracle Communications 9.3.0", "product_id": "T036208", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:9.3.0" } } }, { "category": "product_version", "name": "12.11.0", "product": { "name": "Oracle Communications 12.11.0", "product_id": "T036209", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:12.11.0" } } }, { "category": "product_version", "name": "9.0.1.10.0", "product": { "name": "Oracle Communications 9.0.1.10.0", "product_id": "T038373", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:9.0.1.10.0" } } }, { "category": "product_version_range", "name": "\u003c=23.4.5", "product": { "name": "Oracle Communications \u003c=23.4.5", "product_id": "T038375" } }, { "category": "product_version_range", "name": "\u003c=23.4.5", "product": { "name": "Oracle Communications \u003c=23.4.5", "product_id": "T038375-fixed" } }, { "category": "product_version", "name": "24.2.1", "product": { "name": "Oracle Communications 24.2.1", "product_id": "T038376", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:24.2.1" } } }, { "category": "product_version_range", "name": "\u003c=23.4.6", "product": { "name": "Oracle Communications \u003c=23.4.6", "product_id": "T038377" } }, { "category": "product_version_range", "name": "\u003c=23.4.6", "product": { "name": "Oracle Communications \u003c=23.4.6", "product_id": "T038377-fixed" } }, { "category": "product_version", "name": "24.1.1", "product": { "name": "Oracle Communications 24.1.1", "product_id": "T038378", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:24.1.1" } } }, { "category": "product_version", "name": "24.2.2", "product": { "name": "Oracle Communications 24.2.2", "product_id": "T038379", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:24.2.2" } } }, { "category": "product_version", "name": "9.1.5", "product": { "name": "Oracle Communications 9.1.5", "product_id": "T038380", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:9.1.5" } } }, { "category": "product_version", "name": "9.1.0", "product": { "name": "Oracle Communications 9.1.0", "product_id": "T038381", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:9.1.0" } } }, { "category": "product_version", "name": "14", "product": { "name": "Oracle Communications 14.0", "product_id": "T038382", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:14.0" } } }, { "category": "product_version", "name": "9.1.1.9.0", "product": { "name": "Oracle Communications 9.1.1.9.0", "product_id": "T038383", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:9.1.1.9.0" } } }, { "category": "product_version", "name": "14.0.0.1", "product": { "name": "Oracle Communications 14.0.0.1", "product_id": "T038384", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:14.0.0.1" } } }, { "category": "product_version", "name": "17.0.1", "product": { "name": "Oracle Communications 17.0.1", "product_id": "T038385", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:17.0.1" } } }, { "category": "product_version_range", "name": "\u003c10.4.0.4", "product": { "name": "Oracle Communications \u003c10.4.0.4", "product_id": "T038386" } }, { "category": "product_version", "name": "10.4.0.4", "product": { "name": "Oracle Communications 10.4.0.4", "product_id": "T038386-fixed", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:10.4.0.4" } } }, { "category": "product_version_range", "name": "\u003c=9.1.1.8.0", "product": { "name": "Oracle Communications \u003c=9.1.1.8.0", "product_id": "T038426" } }, { "category": "product_version_range", "name": "\u003c=9.1.1.8.0", "product": { "name": "Oracle Communications \u003c=9.1.1.8.0", "product_id": "T038426-fixed" } } ], "category": "product_name", "name": "Communications" } ], "category": "vendor", "name": "Oracle" } ] }, "vulnerabilities": [ { "cve": "CVE-2022-2068", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2022-2068" }, { "cve": "CVE-2022-23437", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2022-23437" }, { "cve": "CVE-2022-2601", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2022-2601" }, { "cve": "CVE-2022-36760", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2022-36760" }, { "cve": "CVE-2023-2953", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2023-2953" }, { "cve": "CVE-2023-3635", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2023-3635" }, { "cve": "CVE-2023-38408", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2023-38408" }, { "cve": "CVE-2023-4043", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2023-4043" }, { "cve": "CVE-2023-46136", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2023-46136" }, { "cve": "CVE-2023-48795", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2023-48795" }, { "cve": "CVE-2023-51775", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2023-51775" }, { "cve": "CVE-2023-5685", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2023-5685" }, { "cve": "CVE-2023-6597", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2023-6597" }, { "cve": "CVE-2023-6816", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2023-6816" }, { "cve": "CVE-2024-0450", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-0450" }, { "cve": "CVE-2024-22020", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-22020" }, { "cve": "CVE-2024-22257", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-22257" }, { "cve": "CVE-2024-22262", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-22262" }, { "cve": "CVE-2024-23672", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-23672" }, { "cve": "CVE-2024-2398", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-2398" }, { "cve": "CVE-2024-25062", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-25062" }, { "cve": "CVE-2024-25638", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-25638" }, { "cve": "CVE-2024-26308", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-26308" }, { "cve": "CVE-2024-28182", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-28182" }, { "cve": "CVE-2024-28849", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-28849" }, { "cve": "CVE-2024-29025", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-29025" }, { "cve": "CVE-2024-29736", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-29736" }, { "cve": "CVE-2024-29857", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-29857" }, { "cve": "CVE-2024-30251", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-30251" }, { "cve": "CVE-2024-31080", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-31080" }, { "cve": "CVE-2024-31744", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-31744" }, { "cve": "CVE-2024-32760", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-32760" }, { "cve": "CVE-2024-33602", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-33602" }, { "cve": "CVE-2024-34750", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-34750" }, { "cve": "CVE-2024-37371", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-37371" }, { "cve": "CVE-2024-37891", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-37891" }, { "cve": "CVE-2024-38816", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-38816" }, { "cve": "CVE-2024-40898", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-40898" }, { "cve": "CVE-2024-43044", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-43044" }, { "cve": "CVE-2024-45492", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-45492" }, { "cve": "CVE-2024-4577", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-4577" }, { "cve": "CVE-2024-4603", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-4603" }, { "cve": "CVE-2024-5971", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-5971" }, { "cve": "CVE-2024-6162", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-6162" }, { "cve": "CVE-2024-6387", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-6387" }, { "cve": "CVE-2024-7254", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T036209", "T036205", "T036206", "T036207", "T036208", "T034147", "T038386", "T034146", "T034145", "T034144", "T038382", "T038383", "T038384", "T038385", "T038380", "T038381", "T027338", "T027333", "T028684", "T038379", "T038376", "T038378", "T036195", "T038373", "T036196", "T032090", "T032091" ], "last_affected": [ "T038426", "T036197", "T038375", "T038377" ] }, "release_date": "2024-10-15T22:00:00.000+00:00", "title": "CVE-2024-7254" } ] }
rhsa-2024:5815
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for the nodejs:20 module is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. \n\nSecurity Fix(es):\n\n* nodejs: Bypass network import restriction via data URL (CVE-2024-22020)\n\n* nodejs: fs.lstat bypasses permission model (CVE-2024-22018)\n\n* nodejs: fs.fchown/fchmod bypasses permission model (CVE-2024-36137)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2024:5815", "url": "https://access.redhat.com/errata/RHSA-2024:5815" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "2296417", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2296417" }, { "category": "external", "summary": "2296990", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2296990" }, { "category": "external", "summary": "2299281", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2299281" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_5815.json" } ], "title": "Red Hat Security Advisory: nodejs:20 security update", "tracking": { "current_release_date": "2025-09-25T15:01:32+00:00", "generator": { "date": "2025-09-25T15:01:32+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.6.8" } }, "id": "RHSA-2024:5815", "initial_release_date": "2024-08-26T08:12:15+00:00", "revision_history": [ { "date": "2024-08-26T08:12:15+00:00", "number": "1", "summary": "Initial version" }, { "date": "2024-08-26T08:12:15+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2025-09-25T15:01:32+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux AppStream (v. 9)", "product": { "name": "Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.src.rpm-nodejs:20", "product": { "name": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.src.rpm (nodejs:20)", "product_id": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.src.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=src\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm-nodejs:20", "product": { "name": "nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm (nodejs:20)", "product_id": "nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-nodemon@3.0.1-1.module%2Bel9.3.0.z%2B20478%2B84a9f781?arch=src\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm-nodejs:20", "product": { "name": "nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm (nodejs:20)", "product_id": "nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-packaging@2021.06-4.module%2Bel9.3.0%2B19518%2B63aad52d?arch=src\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "nodejs-docs-20.16.0-1.module+el9.4.0+22197+9e60f127.noarch.rpm-nodejs:20", "product": { "name": "nodejs-docs-20.16.0-1.module+el9.4.0+22197+9e60f127.noarch.rpm (nodejs:20)", "product_id": "nodejs-docs-20.16.0-1.module+el9.4.0+22197+9e60f127.noarch.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-docs@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=noarch\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm-nodejs:20", "product": { "name": "nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm (nodejs:20)", "product_id": "nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-nodemon@3.0.1-1.module%2Bel9.3.0.z%2B20478%2B84a9f781?arch=noarch\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "product": { "name": "nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm (nodejs:20)", "product_id": "nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-packaging@2021.06-4.module%2Bel9.3.0%2B19518%2B63aad52d?arch=noarch\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "product": { "name": "nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm (nodejs:20)", "product_id": "nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-packaging-bundler@2021.06-4.module%2Bel9.3.0%2B19518%2B63aad52d?arch=noarch\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "product": { "name": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm (nodejs:20)", "product_id": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "product": { "name": "nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm (nodejs:20)", "product_id": "nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "product": { "name": "nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm (nodejs:20)", "product_id": "nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "product": { "name": "nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm (nodejs:20)", "product_id": "nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "product": { "name": "nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm (nodejs:20)", "product_id": "nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-full-i18n@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "product": { "name": "npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.aarch64.rpm (nodejs:20)", "product_id": "npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@10.8.1-1.20.16.0.1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "product": { "name": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm (nodejs:20)", "product_id": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "product": { "name": "nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm (nodejs:20)", "product_id": "nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "product": { "name": "nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm (nodejs:20)", "product_id": "nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "product": { "name": "nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm (nodejs:20)", "product_id": "nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "product": { "name": "nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm (nodejs:20)", "product_id": "nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-full-i18n@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "product": { "name": "npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.ppc64le.rpm (nodejs:20)", "product_id": "npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@10.8.1-1.20.16.0.1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "product": { "name": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm (nodejs:20)", "product_id": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "product": { "name": "nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm (nodejs:20)", "product_id": "nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "product": { "name": "nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm (nodejs:20)", "product_id": "nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "product": { "name": "nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm (nodejs:20)", "product_id": "nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "product": { "name": "nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm (nodejs:20)", "product_id": "nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-full-i18n@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "product": { "name": "npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.s390x.rpm (nodejs:20)", "product_id": "npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@10.8.1-1.20.16.0.1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "product": { "name": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm (nodejs:20)", "product_id": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "product": { "name": "nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm (nodejs:20)", "product_id": "nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "product": { "name": "nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm (nodejs:20)", "product_id": "nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "product": { "name": "nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm (nodejs:20)", "product_id": "nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "product": { "name": "nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm (nodejs:20)", "product_id": "nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-full-i18n@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "product": { "name": "npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.x86_64.rpm (nodejs:20)", "product_id": "npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@10.8.1-1.20.16.0.1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20" }, "product_reference": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20" }, "product_reference": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20" }, "product_reference": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.src.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.src.rpm-nodejs:20" }, "product_reference": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.src.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20" }, "product_reference": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20" }, "product_reference": "nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20" }, "product_reference": "nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20" }, "product_reference": "nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20" }, "product_reference": "nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20" }, "product_reference": "nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20" }, "product_reference": "nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20" }, "product_reference": "nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20" }, "product_reference": "nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20" }, "product_reference": "nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20" }, "product_reference": "nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20" }, "product_reference": "nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20" }, "product_reference": "nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-docs-20.16.0-1.module+el9.4.0+22197+9e60f127.noarch.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el9.4.0+22197+9e60f127.noarch.rpm-nodejs:20" }, "product_reference": "nodejs-docs-20.16.0-1.module+el9.4.0+22197+9e60f127.noarch.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20" }, "product_reference": "nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20" }, "product_reference": "nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20" }, "product_reference": "nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20" }, "product_reference": "nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm-nodejs:20" }, "product_reference": "nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm-nodejs:20" }, "product_reference": "nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20" }, "product_reference": "nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm-nodejs:20" }, "product_reference": "nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20" }, "product_reference": "nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.aarch64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20" }, "product_reference": "npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.ppc64le.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20" }, "product_reference": "npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.s390x.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20" }, "product_reference": "npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.x86_64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20" }, "product_reference": "npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-22018", "discovery_date": "2024-07-10T02:20:15+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2296990" } ], "notes": [ { "category": "description", "text": "A flaw was found in the Node.js package. This flaw arises from an inadequate permission model that fails to restrict file stats through the fs.lstat API. As a result, malicious actors can retrieve stats from files they do not have explicit read access to.", "title": "Vulnerability description" }, { "category": "summary", "text": "nodejs: fs.lstat bypasses permission model", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el9.4.0+22197+9e60f127.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-22018" }, { "category": "external", "summary": "RHBZ#2296990", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2296990" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-22018", "url": "https://www.cve.org/CVERecord?id=CVE-2024-22018" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-22018", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-22018" }, { "category": "external", "summary": "https://hackerone.com/reports/2145862", "url": "https://hackerone.com/reports/2145862" } ], "release_date": "2024-07-10T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-08-26T08:12:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el9.4.0+22197+9e60f127.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:5815" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 2.9, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.0" }, "products": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el9.4.0+22197+9e60f127.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "nodejs: fs.lstat bypasses permission model" }, { "cve": "CVE-2024-22020", "discovery_date": "2024-07-09T02:20:08+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2296417" } ], "notes": [ { "category": "description", "text": "A flaw was found in the Node.js package. By embedding non-network imports in data URLs, this flaw allows an attacker to execute arbitrary code, compromising system security.", "title": "Vulnerability description" }, { "category": "summary", "text": "nodejs: Bypass network import restriction via data URL", "title": "Vulnerability summary" }, { "category": "other", "text": "This vulnerability is categorized as moderate severity rather than high due to its specific conditions for exploitation and impact scope. While the flaw permits bypassing network import restrictions via data URLs to execute arbitrary code, its exploitation is contingent on the attacker\u2019s ability to inject and execute code within a controlled environment. The impact is constrained to scenarios where the vulnerable application processes data URLs and lacks robust validation mechanisms. Additionally, this issue requires the attacker to exploit specific code paths and permissions, which limits its widespread applicability.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el9.4.0+22197+9e60f127.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-22020" }, { "category": "external", "summary": "RHBZ#2296417", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2296417" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-22020", "url": "https://www.cve.org/CVERecord?id=CVE-2024-22020" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-22020", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-22020" }, { "category": "external", "summary": "https://hackerone.com/reports/2092749", "url": "https://hackerone.com/reports/2092749" } ], "release_date": "2024-07-09T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-08-26T08:12:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el9.4.0+22197+9e60f127.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:5815" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el9.4.0+22197+9e60f127.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H", "version": "3.1" }, "products": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el9.4.0+22197+9e60f127.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "nodejs: Bypass network import restriction via data URL" }, { "cve": "CVE-2024-36137", "cwe": { "id": "CWE-732", "name": "Incorrect Permission Assignment for Critical Resource" }, "discovery_date": "2024-07-22T14:03:28+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2299281" } ], "notes": [ { "category": "description", "text": "A flaw was found in Node.js, affecting users of the experimental permission model when the --allow-fs-write flag is used. The Node.js Permission Model does not operate on file descriptors. However, operations such as fs.fchown or fs.fchmod can use a \"read-only\" file descriptor to change the owner and permissions of a file.", "title": "Vulnerability description" }, { "category": "summary", "text": "nodejs: fs.fchown/fchmod bypasses permission model", "title": "Vulnerability summary" }, { "category": "other", "text": "This vulnerability is specific to the Permission Model, which is currently an experimental feature of Node.js.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el9.4.0+22197+9e60f127.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-36137" }, { "category": "external", "summary": "RHBZ#2299281", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2299281" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-36137", "url": "https://www.cve.org/CVERecord?id=CVE-2024-36137" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-36137", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-36137" } ], "release_date": "2024-07-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-08-26T08:12:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el9.4.0+22197+9e60f127.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:5815" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 3.9, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N", "version": "3.1" }, "products": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el9.4.0+22197+9e60f127.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "nodejs: fs.fchown/fchmod bypasses permission model" } ] }
rhsa-2024_5814
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for the nodejs:20 module is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. \n\nSecurity Fix(es):\n\n* node-tar: denial of service while parsing a tar file due to lack of folders depth validation (CVE-2024-28863)\n\n* nodejs: Bypass network import restriction via data URL (CVE-2024-22020)\n\n* nodejs: fs.lstat bypasses permission model (CVE-2024-22018)\n\n* nodejs: fs.fchown/fchmod bypasses permission model (CVE-2024-36137)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2024:5814", "url": "https://access.redhat.com/errata/RHSA-2024:5814" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "2293200", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2293200" }, { "category": "external", "summary": "2296417", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2296417" }, { "category": "external", "summary": "2296990", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2296990" }, { "category": "external", "summary": "2299281", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2299281" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_5814.json" } ], "title": "Red Hat Security Advisory: nodejs:20 security update", "tracking": { "current_release_date": "2025-01-06T17:57:53+00:00", "generator": { "date": "2025-01-06T17:57:53+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.5" } }, "id": "RHSA-2024:5814", "initial_release_date": "2024-08-26T08:36:35+00:00", "revision_history": [ { "date": "2024-08-26T08:36:35+00:00", "number": "1", "summary": "Initial version" }, { "date": "2024-08-26T08:36:35+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2025-01-06T17:57:53+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux AppStream (v. 8)", "product": { "name": "Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "nodejs:20:8100020240808073736:489197e6", "product": { "name": "nodejs:20:8100020240808073736:489197e6", "product_id": "nodejs:20:8100020240808073736:489197e6", "product_identification_helper": { "purl": "pkg:rpmmod/redhat/nodejs@20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "nodejs-docs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.noarch", "product": { "name": "nodejs-docs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.noarch", "product_id": "nodejs-docs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-docs@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=noarch\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-nodemon-0:3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch", "product": { "name": "nodejs-nodemon-0:3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch", "product_id": "nodejs-nodemon-0:3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-nodemon@3.0.1-1.module%2Bel8.9.0%2B20473%2Bc4e3d824?arch=noarch" } } }, { "category": "product_version", "name": "nodejs-packaging-0:2021.06-4.module+el8.9.0+19519+e25b965a.noarch", "product": { "name": "nodejs-packaging-0:2021.06-4.module+el8.9.0+19519+e25b965a.noarch", "product_id": "nodejs-packaging-0:2021.06-4.module+el8.9.0+19519+e25b965a.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-packaging@2021.06-4.module%2Bel8.9.0%2B19519%2Be25b965a?arch=noarch" } } }, { "category": "product_version", "name": "nodejs-packaging-bundler-0:2021.06-4.module+el8.9.0+19519+e25b965a.noarch", "product": { "name": "nodejs-packaging-bundler-0:2021.06-4.module+el8.9.0+19519+e25b965a.noarch", "product_id": "nodejs-packaging-bundler-0:2021.06-4.module+el8.9.0+19519+e25b965a.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-packaging-bundler@2021.06-4.module%2Bel8.9.0%2B19519%2Be25b965a?arch=noarch" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.src", "product": { "name": "nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.src", "product_id": "nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=src\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-nodemon-0:3.0.1-1.module+el8.9.0+20473+c4e3d824.src", "product": { "name": "nodejs-nodemon-0:3.0.1-1.module+el8.9.0+20473+c4e3d824.src", "product_id": "nodejs-nodemon-0:3.0.1-1.module+el8.9.0+20473+c4e3d824.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-nodemon@3.0.1-1.module%2Bel8.9.0%2B20473%2Bc4e3d824?arch=src" } } }, { "category": "product_version", "name": "nodejs-packaging-0:2021.06-4.module+el8.9.0+19519+e25b965a.src", "product": { "name": "nodejs-packaging-0:2021.06-4.module+el8.9.0+19519+e25b965a.src", "product_id": "nodejs-packaging-0:2021.06-4.module+el8.9.0+19519+e25b965a.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-packaging@2021.06-4.module%2Bel8.9.0%2B19519%2Be25b965a?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "product": { "name": "nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "product_id": "nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "product": { "name": "nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "product_id": "nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "product": { "name": "nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "product_id": "nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "product": { "name": "nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "product_id": "nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "product": { "name": "nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "product_id": "nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-full-i18n@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64", "product": { "name": "npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64", "product_id": "npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@10.8.1-1.20.16.0.1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=aarch64\u0026epoch=1" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "product": { "name": "nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "product_id": "nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "product": { "name": "nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "product_id": "nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "product": { "name": "nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "product_id": "nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "product": { "name": "nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "product_id": "nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "product": { "name": "nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "product_id": "nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-full-i18n@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le", "product": { "name": "npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le", "product_id": "npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@10.8.1-1.20.16.0.1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=ppc64le\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "product": { "name": "nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "product_id": "nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "product": { "name": "nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "product_id": "nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "product": { "name": "nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "product_id": "nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "product": { "name": "nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "product_id": "nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "product": { "name": "nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "product_id": "nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-full-i18n@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x", "product": { "name": "npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x", "product_id": "npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@10.8.1-1.20.16.0.1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=s390x\u0026epoch=1" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "product": { "name": "nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "product_id": "nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "product": { "name": "nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "product_id": "nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "product": { "name": "nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "product_id": "nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "product": { "name": "nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "product_id": "nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "product": { "name": "nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "product_id": "nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-full-i18n@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64", "product": { "name": "npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64", "product_id": "npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@10.8.1-1.20.16.0.1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "nodejs:20:8100020240808073736:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6" }, "product_reference": "nodejs:20:8100020240808073736:489197e6", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64 as a component of nodejs:20:8100020240808073736:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64" }, "product_reference": "nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le as a component of nodejs:20:8100020240808073736:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le" }, "product_reference": "nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x as a component of nodejs:20:8100020240808073736:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x" }, "product_reference": "nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.src as a component of nodejs:20:8100020240808073736:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.src" }, "product_reference": "nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.src", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64 as a component of nodejs:20:8100020240808073736:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64" }, "product_reference": "nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64 as a component of nodejs:20:8100020240808073736:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64" }, "product_reference": "nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le as a component of nodejs:20:8100020240808073736:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le" }, "product_reference": "nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x as a component of nodejs:20:8100020240808073736:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x" }, "product_reference": "nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64 as a component of nodejs:20:8100020240808073736:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64" }, "product_reference": "nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64 as a component of nodejs:20:8100020240808073736:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64" }, "product_reference": "nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le as a component of nodejs:20:8100020240808073736:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le" }, "product_reference": "nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x as a component of nodejs:20:8100020240808073736:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x" }, "product_reference": "nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64 as a component of nodejs:20:8100020240808073736:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64" }, "product_reference": "nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64 as a component of nodejs:20:8100020240808073736:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64" }, "product_reference": "nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le as a component of nodejs:20:8100020240808073736:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le" }, "product_reference": "nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x as a component of nodejs:20:8100020240808073736:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x" }, "product_reference": "nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64 as a component of nodejs:20:8100020240808073736:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64" }, "product_reference": "nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-docs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.noarch as a component of nodejs:20:8100020240808073736:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-docs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.noarch" }, "product_reference": "nodejs-docs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.noarch", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64 as a component of nodejs:20:8100020240808073736:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64" }, "product_reference": "nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le as a component of nodejs:20:8100020240808073736:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le" }, "product_reference": "nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x as a component of nodejs:20:8100020240808073736:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x" }, "product_reference": "nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64 as a component of nodejs:20:8100020240808073736:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64" }, "product_reference": "nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-nodemon-0:3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch as a component of nodejs:20:8100020240808073736:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-nodemon-0:3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch" }, "product_reference": "nodejs-nodemon-0:3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-nodemon-0:3.0.1-1.module+el8.9.0+20473+c4e3d824.src as a component of nodejs:20:8100020240808073736:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-nodemon-0:3.0.1-1.module+el8.9.0+20473+c4e3d824.src" }, "product_reference": "nodejs-nodemon-0:3.0.1-1.module+el8.9.0+20473+c4e3d824.src", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-packaging-0:2021.06-4.module+el8.9.0+19519+e25b965a.noarch as a component of nodejs:20:8100020240808073736:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-packaging-0:2021.06-4.module+el8.9.0+19519+e25b965a.noarch" }, "product_reference": "nodejs-packaging-0:2021.06-4.module+el8.9.0+19519+e25b965a.noarch", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-packaging-0:2021.06-4.module+el8.9.0+19519+e25b965a.src as a component of nodejs:20:8100020240808073736:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-packaging-0:2021.06-4.module+el8.9.0+19519+e25b965a.src" }, "product_reference": "nodejs-packaging-0:2021.06-4.module+el8.9.0+19519+e25b965a.src", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-packaging-bundler-0:2021.06-4.module+el8.9.0+19519+e25b965a.noarch as a component of nodejs:20:8100020240808073736:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-packaging-bundler-0:2021.06-4.module+el8.9.0+19519+e25b965a.noarch" }, "product_reference": "nodejs-packaging-bundler-0:2021.06-4.module+el8.9.0+19519+e25b965a.noarch", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64 as a component of nodejs:20:8100020240808073736:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64" }, "product_reference": "npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le as a component of nodejs:20:8100020240808073736:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le" }, "product_reference": "npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x as a component of nodejs:20:8100020240808073736:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x" }, "product_reference": "npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64 as a component of nodejs:20:8100020240808073736:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64" }, "product_reference": "npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-22018", "discovery_date": "2024-07-10T02:20:15+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2296990" } ], "notes": [ { "category": "description", "text": "A flaw was found in the Node.js package. This flaw arises from an inadequate permission model that fails to restrict file stats through the fs.lstat API. As a result, malicious actors can retrieve stats from files they do not have explicit read access to.", "title": "Vulnerability description" }, { "category": "summary", "text": "nodejs: fs.lstat bypasses permission model", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-docs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-nodemon-0:3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-nodemon-0:3.0.1-1.module+el8.9.0+20473+c4e3d824.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-packaging-0:2021.06-4.module+el8.9.0+19519+e25b965a.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-packaging-0:2021.06-4.module+el8.9.0+19519+e25b965a.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-packaging-bundler-0:2021.06-4.module+el8.9.0+19519+e25b965a.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-22018" }, { "category": "external", "summary": "RHBZ#2296990", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2296990" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-22018", "url": "https://www.cve.org/CVERecord?id=CVE-2024-22018" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-22018", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-22018" }, { "category": "external", "summary": "https://hackerone.com/reports/2145862", "url": "https://hackerone.com/reports/2145862" } ], "release_date": "2024-07-10T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-08-26T08:36:35+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-docs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-nodemon-0:3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-nodemon-0:3.0.1-1.module+el8.9.0+20473+c4e3d824.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-packaging-0:2021.06-4.module+el8.9.0+19519+e25b965a.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-packaging-0:2021.06-4.module+el8.9.0+19519+e25b965a.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-packaging-bundler-0:2021.06-4.module+el8.9.0+19519+e25b965a.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:5814" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 2.9, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.0" }, "products": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-docs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-nodemon-0:3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-nodemon-0:3.0.1-1.module+el8.9.0+20473+c4e3d824.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-packaging-0:2021.06-4.module+el8.9.0+19519+e25b965a.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-packaging-0:2021.06-4.module+el8.9.0+19519+e25b965a.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-packaging-bundler-0:2021.06-4.module+el8.9.0+19519+e25b965a.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "nodejs: fs.lstat bypasses permission model" }, { "cve": "CVE-2024-22020", "discovery_date": "2024-07-09T02:20:08+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2296417" } ], "notes": [ { "category": "description", "text": "A flaw was found in the Node.js package. By embedding non-network imports in data URLs, this flaw allows an attacker to execute arbitrary code, compromising system security.", "title": "Vulnerability description" }, { "category": "summary", "text": "nodejs: Bypass network import restriction via data URL", "title": "Vulnerability summary" }, { "category": "other", "text": "This vulnerability is categorized as moderate severity rather than high due to its specific conditions for exploitation and impact scope. While the flaw permits bypassing network import restrictions via data URLs to execute arbitrary code, its exploitation is contingent on the attacker\u2019s ability to inject and execute code within a controlled environment. The impact is constrained to scenarios where the vulnerable application processes data URLs and lacks robust validation mechanisms. Additionally, this issue requires the attacker to exploit specific code paths and permissions, which limits its widespread applicability.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-docs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-nodemon-0:3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-nodemon-0:3.0.1-1.module+el8.9.0+20473+c4e3d824.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-packaging-0:2021.06-4.module+el8.9.0+19519+e25b965a.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-packaging-0:2021.06-4.module+el8.9.0+19519+e25b965a.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-packaging-bundler-0:2021.06-4.module+el8.9.0+19519+e25b965a.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-22020" }, { "category": "external", "summary": "RHBZ#2296417", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2296417" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-22020", "url": "https://www.cve.org/CVERecord?id=CVE-2024-22020" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-22020", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-22020" }, { "category": "external", "summary": "https://hackerone.com/reports/2092749", "url": "https://hackerone.com/reports/2092749" } ], "release_date": "2024-07-09T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-08-26T08:36:35+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-docs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-nodemon-0:3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-nodemon-0:3.0.1-1.module+el8.9.0+20473+c4e3d824.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-packaging-0:2021.06-4.module+el8.9.0+19519+e25b965a.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-packaging-0:2021.06-4.module+el8.9.0+19519+e25b965a.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-packaging-bundler-0:2021.06-4.module+el8.9.0+19519+e25b965a.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:5814" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-docs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-nodemon-0:3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-nodemon-0:3.0.1-1.module+el8.9.0+20473+c4e3d824.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-packaging-0:2021.06-4.module+el8.9.0+19519+e25b965a.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-packaging-0:2021.06-4.module+el8.9.0+19519+e25b965a.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-packaging-bundler-0:2021.06-4.module+el8.9.0+19519+e25b965a.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H", "version": "3.1" }, "products": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-docs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-nodemon-0:3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-nodemon-0:3.0.1-1.module+el8.9.0+20473+c4e3d824.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-packaging-0:2021.06-4.module+el8.9.0+19519+e25b965a.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-packaging-0:2021.06-4.module+el8.9.0+19519+e25b965a.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-packaging-bundler-0:2021.06-4.module+el8.9.0+19519+e25b965a.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "nodejs: Bypass network import restriction via data URL" }, { "cve": "CVE-2024-28863", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2024-06-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2293200" } ], "notes": [ { "category": "description", "text": "A flaw was found in ISAACS\u0027s node-tar, where it is vulnerable to a denial of service, caused by the lack of folder count validation. The vulnerability exists due to the application not properly controlling the consumption of internal resources while parsing a tar file. By sending a specially crafted request, a remote attacker can trigger resource exhaustion and perform a denial of service (DoS) attack.", "title": "Vulnerability description" }, { "category": "summary", "text": "node-tar: denial of service while parsing a tar file due to lack of folders depth validation", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-docs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-nodemon-0:3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-nodemon-0:3.0.1-1.module+el8.9.0+20473+c4e3d824.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-packaging-0:2021.06-4.module+el8.9.0+19519+e25b965a.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-packaging-0:2021.06-4.module+el8.9.0+19519+e25b965a.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-packaging-bundler-0:2021.06-4.module+el8.9.0+19519+e25b965a.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-28863" }, { "category": "external", "summary": "RHBZ#2293200", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2293200" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-28863", "url": "https://www.cve.org/CVERecord?id=CVE-2024-28863" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-28863", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28863" }, { "category": "external", "summary": "https://github.com/isaacs/node-tar/security/advisories/GHSA-f5x3-32g6-xq36", "url": "https://github.com/isaacs/node-tar/security/advisories/GHSA-f5x3-32g6-xq36" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240524-0005/", "url": "https://security.netapp.com/advisory/ntap-20240524-0005/" } ], "release_date": "2024-03-21T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-08-26T08:36:35+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-docs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-nodemon-0:3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-nodemon-0:3.0.1-1.module+el8.9.0+20473+c4e3d824.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-packaging-0:2021.06-4.module+el8.9.0+19519+e25b965a.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-packaging-0:2021.06-4.module+el8.9.0+19519+e25b965a.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-packaging-bundler-0:2021.06-4.module+el8.9.0+19519+e25b965a.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:5814" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-docs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-nodemon-0:3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-nodemon-0:3.0.1-1.module+el8.9.0+20473+c4e3d824.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-packaging-0:2021.06-4.module+el8.9.0+19519+e25b965a.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-packaging-0:2021.06-4.module+el8.9.0+19519+e25b965a.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-packaging-bundler-0:2021.06-4.module+el8.9.0+19519+e25b965a.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "node-tar: denial of service while parsing a tar file due to lack of folders depth validation" }, { "cve": "CVE-2024-36137", "cwe": { "id": "CWE-732", "name": "Incorrect Permission Assignment for Critical Resource" }, "discovery_date": "2024-07-22T14:03:28+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2299281" } ], "notes": [ { "category": "description", "text": "A flaw was found in Node.js, affecting users of the experimental permission model when the --allow-fs-write flag is used. The Node.js Permission Model does not operate on file descriptors. However, operations such as fs.fchown or fs.fchmod can use a \"read-only\" file descriptor to change the owner and permissions of a file.", "title": "Vulnerability description" }, { "category": "summary", "text": "nodejs: fs.fchown/fchmod bypasses permission model", "title": "Vulnerability summary" }, { "category": "other", "text": "This vulnerability is specific to the Permission Model, which is currently an experimental feature of Node.js.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-docs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-nodemon-0:3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-nodemon-0:3.0.1-1.module+el8.9.0+20473+c4e3d824.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-packaging-0:2021.06-4.module+el8.9.0+19519+e25b965a.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-packaging-0:2021.06-4.module+el8.9.0+19519+e25b965a.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-packaging-bundler-0:2021.06-4.module+el8.9.0+19519+e25b965a.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-36137" }, { "category": "external", "summary": "RHBZ#2299281", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2299281" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-36137", "url": "https://www.cve.org/CVERecord?id=CVE-2024-36137" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-36137", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-36137" } ], "release_date": "2024-07-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-08-26T08:36:35+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-docs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-nodemon-0:3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-nodemon-0:3.0.1-1.module+el8.9.0+20473+c4e3d824.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-packaging-0:2021.06-4.module+el8.9.0+19519+e25b965a.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-packaging-0:2021.06-4.module+el8.9.0+19519+e25b965a.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-packaging-bundler-0:2021.06-4.module+el8.9.0+19519+e25b965a.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:5814" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 3.9, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N", "version": "3.1" }, "products": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debuginfo-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-debugsource-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-devel-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-docs-1:20.16.0-1.module+el8.10.0+22203+a88c8310.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-full-i18n-1:20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-nodemon-0:3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-nodemon-0:3.0.1-1.module+el8.9.0+20473+c4e3d824.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-packaging-0:2021.06-4.module+el8.9.0+19519+e25b965a.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-packaging-0:2021.06-4.module+el8.9.0+19519+e25b965a.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:nodejs-packaging-bundler-0:2021.06-4.module+el8.9.0+19519+e25b965a.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:20:8100020240808073736:489197e6:npm-1:10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "nodejs: fs.fchown/fchmod bypasses permission model" } ] }
RHSA-2024:6147
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for the nodejs:18 module is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. \n\nSecurity Fix(es):\n\n* node-tar: denial of service while parsing a tar file due to lack of folders depth validation (CVE-2024-28863)\n\n* nodejs: Bypass network import restriction via data URL (CVE-2024-22020)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2024:6147", "url": "https://access.redhat.com/errata/RHSA-2024:6147" }, { "category": "external", "summary": "2296417", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2296417" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "2293200", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2293200" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_6147.json" } ], "title": "Red Hat Security Advisory: nodejs:18 security update", "tracking": { "current_release_date": "2025-10-07T09:28:36+00:00", "generator": { "date": "2025-10-07T09:28:36+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.6.9" } }, "id": "RHSA-2024:6147", "initial_release_date": "2024-09-03T02:29:11+00:00", "revision_history": [ { "date": "2024-09-03T02:29:11+00:00", "number": "1", "summary": "Initial version" }, { "date": "2024-09-03T02:29:11+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2025-10-07T09:28:36+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux AppStream (v. 9)", "product": { "name": "Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.src.rpm-nodejs:18", "product": { "name": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.src.rpm (nodejs:18)", "product_id": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.src.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=src\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.src.rpm-nodejs:18", "product": { "name": "nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.src.rpm (nodejs:18)", "product_id": "nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.src.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-nodemon@3.0.1-1.module%2Bel9.3.0%2B19762%2Bd716bf3b?arch=src\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.src.rpm-nodejs:18", "product": { "name": "nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.src.rpm (nodejs:18)", "product_id": "nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.src.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-packaging@2021.06-4.module%2Bel9.1.0%2B15718%2Be52ec601?arch=src\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "nodejs-docs-18.20.4-1.module+el9.4.0+22195+c221878e.noarch.rpm-nodejs:18", "product": { "name": "nodejs-docs-18.20.4-1.module+el9.4.0+22195+c221878e.noarch.rpm (nodejs:18)", "product_id": "nodejs-docs-18.20.4-1.module+el9.4.0+22195+c221878e.noarch.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-docs@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=noarch\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.noarch.rpm-nodejs:18", "product": { "name": "nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.noarch.rpm (nodejs:18)", "product_id": "nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.noarch.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-nodemon@3.0.1-1.module%2Bel9.3.0%2B19762%2Bd716bf3b?arch=noarch\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm-nodejs:18", "product": { "name": "nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm (nodejs:18)", "product_id": "nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-packaging@2021.06-4.module%2Bel9.1.0%2B15718%2Be52ec601?arch=noarch\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "nodejs-packaging-bundler-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm-nodejs:18", "product": { "name": "nodejs-packaging-bundler-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm (nodejs:18)", "product_id": "nodejs-packaging-bundler-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-packaging-bundler@2021.06-4.module%2Bel9.1.0%2B15718%2Be52ec601?arch=noarch\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "product": { "name": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm (nodejs:18)", "product_id": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "product": { "name": "nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm (nodejs:18)", "product_id": "nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "product": { "name": "nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm (nodejs:18)", "product_id": "nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "product": { "name": "nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm (nodejs:18)", "product_id": "nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "product": { "name": "nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm (nodejs:18)", "product_id": "nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-full-i18n@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "product": { "name": "npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.aarch64.rpm (nodejs:18)", "product_id": "npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@10.7.0-1.18.20.4.1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "product": { "name": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm (nodejs:18)", "product_id": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "product": { "name": "nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm (nodejs:18)", "product_id": "nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "product": { "name": "nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm (nodejs:18)", "product_id": "nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "product": { "name": "nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm (nodejs:18)", "product_id": "nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "product": { "name": "nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm (nodejs:18)", "product_id": "nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-full-i18n@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "product": { "name": "npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.ppc64le.rpm (nodejs:18)", "product_id": "npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@10.7.0-1.18.20.4.1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "product": { "name": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm (nodejs:18)", "product_id": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "product": { "name": "nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm (nodejs:18)", "product_id": "nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "product": { "name": "nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm (nodejs:18)", "product_id": "nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "product": { "name": "nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm (nodejs:18)", "product_id": "nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "product": { "name": "nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm (nodejs:18)", "product_id": "nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-full-i18n@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "product": { "name": "npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.s390x.rpm (nodejs:18)", "product_id": "npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@10.7.0-1.18.20.4.1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "product": { "name": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm (nodejs:18)", "product_id": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "product": { "name": "nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm (nodejs:18)", "product_id": "nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "product": { "name": "nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm (nodejs:18)", "product_id": "nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "product": { "name": "nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm (nodejs:18)", "product_id": "nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "product": { "name": "nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm (nodejs:18)", "product_id": "nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-full-i18n@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "product": { "name": "npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.x86_64.rpm (nodejs:18)", "product_id": "npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@10.7.0-1.18.20.4.1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18" }, "product_reference": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18" }, "product_reference": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18" }, "product_reference": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.src.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.src.rpm-nodejs:18" }, "product_reference": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.src.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18" }, "product_reference": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18" }, "product_reference": "nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18" }, "product_reference": "nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18" }, "product_reference": "nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18" }, "product_reference": "nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18" }, "product_reference": "nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18" }, "product_reference": "nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18" }, "product_reference": "nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18" }, "product_reference": "nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18" }, "product_reference": "nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18" }, "product_reference": "nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18" }, "product_reference": "nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18" }, "product_reference": "nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-docs-18.20.4-1.module+el9.4.0+22195+c221878e.noarch.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-docs-18.20.4-1.module+el9.4.0+22195+c221878e.noarch.rpm-nodejs:18" }, "product_reference": "nodejs-docs-18.20.4-1.module+el9.4.0+22195+c221878e.noarch.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18" }, "product_reference": "nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18" }, "product_reference": "nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18" }, "product_reference": "nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18" }, "product_reference": "nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.noarch.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.noarch.rpm-nodejs:18" }, "product_reference": "nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.noarch.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.src.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.src.rpm-nodejs:18" }, "product_reference": "nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.src.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm-nodejs:18" }, "product_reference": "nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.src.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.src.rpm-nodejs:18" }, "product_reference": "nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.src.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-packaging-bundler-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm-nodejs:18" }, "product_reference": "nodejs-packaging-bundler-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.aarch64.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18" }, "product_reference": "npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.ppc64le.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18" }, "product_reference": "npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.s390x.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18" }, "product_reference": "npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.x86_64.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18" }, "product_reference": "npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-22020", "discovery_date": "2024-07-09T02:20:08+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2296417" } ], "notes": [ { "category": "description", "text": "A flaw was found in the Node.js package. By embedding non-network imports in data URLs, this flaw allows an attacker to execute arbitrary code, compromising system security.", "title": "Vulnerability description" }, { "category": "summary", "text": "nodejs: Bypass network import restriction via data URL", "title": "Vulnerability summary" }, { "category": "other", "text": "This vulnerability is categorized as moderate severity rather than high due to its specific conditions for exploitation and impact scope. While the flaw permits bypassing network import restrictions via data URLs to execute arbitrary code, its exploitation is contingent on the attacker\u2019s ability to inject and execute code within a controlled environment. The impact is constrained to scenarios where the vulnerable application processes data URLs and lacks robust validation mechanisms. Additionally, this issue requires the attacker to exploit specific code paths and permissions, which limits its widespread applicability.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.src.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-docs-18.20.4-1.module+el9.4.0+22195+c221878e.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.src.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.src.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-22020" }, { "category": "external", "summary": "RHBZ#2296417", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2296417" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-22020", "url": "https://www.cve.org/CVERecord?id=CVE-2024-22020" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-22020", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-22020" }, { "category": "external", "summary": "https://hackerone.com/reports/2092749", "url": "https://hackerone.com/reports/2092749" } ], "release_date": "2024-07-09T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-09-03T02:29:11+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.src.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-docs-18.20.4-1.module+el9.4.0+22195+c221878e.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.src.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.src.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:6147" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.src.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-docs-18.20.4-1.module+el9.4.0+22195+c221878e.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.src.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.src.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H", "version": "3.1" }, "products": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.src.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-docs-18.20.4-1.module+el9.4.0+22195+c221878e.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.src.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.src.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "nodejs: Bypass network import restriction via data URL" }, { "cve": "CVE-2024-28863", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2024-06-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2293200" } ], "notes": [ { "category": "description", "text": "A flaw was found in ISAACS\u0027s node-tar, where it is vulnerable to a denial of service, caused by the lack of folder count validation. The vulnerability exists due to the application not properly controlling the consumption of internal resources while parsing a tar file. By sending a specially crafted request, a remote attacker can trigger resource exhaustion and perform a denial of service (DoS) attack.", "title": "Vulnerability description" }, { "category": "summary", "text": "node-tar: denial of service while parsing a tar file due to lack of folders depth validation", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.src.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-docs-18.20.4-1.module+el9.4.0+22195+c221878e.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.src.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.src.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-28863" }, { "category": "external", "summary": "RHBZ#2293200", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2293200" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-28863", "url": "https://www.cve.org/CVERecord?id=CVE-2024-28863" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-28863", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28863" }, { "category": "external", "summary": "https://github.com/isaacs/node-tar/security/advisories/GHSA-f5x3-32g6-xq36", "url": "https://github.com/isaacs/node-tar/security/advisories/GHSA-f5x3-32g6-xq36" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240524-0005/", "url": "https://security.netapp.com/advisory/ntap-20240524-0005/" } ], "release_date": "2024-03-21T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-09-03T02:29:11+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.src.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-docs-18.20.4-1.module+el9.4.0+22195+c221878e.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.src.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.src.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:6147" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.src.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-docs-18.20.4-1.module+el9.4.0+22195+c221878e.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.src.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.src.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "node-tar: denial of service while parsing a tar file due to lack of folders depth validation" } ] }
rhsa-2024:6147
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for the nodejs:18 module is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. \n\nSecurity Fix(es):\n\n* node-tar: denial of service while parsing a tar file due to lack of folders depth validation (CVE-2024-28863)\n\n* nodejs: Bypass network import restriction via data URL (CVE-2024-22020)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2024:6147", "url": "https://access.redhat.com/errata/RHSA-2024:6147" }, { "category": "external", "summary": "2296417", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2296417" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "2293200", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2293200" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_6147.json" } ], "title": "Red Hat Security Advisory: nodejs:18 security update", "tracking": { "current_release_date": "2025-10-07T09:28:36+00:00", "generator": { "date": "2025-10-07T09:28:36+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.6.9" } }, "id": "RHSA-2024:6147", "initial_release_date": "2024-09-03T02:29:11+00:00", "revision_history": [ { "date": "2024-09-03T02:29:11+00:00", "number": "1", "summary": "Initial version" }, { "date": "2024-09-03T02:29:11+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2025-10-07T09:28:36+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux AppStream (v. 9)", "product": { "name": "Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.src.rpm-nodejs:18", "product": { "name": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.src.rpm (nodejs:18)", "product_id": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.src.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=src\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.src.rpm-nodejs:18", "product": { "name": "nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.src.rpm (nodejs:18)", "product_id": "nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.src.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-nodemon@3.0.1-1.module%2Bel9.3.0%2B19762%2Bd716bf3b?arch=src\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.src.rpm-nodejs:18", "product": { "name": "nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.src.rpm (nodejs:18)", "product_id": "nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.src.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-packaging@2021.06-4.module%2Bel9.1.0%2B15718%2Be52ec601?arch=src\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "nodejs-docs-18.20.4-1.module+el9.4.0+22195+c221878e.noarch.rpm-nodejs:18", "product": { "name": "nodejs-docs-18.20.4-1.module+el9.4.0+22195+c221878e.noarch.rpm (nodejs:18)", "product_id": "nodejs-docs-18.20.4-1.module+el9.4.0+22195+c221878e.noarch.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-docs@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=noarch\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.noarch.rpm-nodejs:18", "product": { "name": "nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.noarch.rpm (nodejs:18)", "product_id": "nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.noarch.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-nodemon@3.0.1-1.module%2Bel9.3.0%2B19762%2Bd716bf3b?arch=noarch\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm-nodejs:18", "product": { "name": "nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm (nodejs:18)", "product_id": "nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-packaging@2021.06-4.module%2Bel9.1.0%2B15718%2Be52ec601?arch=noarch\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "nodejs-packaging-bundler-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm-nodejs:18", "product": { "name": "nodejs-packaging-bundler-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm (nodejs:18)", "product_id": "nodejs-packaging-bundler-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-packaging-bundler@2021.06-4.module%2Bel9.1.0%2B15718%2Be52ec601?arch=noarch\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "product": { "name": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm (nodejs:18)", "product_id": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "product": { "name": "nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm (nodejs:18)", "product_id": "nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "product": { "name": "nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm (nodejs:18)", "product_id": "nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "product": { "name": "nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm (nodejs:18)", "product_id": "nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "product": { "name": "nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm (nodejs:18)", "product_id": "nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-full-i18n@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "product": { "name": "npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.aarch64.rpm (nodejs:18)", "product_id": "npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@10.7.0-1.18.20.4.1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "product": { "name": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm (nodejs:18)", "product_id": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "product": { "name": "nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm (nodejs:18)", "product_id": "nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "product": { "name": "nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm (nodejs:18)", "product_id": "nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "product": { "name": "nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm (nodejs:18)", "product_id": "nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "product": { "name": "nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm (nodejs:18)", "product_id": "nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-full-i18n@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "product": { "name": "npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.ppc64le.rpm (nodejs:18)", "product_id": "npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@10.7.0-1.18.20.4.1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "product": { "name": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm (nodejs:18)", "product_id": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "product": { "name": "nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm (nodejs:18)", "product_id": "nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "product": { "name": "nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm (nodejs:18)", "product_id": "nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "product": { "name": "nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm (nodejs:18)", "product_id": "nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "product": { "name": "nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm (nodejs:18)", "product_id": "nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-full-i18n@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "product": { "name": "npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.s390x.rpm (nodejs:18)", "product_id": "npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@10.7.0-1.18.20.4.1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "product": { "name": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm (nodejs:18)", "product_id": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "product": { "name": "nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm (nodejs:18)", "product_id": "nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "product": { "name": "nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm (nodejs:18)", "product_id": "nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "product": { "name": "nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm (nodejs:18)", "product_id": "nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "product": { "name": "nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm (nodejs:18)", "product_id": "nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-full-i18n@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "product": { "name": "npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.x86_64.rpm (nodejs:18)", "product_id": "npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@10.7.0-1.18.20.4.1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:18:9040020240807131341:rhel9" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18" }, "product_reference": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18" }, "product_reference": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18" }, "product_reference": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.src.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.src.rpm-nodejs:18" }, "product_reference": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.src.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18" }, "product_reference": "nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18" }, "product_reference": "nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18" }, "product_reference": "nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18" }, "product_reference": "nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18" }, "product_reference": "nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18" }, "product_reference": "nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18" }, "product_reference": "nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18" }, "product_reference": "nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18" }, "product_reference": "nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18" }, "product_reference": "nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18" }, "product_reference": "nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18" }, "product_reference": "nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18" }, "product_reference": "nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-docs-18.20.4-1.module+el9.4.0+22195+c221878e.noarch.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-docs-18.20.4-1.module+el9.4.0+22195+c221878e.noarch.rpm-nodejs:18" }, "product_reference": "nodejs-docs-18.20.4-1.module+el9.4.0+22195+c221878e.noarch.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18" }, "product_reference": "nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18" }, "product_reference": "nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18" }, "product_reference": "nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18" }, "product_reference": "nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.noarch.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.noarch.rpm-nodejs:18" }, "product_reference": "nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.noarch.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.src.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.src.rpm-nodejs:18" }, "product_reference": "nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.src.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm-nodejs:18" }, "product_reference": "nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.src.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.src.rpm-nodejs:18" }, "product_reference": "nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.src.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-packaging-bundler-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm-nodejs:18" }, "product_reference": "nodejs-packaging-bundler-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.aarch64.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18" }, "product_reference": "npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.ppc64le.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18" }, "product_reference": "npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.s390x.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18" }, "product_reference": "npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.x86_64.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18" }, "product_reference": "npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-22020", "discovery_date": "2024-07-09T02:20:08+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2296417" } ], "notes": [ { "category": "description", "text": "A flaw was found in the Node.js package. By embedding non-network imports in data URLs, this flaw allows an attacker to execute arbitrary code, compromising system security.", "title": "Vulnerability description" }, { "category": "summary", "text": "nodejs: Bypass network import restriction via data URL", "title": "Vulnerability summary" }, { "category": "other", "text": "This vulnerability is categorized as moderate severity rather than high due to its specific conditions for exploitation and impact scope. While the flaw permits bypassing network import restrictions via data URLs to execute arbitrary code, its exploitation is contingent on the attacker\u2019s ability to inject and execute code within a controlled environment. The impact is constrained to scenarios where the vulnerable application processes data URLs and lacks robust validation mechanisms. Additionally, this issue requires the attacker to exploit specific code paths and permissions, which limits its widespread applicability.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.src.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-docs-18.20.4-1.module+el9.4.0+22195+c221878e.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.src.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.src.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-22020" }, { "category": "external", "summary": "RHBZ#2296417", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2296417" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-22020", "url": "https://www.cve.org/CVERecord?id=CVE-2024-22020" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-22020", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-22020" }, { "category": "external", "summary": "https://hackerone.com/reports/2092749", "url": "https://hackerone.com/reports/2092749" } ], "release_date": "2024-07-09T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-09-03T02:29:11+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.src.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-docs-18.20.4-1.module+el9.4.0+22195+c221878e.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.src.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.src.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:6147" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.src.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-docs-18.20.4-1.module+el9.4.0+22195+c221878e.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.src.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.src.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H", "version": "3.1" }, "products": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.src.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-docs-18.20.4-1.module+el9.4.0+22195+c221878e.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.src.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.src.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "nodejs: Bypass network import restriction via data URL" }, { "cve": "CVE-2024-28863", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2024-06-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2293200" } ], "notes": [ { "category": "description", "text": "A flaw was found in ISAACS\u0027s node-tar, where it is vulnerable to a denial of service, caused by the lack of folder count validation. The vulnerability exists due to the application not properly controlling the consumption of internal resources while parsing a tar file. By sending a specially crafted request, a remote attacker can trigger resource exhaustion and perform a denial of service (DoS) attack.", "title": "Vulnerability description" }, { "category": "summary", "text": "node-tar: denial of service while parsing a tar file due to lack of folders depth validation", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.src.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-docs-18.20.4-1.module+el9.4.0+22195+c221878e.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.src.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.src.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-28863" }, { "category": "external", "summary": "RHBZ#2293200", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2293200" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-28863", "url": "https://www.cve.org/CVERecord?id=CVE-2024-28863" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-28863", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28863" }, { "category": "external", "summary": "https://github.com/isaacs/node-tar/security/advisories/GHSA-f5x3-32g6-xq36", "url": "https://github.com/isaacs/node-tar/security/advisories/GHSA-f5x3-32g6-xq36" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240524-0005/", "url": "https://security.netapp.com/advisory/ntap-20240524-0005/" } ], "release_date": "2024-03-21T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-09-03T02:29:11+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.src.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-docs-18.20.4-1.module+el9.4.0+22195+c221878e.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.src.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.src.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:6147" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.src.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-docs-18.20.4-1.module+el9.4.0+22195+c221878e.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0+19762+d716bf3b.src.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.src.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.aarch64.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.ppc64le.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.s390x.rpm-nodejs:18", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.x86_64.rpm-nodejs:18" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "node-tar: denial of service while parsing a tar file due to lack of folders depth validation" } ] }
RHSA-2024:5814
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for the nodejs:20 module is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. \n\nSecurity Fix(es):\n\n* node-tar: denial of service while parsing a tar file due to lack of folders depth validation (CVE-2024-28863)\n\n* nodejs: Bypass network import restriction via data URL (CVE-2024-22020)\n\n* nodejs: fs.lstat bypasses permission model (CVE-2024-22018)\n\n* nodejs: fs.fchown/fchmod bypasses permission model (CVE-2024-36137)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2024:5814", "url": "https://access.redhat.com/errata/RHSA-2024:5814" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "2293200", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2293200" }, { "category": "external", "summary": "2296417", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2296417" }, { "category": "external", "summary": "2296990", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2296990" }, { "category": "external", "summary": "2299281", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2299281" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_5814.json" } ], "title": "Red Hat Security Advisory: nodejs:20 security update", "tracking": { "current_release_date": "2025-10-07T09:28:38+00:00", "generator": { "date": "2025-10-07T09:28:38+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.6.9" } }, "id": "RHSA-2024:5814", "initial_release_date": "2024-08-26T08:36:35+00:00", "revision_history": [ { "date": "2024-08-26T08:36:35+00:00", "number": "1", "summary": "Initial version" }, { "date": "2024-08-26T08:36:35+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2025-10-07T09:28:38+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux AppStream (v. 8)", "product": { "name": "Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.src.rpm-nodejs:20", "product": { "name": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.src.rpm (nodejs:20)", "product_id": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.src.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=src\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.src.rpm-nodejs:20", "product": { "name": "nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.src.rpm (nodejs:20)", "product_id": "nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.src.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-nodemon@3.0.1-1.module%2Bel8.9.0%2B20473%2Bc4e3d824?arch=src\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.src.rpm-nodejs:20", "product": { "name": "nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.src.rpm (nodejs:20)", "product_id": "nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.src.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-packaging@2021.06-4.module%2Bel8.9.0%2B19519%2Be25b965a?arch=src\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "nodejs-docs-20.16.0-1.module+el8.10.0+22203+a88c8310.noarch.rpm-nodejs:20", "product": { "name": "nodejs-docs-20.16.0-1.module+el8.10.0+22203+a88c8310.noarch.rpm (nodejs:20)", "product_id": "nodejs-docs-20.16.0-1.module+el8.10.0+22203+a88c8310.noarch.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-docs@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=noarch\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch.rpm-nodejs:20", "product": { "name": "nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch.rpm (nodejs:20)", "product_id": "nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-nodemon@3.0.1-1.module%2Bel8.9.0%2B20473%2Bc4e3d824?arch=noarch\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "product": { "name": "nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm (nodejs:20)", "product_id": "nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-packaging@2021.06-4.module%2Bel8.9.0%2B19519%2Be25b965a?arch=noarch\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "product": { "name": "nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm (nodejs:20)", "product_id": "nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-packaging-bundler@2021.06-4.module%2Bel8.9.0%2B19519%2Be25b965a?arch=noarch\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "product": { "name": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm (nodejs:20)", "product_id": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "product": { "name": "nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm (nodejs:20)", "product_id": "nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "product": { "name": "nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm (nodejs:20)", "product_id": "nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "product": { "name": "nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm (nodejs:20)", "product_id": "nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "product": { "name": "nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm (nodejs:20)", "product_id": "nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-full-i18n@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "product": { "name": "npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64.rpm (nodejs:20)", "product_id": "npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@10.8.1-1.20.16.0.1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "product": { "name": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm (nodejs:20)", "product_id": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "product": { "name": "nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm (nodejs:20)", "product_id": "nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "product": { "name": "nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm (nodejs:20)", "product_id": "nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "product": { "name": "nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm (nodejs:20)", "product_id": "nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "product": { "name": "nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm (nodejs:20)", "product_id": "nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-full-i18n@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "product": { "name": "npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le.rpm (nodejs:20)", "product_id": "npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@10.8.1-1.20.16.0.1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "product": { "name": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm (nodejs:20)", "product_id": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "product": { "name": "nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm (nodejs:20)", "product_id": "nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "product": { "name": "nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm (nodejs:20)", "product_id": "nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "product": { "name": "nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm (nodejs:20)", "product_id": "nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "product": { "name": "nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm (nodejs:20)", "product_id": "nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-full-i18n@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "product": { "name": "npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x.rpm (nodejs:20)", "product_id": "npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@10.8.1-1.20.16.0.1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "product": { "name": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm (nodejs:20)", "product_id": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "product": { "name": "nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm (nodejs:20)", "product_id": "nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "product": { "name": "nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm (nodejs:20)", "product_id": "nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "product": { "name": "nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm (nodejs:20)", "product_id": "nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "product": { "name": "nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm (nodejs:20)", "product_id": "nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-full-i18n@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "product": { "name": "npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64.rpm (nodejs:20)", "product_id": "npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@10.8.1-1.20.16.0.1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20" }, "product_reference": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20" }, "product_reference": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20" }, "product_reference": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.src.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.src.rpm-nodejs:20" }, "product_reference": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.src.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20" }, "product_reference": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20" }, "product_reference": "nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20" }, "product_reference": "nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20" }, "product_reference": "nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20" }, "product_reference": "nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20" }, "product_reference": "nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20" }, "product_reference": "nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20" }, "product_reference": "nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20" }, "product_reference": "nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20" }, "product_reference": "nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20" }, "product_reference": "nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20" }, "product_reference": "nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20" }, "product_reference": "nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-docs-20.16.0-1.module+el8.10.0+22203+a88c8310.noarch.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el8.10.0+22203+a88c8310.noarch.rpm-nodejs:20" }, "product_reference": "nodejs-docs-20.16.0-1.module+el8.10.0+22203+a88c8310.noarch.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20" }, "product_reference": "nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20" }, "product_reference": "nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20" }, "product_reference": "nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20" }, "product_reference": "nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch.rpm-nodejs:20" }, "product_reference": "nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.src.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.src.rpm-nodejs:20" }, "product_reference": "nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.src.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20" }, "product_reference": "nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.src.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.src.rpm-nodejs:20" }, "product_reference": "nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.src.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20" }, "product_reference": "nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20" }, "product_reference": "npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20" }, "product_reference": "npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20" }, "product_reference": "npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20" }, "product_reference": "npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-22018", "discovery_date": "2024-07-10T02:20:15+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2296990" } ], "notes": [ { "category": "description", "text": "A flaw was found in the Node.js package. This flaw arises from an inadequate permission model that fails to restrict file stats through the fs.lstat API. As a result, malicious actors can retrieve stats from files they do not have explicit read access to.", "title": "Vulnerability description" }, { "category": "summary", "text": "nodejs: fs.lstat bypasses permission model", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el8.10.0+22203+a88c8310.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-22018" }, { "category": "external", "summary": "RHBZ#2296990", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2296990" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-22018", "url": "https://www.cve.org/CVERecord?id=CVE-2024-22018" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-22018", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-22018" }, { "category": "external", "summary": "https://hackerone.com/reports/2145862", "url": "https://hackerone.com/reports/2145862" } ], "release_date": "2024-07-10T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-08-26T08:36:35+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el8.10.0+22203+a88c8310.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:5814" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 2.9, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.0" }, "products": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el8.10.0+22203+a88c8310.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "nodejs: fs.lstat bypasses permission model" }, { "cve": "CVE-2024-22020", "discovery_date": "2024-07-09T02:20:08+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2296417" } ], "notes": [ { "category": "description", "text": "A flaw was found in the Node.js package. By embedding non-network imports in data URLs, this flaw allows an attacker to execute arbitrary code, compromising system security.", "title": "Vulnerability description" }, { "category": "summary", "text": "nodejs: Bypass network import restriction via data URL", "title": "Vulnerability summary" }, { "category": "other", "text": "This vulnerability is categorized as moderate severity rather than high due to its specific conditions for exploitation and impact scope. While the flaw permits bypassing network import restrictions via data URLs to execute arbitrary code, its exploitation is contingent on the attacker\u2019s ability to inject and execute code within a controlled environment. The impact is constrained to scenarios where the vulnerable application processes data URLs and lacks robust validation mechanisms. Additionally, this issue requires the attacker to exploit specific code paths and permissions, which limits its widespread applicability.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el8.10.0+22203+a88c8310.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-22020" }, { "category": "external", "summary": "RHBZ#2296417", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2296417" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-22020", "url": "https://www.cve.org/CVERecord?id=CVE-2024-22020" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-22020", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-22020" }, { "category": "external", "summary": "https://hackerone.com/reports/2092749", "url": "https://hackerone.com/reports/2092749" } ], "release_date": "2024-07-09T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-08-26T08:36:35+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el8.10.0+22203+a88c8310.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:5814" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el8.10.0+22203+a88c8310.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H", "version": "3.1" }, "products": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el8.10.0+22203+a88c8310.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "nodejs: Bypass network import restriction via data URL" }, { "cve": "CVE-2024-28863", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2024-06-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2293200" } ], "notes": [ { "category": "description", "text": "A flaw was found in ISAACS\u0027s node-tar, where it is vulnerable to a denial of service, caused by the lack of folder count validation. The vulnerability exists due to the application not properly controlling the consumption of internal resources while parsing a tar file. By sending a specially crafted request, a remote attacker can trigger resource exhaustion and perform a denial of service (DoS) attack.", "title": "Vulnerability description" }, { "category": "summary", "text": "node-tar: denial of service while parsing a tar file due to lack of folders depth validation", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el8.10.0+22203+a88c8310.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-28863" }, { "category": "external", "summary": "RHBZ#2293200", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2293200" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-28863", "url": "https://www.cve.org/CVERecord?id=CVE-2024-28863" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-28863", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28863" }, { "category": "external", "summary": "https://github.com/isaacs/node-tar/security/advisories/GHSA-f5x3-32g6-xq36", "url": "https://github.com/isaacs/node-tar/security/advisories/GHSA-f5x3-32g6-xq36" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240524-0005/", "url": "https://security.netapp.com/advisory/ntap-20240524-0005/" } ], "release_date": "2024-03-21T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-08-26T08:36:35+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el8.10.0+22203+a88c8310.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:5814" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el8.10.0+22203+a88c8310.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "node-tar: denial of service while parsing a tar file due to lack of folders depth validation" }, { "cve": "CVE-2024-36137", "cwe": { "id": "CWE-732", "name": "Incorrect Permission Assignment for Critical Resource" }, "discovery_date": "2024-07-22T14:03:28+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2299281" } ], "notes": [ { "category": "description", "text": "A flaw was found in Node.js, affecting users of the experimental permission model when the --allow-fs-write flag is used. The Node.js Permission Model does not operate on file descriptors. However, operations such as fs.fchown or fs.fchmod can use a \"read-only\" file descriptor to change the owner and permissions of a file.", "title": "Vulnerability description" }, { "category": "summary", "text": "nodejs: fs.fchown/fchmod bypasses permission model", "title": "Vulnerability summary" }, { "category": "other", "text": "This vulnerability is specific to the Permission Model, which is currently an experimental feature of Node.js.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el8.10.0+22203+a88c8310.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-36137" }, { "category": "external", "summary": "RHBZ#2299281", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2299281" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-36137", "url": "https://www.cve.org/CVERecord?id=CVE-2024-36137" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-36137", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-36137" } ], "release_date": "2024-07-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-08-26T08:36:35+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el8.10.0+22203+a88c8310.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:5814" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 3.9, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N", "version": "3.1" }, "products": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el8.10.0+22203+a88c8310.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "nodejs: fs.fchown/fchmod bypasses permission model" } ] }
rhsa-2024_5815
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for the nodejs:20 module is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. \n\nSecurity Fix(es):\n\n* nodejs: Bypass network import restriction via data URL (CVE-2024-22020)\n\n* nodejs: fs.lstat bypasses permission model (CVE-2024-22018)\n\n* nodejs: fs.fchown/fchmod bypasses permission model (CVE-2024-36137)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2024:5815", "url": "https://access.redhat.com/errata/RHSA-2024:5815" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "2296417", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2296417" }, { "category": "external", "summary": "2296990", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2296990" }, { "category": "external", "summary": "2299281", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2299281" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_5815.json" } ], "title": "Red Hat Security Advisory: nodejs:20 security update", "tracking": { "current_release_date": "2024-11-24T18:16:55+00:00", "generator": { "date": "2024-11-24T18:16:55+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2024:5815", "initial_release_date": "2024-08-26T08:12:15+00:00", "revision_history": [ { "date": "2024-08-26T08:12:15+00:00", "number": "1", "summary": "Initial version" }, { "date": "2024-08-26T08:12:15+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-24T18:16:55+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux AppStream (v. 9)", "product": { "name": "Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "nodejs:20:9040020240807145403:rhel9", "product": { "name": "nodejs:20:9040020240807145403:rhel9", "product_id": "nodejs:20:9040020240807145403:rhel9", "product_identification_helper": { "purl": "pkg:rpmmod/redhat/nodejs@20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "nodejs-docs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.noarch", "product": { "name": "nodejs-docs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.noarch", "product_id": "nodejs-docs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-docs@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=noarch\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-nodemon-0:3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch", "product": { "name": "nodejs-nodemon-0:3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch", "product_id": "nodejs-nodemon-0:3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-nodemon@3.0.1-1.module%2Bel9.3.0.z%2B20478%2B84a9f781?arch=noarch" } } }, { "category": "product_version", "name": "nodejs-packaging-0:2021.06-4.module+el9.3.0+19518+63aad52d.noarch", "product": { "name": "nodejs-packaging-0:2021.06-4.module+el9.3.0+19518+63aad52d.noarch", "product_id": "nodejs-packaging-0:2021.06-4.module+el9.3.0+19518+63aad52d.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-packaging@2021.06-4.module%2Bel9.3.0%2B19518%2B63aad52d?arch=noarch" } } }, { "category": "product_version", "name": "nodejs-packaging-bundler-0:2021.06-4.module+el9.3.0+19518+63aad52d.noarch", "product": { "name": "nodejs-packaging-bundler-0:2021.06-4.module+el9.3.0+19518+63aad52d.noarch", "product_id": "nodejs-packaging-bundler-0:2021.06-4.module+el9.3.0+19518+63aad52d.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-packaging-bundler@2021.06-4.module%2Bel9.3.0%2B19518%2B63aad52d?arch=noarch" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.src", "product": { "name": "nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.src", "product_id": "nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=src\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-nodemon-0:3.0.1-1.module+el9.3.0.z+20478+84a9f781.src", "product": { "name": "nodejs-nodemon-0:3.0.1-1.module+el9.3.0.z+20478+84a9f781.src", "product_id": "nodejs-nodemon-0:3.0.1-1.module+el9.3.0.z+20478+84a9f781.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-nodemon@3.0.1-1.module%2Bel9.3.0.z%2B20478%2B84a9f781?arch=src" } } }, { "category": "product_version", "name": "nodejs-packaging-0:2021.06-4.module+el9.3.0+19518+63aad52d.src", "product": { "name": "nodejs-packaging-0:2021.06-4.module+el9.3.0+19518+63aad52d.src", "product_id": "nodejs-packaging-0:2021.06-4.module+el9.3.0+19518+63aad52d.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-packaging@2021.06-4.module%2Bel9.3.0%2B19518%2B63aad52d?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "product": { "name": "nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "product_id": "nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "product": { "name": "nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "product_id": "nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "product": { "name": "nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "product_id": "nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "product": { "name": "nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "product_id": "nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "product": { "name": "nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "product_id": "nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-full-i18n@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.aarch64", "product": { "name": "npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.aarch64", "product_id": "npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@10.8.1-1.20.16.0.1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=aarch64\u0026epoch=1" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "product": { "name": "nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "product_id": "nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "product": { "name": "nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "product_id": "nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "product": { "name": "nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "product_id": "nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "product": { "name": "nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "product_id": "nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "product": { "name": "nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "product_id": "nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-full-i18n@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.ppc64le", "product": { "name": "npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.ppc64le", "product_id": "npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@10.8.1-1.20.16.0.1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=ppc64le\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "product": { "name": "nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "product_id": "nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "product": { "name": "nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "product_id": "nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "product": { "name": "nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "product_id": "nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "product": { "name": "nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "product_id": "nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "product": { "name": "nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "product_id": "nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-full-i18n@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.s390x", "product": { "name": "npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.s390x", "product_id": "npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@10.8.1-1.20.16.0.1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=s390x\u0026epoch=1" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "product": { "name": "nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "product_id": "nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "product": { "name": "nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "product_id": "nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "product": { "name": "nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "product_id": "nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "product": { "name": "nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "product_id": "nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "product": { "name": "nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "product_id": "nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-full-i18n@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.x86_64", "product": { "name": "npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.x86_64", "product_id": "npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@10.8.1-1.20.16.0.1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "nodejs:20:9040020240807145403:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9" }, "product_reference": "nodejs:20:9040020240807145403:rhel9", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64 as a component of nodejs:20:9040020240807145403:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64" }, "product_reference": "nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le as a component of nodejs:20:9040020240807145403:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le" }, "product_reference": "nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x as a component of nodejs:20:9040020240807145403:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x" }, "product_reference": "nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.src as a component of nodejs:20:9040020240807145403:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.src" }, "product_reference": "nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.src", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64 as a component of nodejs:20:9040020240807145403:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64" }, "product_reference": "nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64 as a component of nodejs:20:9040020240807145403:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64" }, "product_reference": "nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le as a component of nodejs:20:9040020240807145403:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le" }, "product_reference": "nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x as a component of nodejs:20:9040020240807145403:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x" }, "product_reference": "nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64 as a component of nodejs:20:9040020240807145403:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64" }, "product_reference": "nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64 as a component of nodejs:20:9040020240807145403:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64" }, "product_reference": "nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le as a component of nodejs:20:9040020240807145403:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le" }, "product_reference": "nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x as a component of nodejs:20:9040020240807145403:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x" }, "product_reference": "nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64 as a component of nodejs:20:9040020240807145403:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64" }, "product_reference": "nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64 as a component of nodejs:20:9040020240807145403:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64" }, "product_reference": "nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le as a component of nodejs:20:9040020240807145403:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le" }, "product_reference": "nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x as a component of nodejs:20:9040020240807145403:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x" }, "product_reference": "nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64 as a component of nodejs:20:9040020240807145403:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64" }, "product_reference": "nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-docs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.noarch as a component of nodejs:20:9040020240807145403:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-docs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.noarch" }, "product_reference": "nodejs-docs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.noarch", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64 as a component of nodejs:20:9040020240807145403:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64" }, "product_reference": "nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le as a component of nodejs:20:9040020240807145403:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le" }, "product_reference": "nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x as a component of nodejs:20:9040020240807145403:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x" }, "product_reference": "nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64 as a component of nodejs:20:9040020240807145403:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64" }, "product_reference": "nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-nodemon-0:3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch as a component of nodejs:20:9040020240807145403:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-nodemon-0:3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch" }, "product_reference": "nodejs-nodemon-0:3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-nodemon-0:3.0.1-1.module+el9.3.0.z+20478+84a9f781.src as a component of nodejs:20:9040020240807145403:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-nodemon-0:3.0.1-1.module+el9.3.0.z+20478+84a9f781.src" }, "product_reference": "nodejs-nodemon-0:3.0.1-1.module+el9.3.0.z+20478+84a9f781.src", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-packaging-0:2021.06-4.module+el9.3.0+19518+63aad52d.noarch as a component of nodejs:20:9040020240807145403:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-packaging-0:2021.06-4.module+el9.3.0+19518+63aad52d.noarch" }, "product_reference": "nodejs-packaging-0:2021.06-4.module+el9.3.0+19518+63aad52d.noarch", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-packaging-0:2021.06-4.module+el9.3.0+19518+63aad52d.src as a component of nodejs:20:9040020240807145403:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-packaging-0:2021.06-4.module+el9.3.0+19518+63aad52d.src" }, "product_reference": "nodejs-packaging-0:2021.06-4.module+el9.3.0+19518+63aad52d.src", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-packaging-bundler-0:2021.06-4.module+el9.3.0+19518+63aad52d.noarch as a component of nodejs:20:9040020240807145403:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-packaging-bundler-0:2021.06-4.module+el9.3.0+19518+63aad52d.noarch" }, "product_reference": "nodejs-packaging-bundler-0:2021.06-4.module+el9.3.0+19518+63aad52d.noarch", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.aarch64 as a component of nodejs:20:9040020240807145403:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.aarch64" }, "product_reference": "npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.aarch64", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.ppc64le as a component of nodejs:20:9040020240807145403:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.ppc64le" }, "product_reference": "npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.ppc64le", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.s390x as a component of nodejs:20:9040020240807145403:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.s390x" }, "product_reference": "npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.s390x", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.x86_64 as a component of nodejs:20:9040020240807145403:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.x86_64" }, "product_reference": "npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.x86_64", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-22018", "discovery_date": "2024-07-10T02:20:15+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2296990" } ], "notes": [ { "category": "description", "text": "A flaw was found in the Node.js package. This flaw arises from an inadequate permission model that fails to restrict file stats through the fs.lstat API. As a result, malicious actors can retrieve stats from files they do not have explicit read access to.", "title": "Vulnerability description" }, { "category": "summary", "text": "nodejs: fs.lstat bypasses permission model", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-docs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-nodemon-0:3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-nodemon-0:3.0.1-1.module+el9.3.0.z+20478+84a9f781.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-packaging-0:2021.06-4.module+el9.3.0+19518+63aad52d.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-packaging-0:2021.06-4.module+el9.3.0+19518+63aad52d.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-packaging-bundler-0:2021.06-4.module+el9.3.0+19518+63aad52d.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-22018" }, { "category": "external", "summary": "RHBZ#2296990", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2296990" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-22018", "url": "https://www.cve.org/CVERecord?id=CVE-2024-22018" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-22018", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-22018" }, { "category": "external", "summary": "https://hackerone.com/reports/2145862", "url": "https://hackerone.com/reports/2145862" } ], "release_date": "2024-07-10T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-08-26T08:12:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-docs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-nodemon-0:3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-nodemon-0:3.0.1-1.module+el9.3.0.z+20478+84a9f781.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-packaging-0:2021.06-4.module+el9.3.0+19518+63aad52d.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-packaging-0:2021.06-4.module+el9.3.0+19518+63aad52d.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-packaging-bundler-0:2021.06-4.module+el9.3.0+19518+63aad52d.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:5815" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 2.9, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.0" }, "products": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-docs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-nodemon-0:3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-nodemon-0:3.0.1-1.module+el9.3.0.z+20478+84a9f781.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-packaging-0:2021.06-4.module+el9.3.0+19518+63aad52d.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-packaging-0:2021.06-4.module+el9.3.0+19518+63aad52d.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-packaging-bundler-0:2021.06-4.module+el9.3.0+19518+63aad52d.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "nodejs: fs.lstat bypasses permission model" }, { "cve": "CVE-2024-22020", "discovery_date": "2024-07-09T02:20:08+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2296417" } ], "notes": [ { "category": "description", "text": "A flaw was found in the Node.js package. By embedding non-network imports in data URLs, this flaw allows an attacker to execute arbitrary code, compromising system security.", "title": "Vulnerability description" }, { "category": "summary", "text": "nodejs: Bypass network import restriction via data URL", "title": "Vulnerability summary" }, { "category": "other", "text": "This vulnerability is categorized as moderate severity rather than high due to its specific conditions for exploitation and impact scope. While the flaw permits bypassing network import restrictions via data URLs to execute arbitrary code, its exploitation is contingent on the attacker\u2019s ability to inject and execute code within a controlled environment. The impact is constrained to scenarios where the vulnerable application processes data URLs and lacks robust validation mechanisms. Additionally, this issue requires the attacker to exploit specific code paths and permissions, which limits its widespread applicability.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-docs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-nodemon-0:3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-nodemon-0:3.0.1-1.module+el9.3.0.z+20478+84a9f781.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-packaging-0:2021.06-4.module+el9.3.0+19518+63aad52d.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-packaging-0:2021.06-4.module+el9.3.0+19518+63aad52d.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-packaging-bundler-0:2021.06-4.module+el9.3.0+19518+63aad52d.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-22020" }, { "category": "external", "summary": "RHBZ#2296417", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2296417" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-22020", "url": "https://www.cve.org/CVERecord?id=CVE-2024-22020" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-22020", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-22020" }, { "category": "external", "summary": "https://hackerone.com/reports/2092749", "url": "https://hackerone.com/reports/2092749" } ], "release_date": "2024-07-09T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-08-26T08:12:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-docs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-nodemon-0:3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-nodemon-0:3.0.1-1.module+el9.3.0.z+20478+84a9f781.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-packaging-0:2021.06-4.module+el9.3.0+19518+63aad52d.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-packaging-0:2021.06-4.module+el9.3.0+19518+63aad52d.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-packaging-bundler-0:2021.06-4.module+el9.3.0+19518+63aad52d.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:5815" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-docs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-nodemon-0:3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-nodemon-0:3.0.1-1.module+el9.3.0.z+20478+84a9f781.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-packaging-0:2021.06-4.module+el9.3.0+19518+63aad52d.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-packaging-0:2021.06-4.module+el9.3.0+19518+63aad52d.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-packaging-bundler-0:2021.06-4.module+el9.3.0+19518+63aad52d.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H", "version": "3.1" }, "products": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-docs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-nodemon-0:3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-nodemon-0:3.0.1-1.module+el9.3.0.z+20478+84a9f781.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-packaging-0:2021.06-4.module+el9.3.0+19518+63aad52d.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-packaging-0:2021.06-4.module+el9.3.0+19518+63aad52d.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-packaging-bundler-0:2021.06-4.module+el9.3.0+19518+63aad52d.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "nodejs: Bypass network import restriction via data URL" }, { "cve": "CVE-2024-36137", "cwe": { "id": "CWE-732", "name": "Incorrect Permission Assignment for Critical Resource" }, "discovery_date": "2024-07-22T14:03:28+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2299281" } ], "notes": [ { "category": "description", "text": "A flaw was found in Node.js, affecting users of the experimental permission model when the --allow-fs-write flag is used. The Node.js Permission Model does not operate on file descriptors. However, operations such as fs.fchown or fs.fchmod can use a \"read-only\" file descriptor to change the owner and permissions of a file.", "title": "Vulnerability description" }, { "category": "summary", "text": "nodejs: fs.fchown/fchmod bypasses permission model", "title": "Vulnerability summary" }, { "category": "other", "text": "This vulnerability is specific to the Permission Model, which is currently an experimental feature of Node.js.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-docs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-nodemon-0:3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-nodemon-0:3.0.1-1.module+el9.3.0.z+20478+84a9f781.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-packaging-0:2021.06-4.module+el9.3.0+19518+63aad52d.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-packaging-0:2021.06-4.module+el9.3.0+19518+63aad52d.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-packaging-bundler-0:2021.06-4.module+el9.3.0+19518+63aad52d.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-36137" }, { "category": "external", "summary": "RHBZ#2299281", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2299281" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-36137", "url": "https://www.cve.org/CVERecord?id=CVE-2024-36137" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-36137", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-36137" } ], "release_date": "2024-07-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-08-26T08:12:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-docs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-nodemon-0:3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-nodemon-0:3.0.1-1.module+el9.3.0.z+20478+84a9f781.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-packaging-0:2021.06-4.module+el9.3.0+19518+63aad52d.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-packaging-0:2021.06-4.module+el9.3.0+19518+63aad52d.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-packaging-bundler-0:2021.06-4.module+el9.3.0+19518+63aad52d.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:5815" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 3.9, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N", "version": "3.1" }, "products": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debuginfo-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-debugsource-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-devel-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-docs-1:20.16.0-1.module+el9.4.0+22197+9e60f127.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-full-i18n-1:20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-nodemon-0:3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-nodemon-0:3.0.1-1.module+el9.3.0.z+20478+84a9f781.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-packaging-0:2021.06-4.module+el9.3.0+19518+63aad52d.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-packaging-0:2021.06-4.module+el9.3.0+19518+63aad52d.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:nodejs-packaging-bundler-0:2021.06-4.module+el9.3.0+19518+63aad52d.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:20:9040020240807145403:rhel9:npm-1:10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "nodejs: fs.fchown/fchmod bypasses permission model" } ] }
RHSA-2024:6148
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for the nodejs:18 module is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. \n\nSecurity Fix(es):\n\n* node-tar: denial of service while parsing a tar file due to lack of folders depth validation (CVE-2024-28863)\n\n* nodejs: Bypass network import restriction via data URL (CVE-2024-22020)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2024:6148", "url": "https://access.redhat.com/errata/RHSA-2024:6148" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "2293200", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2293200" }, { "category": "external", "summary": "2296417", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2296417" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_6148.json" } ], "title": "Red Hat Security Advisory: nodejs:18 security update", "tracking": { "current_release_date": "2025-10-07T09:28:39+00:00", "generator": { "date": "2025-10-07T09:28:39+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.6.9" } }, "id": "RHSA-2024:6148", "initial_release_date": "2024-09-03T02:32:16+00:00", "revision_history": [ { "date": "2024-09-03T02:32:16+00:00", "number": "1", "summary": "Initial version" }, { "date": "2024-09-03T02:32:16+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2025-10-07T09:28:39+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux AppStream (v. 8)", "product": { "name": "Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.src.rpm-nodejs:18", "product": { "name": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.src.rpm (nodejs:18)", "product_id": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.src.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=src\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.src.rpm-nodejs:18", "product": { "name": "nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.src.rpm (nodejs:18)", "product_id": "nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.src.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-nodemon@3.0.1-1.module%2Bel8.10.0%2B21159%2Bf5a7145d?arch=src\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.src.rpm-nodejs:18", "product": { "name": "nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.src.rpm (nodejs:18)", "product_id": "nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.src.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-packaging@2021.06-4.module%2Bel8.9.0%2B19439%2B7b18b275?arch=src\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "nodejs-docs-18.20.4-1.module+el8.10.0+22199+56ea0ead.noarch.rpm-nodejs:18", "product": { "name": "nodejs-docs-18.20.4-1.module+el8.10.0+22199+56ea0ead.noarch.rpm (nodejs:18)", "product_id": "nodejs-docs-18.20.4-1.module+el8.10.0+22199+56ea0ead.noarch.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-docs@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=noarch\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.noarch.rpm-nodejs:18", "product": { "name": "nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.noarch.rpm (nodejs:18)", "product_id": "nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.noarch.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-nodemon@3.0.1-1.module%2Bel8.10.0%2B21159%2Bf5a7145d?arch=noarch\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm-nodejs:18", "product": { "name": "nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm (nodejs:18)", "product_id": "nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-packaging@2021.06-4.module%2Bel8.9.0%2B19439%2B7b18b275?arch=noarch\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm-nodejs:18", "product": { "name": "nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm (nodejs:18)", "product_id": "nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-packaging-bundler@2021.06-4.module%2Bel8.9.0%2B19439%2B7b18b275?arch=noarch\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "product": { "name": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm (nodejs:18)", "product_id": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "product": { "name": "nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm (nodejs:18)", "product_id": "nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "product": { "name": "nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm (nodejs:18)", "product_id": "nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "product": { "name": "nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm (nodejs:18)", "product_id": "nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "product": { "name": "nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm (nodejs:18)", "product_id": "nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-full-i18n@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "product": { "name": "npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.aarch64.rpm (nodejs:18)", "product_id": "npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@10.7.0-1.18.20.4.1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "product": { "name": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm (nodejs:18)", "product_id": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "product": { "name": "nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm (nodejs:18)", "product_id": "nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "product": { "name": "nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm (nodejs:18)", "product_id": "nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "product": { "name": "nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm (nodejs:18)", "product_id": "nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "product": { "name": "nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm (nodejs:18)", "product_id": "nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-full-i18n@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "product": { "name": "npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm (nodejs:18)", "product_id": "npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@10.7.0-1.18.20.4.1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "product": { "name": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm (nodejs:18)", "product_id": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "product": { "name": "nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm (nodejs:18)", "product_id": "nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "product": { "name": "nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm (nodejs:18)", "product_id": "nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "product": { "name": "nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm (nodejs:18)", "product_id": "nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "product": { "name": "nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm (nodejs:18)", "product_id": "nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-full-i18n@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "product": { "name": "npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.s390x.rpm (nodejs:18)", "product_id": "npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@10.7.0-1.18.20.4.1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "product": { "name": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm (nodejs:18)", "product_id": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "product": { "name": "nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm (nodejs:18)", "product_id": "nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "product": { "name": "nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm (nodejs:18)", "product_id": "nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "product": { "name": "nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm (nodejs:18)", "product_id": "nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "product": { "name": "nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm (nodejs:18)", "product_id": "nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-full-i18n@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "product": { "name": "npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.x86_64.rpm (nodejs:18)", "product_id": "npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@10.7.0-1.18.20.4.1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18" }, "product_reference": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18" }, "product_reference": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18" }, "product_reference": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.src.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.src.rpm-nodejs:18" }, "product_reference": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.src.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18" }, "product_reference": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18" }, "product_reference": "nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18" }, "product_reference": "nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18" }, "product_reference": "nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18" }, "product_reference": "nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18" }, "product_reference": "nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18" }, "product_reference": "nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18" }, "product_reference": "nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18" }, "product_reference": "nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18" }, "product_reference": "nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18" }, "product_reference": "nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18" }, "product_reference": "nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18" }, "product_reference": "nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-docs-18.20.4-1.module+el8.10.0+22199+56ea0ead.noarch.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-18.20.4-1.module+el8.10.0+22199+56ea0ead.noarch.rpm-nodejs:18" }, "product_reference": "nodejs-docs-18.20.4-1.module+el8.10.0+22199+56ea0ead.noarch.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18" }, "product_reference": "nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18" }, "product_reference": "nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18" }, "product_reference": "nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18" }, "product_reference": "nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.noarch.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.noarch.rpm-nodejs:18" }, "product_reference": "nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.noarch.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.src.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.src.rpm-nodejs:18" }, "product_reference": "nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.src.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm-nodejs:18" }, "product_reference": "nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.src.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.src.rpm-nodejs:18" }, "product_reference": "nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.src.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm-nodejs:18" }, "product_reference": "nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.aarch64.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18" }, "product_reference": "npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18" }, "product_reference": "npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.s390x.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18" }, "product_reference": "npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.x86_64.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18" }, "product_reference": "npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-22020", "discovery_date": "2024-07-09T02:20:08+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2296417" } ], "notes": [ { "category": "description", "text": "A flaw was found in the Node.js package. By embedding non-network imports in data URLs, this flaw allows an attacker to execute arbitrary code, compromising system security.", "title": "Vulnerability description" }, { "category": "summary", "text": "nodejs: Bypass network import restriction via data URL", "title": "Vulnerability summary" }, { "category": "other", "text": "This vulnerability is categorized as moderate severity rather than high due to its specific conditions for exploitation and impact scope. While the flaw permits bypassing network import restrictions via data URLs to execute arbitrary code, its exploitation is contingent on the attacker\u2019s ability to inject and execute code within a controlled environment. The impact is constrained to scenarios where the vulnerable application processes data URLs and lacks robust validation mechanisms. Additionally, this issue requires the attacker to exploit specific code paths and permissions, which limits its widespread applicability.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.src.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-18.20.4-1.module+el8.10.0+22199+56ea0ead.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.src.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.src.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-22020" }, { "category": "external", "summary": "RHBZ#2296417", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2296417" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-22020", "url": "https://www.cve.org/CVERecord?id=CVE-2024-22020" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-22020", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-22020" }, { "category": "external", "summary": "https://hackerone.com/reports/2092749", "url": "https://hackerone.com/reports/2092749" } ], "release_date": "2024-07-09T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-09-03T02:32:16+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.src.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-18.20.4-1.module+el8.10.0+22199+56ea0ead.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.src.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.src.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:6148" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.src.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-18.20.4-1.module+el8.10.0+22199+56ea0ead.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.src.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.src.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H", "version": "3.1" }, "products": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.src.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-18.20.4-1.module+el8.10.0+22199+56ea0ead.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.src.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.src.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "nodejs: Bypass network import restriction via data URL" }, { "cve": "CVE-2024-28863", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2024-06-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2293200" } ], "notes": [ { "category": "description", "text": "A flaw was found in ISAACS\u0027s node-tar, where it is vulnerable to a denial of service, caused by the lack of folder count validation. The vulnerability exists due to the application not properly controlling the consumption of internal resources while parsing a tar file. By sending a specially crafted request, a remote attacker can trigger resource exhaustion and perform a denial of service (DoS) attack.", "title": "Vulnerability description" }, { "category": "summary", "text": "node-tar: denial of service while parsing a tar file due to lack of folders depth validation", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.src.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-18.20.4-1.module+el8.10.0+22199+56ea0ead.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.src.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.src.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-28863" }, { "category": "external", "summary": "RHBZ#2293200", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2293200" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-28863", "url": "https://www.cve.org/CVERecord?id=CVE-2024-28863" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-28863", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28863" }, { "category": "external", "summary": "https://github.com/isaacs/node-tar/security/advisories/GHSA-f5x3-32g6-xq36", "url": "https://github.com/isaacs/node-tar/security/advisories/GHSA-f5x3-32g6-xq36" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240524-0005/", "url": "https://security.netapp.com/advisory/ntap-20240524-0005/" } ], "release_date": "2024-03-21T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-09-03T02:32:16+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.src.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-18.20.4-1.module+el8.10.0+22199+56ea0ead.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.src.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.src.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:6148" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.src.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-18.20.4-1.module+el8.10.0+22199+56ea0ead.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.src.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.src.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "node-tar: denial of service while parsing a tar file due to lack of folders depth validation" } ] }
rhsa-2024:6148
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for the nodejs:18 module is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. \n\nSecurity Fix(es):\n\n* node-tar: denial of service while parsing a tar file due to lack of folders depth validation (CVE-2024-28863)\n\n* nodejs: Bypass network import restriction via data URL (CVE-2024-22020)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2024:6148", "url": "https://access.redhat.com/errata/RHSA-2024:6148" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "2293200", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2293200" }, { "category": "external", "summary": "2296417", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2296417" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_6148.json" } ], "title": "Red Hat Security Advisory: nodejs:18 security update", "tracking": { "current_release_date": "2025-10-07T09:28:39+00:00", "generator": { "date": "2025-10-07T09:28:39+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.6.9" } }, "id": "RHSA-2024:6148", "initial_release_date": "2024-09-03T02:32:16+00:00", "revision_history": [ { "date": "2024-09-03T02:32:16+00:00", "number": "1", "summary": "Initial version" }, { "date": "2024-09-03T02:32:16+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2025-10-07T09:28:39+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux AppStream (v. 8)", "product": { "name": "Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.src.rpm-nodejs:18", "product": { "name": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.src.rpm (nodejs:18)", "product_id": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.src.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=src\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.src.rpm-nodejs:18", "product": { "name": "nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.src.rpm (nodejs:18)", "product_id": "nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.src.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-nodemon@3.0.1-1.module%2Bel8.10.0%2B21159%2Bf5a7145d?arch=src\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.src.rpm-nodejs:18", "product": { "name": "nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.src.rpm (nodejs:18)", "product_id": "nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.src.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-packaging@2021.06-4.module%2Bel8.9.0%2B19439%2B7b18b275?arch=src\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "nodejs-docs-18.20.4-1.module+el8.10.0+22199+56ea0ead.noarch.rpm-nodejs:18", "product": { "name": "nodejs-docs-18.20.4-1.module+el8.10.0+22199+56ea0ead.noarch.rpm (nodejs:18)", "product_id": "nodejs-docs-18.20.4-1.module+el8.10.0+22199+56ea0ead.noarch.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-docs@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=noarch\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.noarch.rpm-nodejs:18", "product": { "name": "nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.noarch.rpm (nodejs:18)", "product_id": "nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.noarch.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-nodemon@3.0.1-1.module%2Bel8.10.0%2B21159%2Bf5a7145d?arch=noarch\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm-nodejs:18", "product": { "name": "nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm (nodejs:18)", "product_id": "nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-packaging@2021.06-4.module%2Bel8.9.0%2B19439%2B7b18b275?arch=noarch\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm-nodejs:18", "product": { "name": "nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm (nodejs:18)", "product_id": "nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-packaging-bundler@2021.06-4.module%2Bel8.9.0%2B19439%2B7b18b275?arch=noarch\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "product": { "name": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm (nodejs:18)", "product_id": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "product": { "name": "nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm (nodejs:18)", "product_id": "nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "product": { "name": "nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm (nodejs:18)", "product_id": "nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "product": { "name": "nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm (nodejs:18)", "product_id": "nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "product": { "name": "nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm (nodejs:18)", "product_id": "nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-full-i18n@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "product": { "name": "npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.aarch64.rpm (nodejs:18)", "product_id": "npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@10.7.0-1.18.20.4.1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "product": { "name": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm (nodejs:18)", "product_id": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "product": { "name": "nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm (nodejs:18)", "product_id": "nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "product": { "name": "nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm (nodejs:18)", "product_id": "nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "product": { "name": "nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm (nodejs:18)", "product_id": "nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "product": { "name": "nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm (nodejs:18)", "product_id": "nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-full-i18n@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "product": { "name": "npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm (nodejs:18)", "product_id": "npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@10.7.0-1.18.20.4.1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "product": { "name": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm (nodejs:18)", "product_id": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "product": { "name": "nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm (nodejs:18)", "product_id": "nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "product": { "name": "nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm (nodejs:18)", "product_id": "nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "product": { "name": "nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm (nodejs:18)", "product_id": "nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "product": { "name": "nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm (nodejs:18)", "product_id": "nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-full-i18n@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "product": { "name": "npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.s390x.rpm (nodejs:18)", "product_id": "npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@10.7.0-1.18.20.4.1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "product": { "name": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm (nodejs:18)", "product_id": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "product": { "name": "nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm (nodejs:18)", "product_id": "nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "product": { "name": "nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm (nodejs:18)", "product_id": "nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "product": { "name": "nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm (nodejs:18)", "product_id": "nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "product": { "name": "nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm (nodejs:18)", "product_id": "nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-full-i18n@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "product": { "name": "npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.x86_64.rpm (nodejs:18)", "product_id": "npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@10.7.0-1.18.20.4.1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:18:8100020240807161023:489197e6" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18" }, "product_reference": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18" }, "product_reference": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18" }, "product_reference": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.src.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.src.rpm-nodejs:18" }, "product_reference": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.src.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18" }, "product_reference": "nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18" }, "product_reference": "nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18" }, "product_reference": "nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18" }, "product_reference": "nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18" }, "product_reference": "nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18" }, "product_reference": "nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18" }, "product_reference": "nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18" }, "product_reference": "nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18" }, "product_reference": "nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18" }, "product_reference": "nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18" }, "product_reference": "nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18" }, "product_reference": "nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18" }, "product_reference": "nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-docs-18.20.4-1.module+el8.10.0+22199+56ea0ead.noarch.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-18.20.4-1.module+el8.10.0+22199+56ea0ead.noarch.rpm-nodejs:18" }, "product_reference": "nodejs-docs-18.20.4-1.module+el8.10.0+22199+56ea0ead.noarch.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18" }, "product_reference": "nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18" }, "product_reference": "nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18" }, "product_reference": "nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18" }, "product_reference": "nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.noarch.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.noarch.rpm-nodejs:18" }, "product_reference": "nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.noarch.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.src.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.src.rpm-nodejs:18" }, "product_reference": "nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.src.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm-nodejs:18" }, "product_reference": "nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.src.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.src.rpm-nodejs:18" }, "product_reference": "nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.src.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm-nodejs:18" }, "product_reference": "nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.aarch64.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18" }, "product_reference": "npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18" }, "product_reference": "npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.s390x.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18" }, "product_reference": "npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.x86_64.rpm (nodejs:18) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18" }, "product_reference": "npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-22020", "discovery_date": "2024-07-09T02:20:08+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2296417" } ], "notes": [ { "category": "description", "text": "A flaw was found in the Node.js package. By embedding non-network imports in data URLs, this flaw allows an attacker to execute arbitrary code, compromising system security.", "title": "Vulnerability description" }, { "category": "summary", "text": "nodejs: Bypass network import restriction via data URL", "title": "Vulnerability summary" }, { "category": "other", "text": "This vulnerability is categorized as moderate severity rather than high due to its specific conditions for exploitation and impact scope. While the flaw permits bypassing network import restrictions via data URLs to execute arbitrary code, its exploitation is contingent on the attacker\u2019s ability to inject and execute code within a controlled environment. The impact is constrained to scenarios where the vulnerable application processes data URLs and lacks robust validation mechanisms. Additionally, this issue requires the attacker to exploit specific code paths and permissions, which limits its widespread applicability.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.src.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-18.20.4-1.module+el8.10.0+22199+56ea0ead.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.src.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.src.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-22020" }, { "category": "external", "summary": "RHBZ#2296417", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2296417" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-22020", "url": "https://www.cve.org/CVERecord?id=CVE-2024-22020" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-22020", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-22020" }, { "category": "external", "summary": "https://hackerone.com/reports/2092749", "url": "https://hackerone.com/reports/2092749" } ], "release_date": "2024-07-09T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-09-03T02:32:16+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.src.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-18.20.4-1.module+el8.10.0+22199+56ea0ead.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.src.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.src.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:6148" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.src.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-18.20.4-1.module+el8.10.0+22199+56ea0ead.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.src.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.src.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H", "version": "3.1" }, "products": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.src.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-18.20.4-1.module+el8.10.0+22199+56ea0ead.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.src.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.src.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "nodejs: Bypass network import restriction via data URL" }, { "cve": "CVE-2024-28863", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2024-06-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2293200" } ], "notes": [ { "category": "description", "text": "A flaw was found in ISAACS\u0027s node-tar, where it is vulnerable to a denial of service, caused by the lack of folder count validation. The vulnerability exists due to the application not properly controlling the consumption of internal resources while parsing a tar file. By sending a specially crafted request, a remote attacker can trigger resource exhaustion and perform a denial of service (DoS) attack.", "title": "Vulnerability description" }, { "category": "summary", "text": "node-tar: denial of service while parsing a tar file due to lack of folders depth validation", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.src.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-18.20.4-1.module+el8.10.0+22199+56ea0ead.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.src.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.src.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-28863" }, { "category": "external", "summary": "RHBZ#2293200", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2293200" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-28863", "url": "https://www.cve.org/CVERecord?id=CVE-2024-28863" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-28863", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28863" }, { "category": "external", "summary": "https://github.com/isaacs/node-tar/security/advisories/GHSA-f5x3-32g6-xq36", "url": "https://github.com/isaacs/node-tar/security/advisories/GHSA-f5x3-32g6-xq36" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240524-0005/", "url": "https://security.netapp.com/advisory/ntap-20240524-0005/" } ], "release_date": "2024-03-21T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-09-03T02:32:16+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.src.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-18.20.4-1.module+el8.10.0+22199+56ea0ead.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.src.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.src.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:6148" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.src.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-18.20.4-1.module+el8.10.0+22199+56ea0ead.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.10.0+21159+f5a7145d.src.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19439+7b18b275.src.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19439+7b18b275.noarch.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.aarch64.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.ppc64le.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.s390x.rpm-nodejs:18", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.x86_64.rpm-nodejs:18" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "node-tar: denial of service while parsing a tar file due to lack of folders depth validation" } ] }
rhsa-2024_6147
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for the nodejs:18 module is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. \n\nSecurity Fix(es):\n\n* node-tar: denial of service while parsing a tar file due to lack of folders depth validation (CVE-2024-28863)\n\n* nodejs: Bypass network import restriction via data URL (CVE-2024-22020)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2024:6147", "url": "https://access.redhat.com/errata/RHSA-2024:6147" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "2293200", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2293200" }, { "category": "external", "summary": "2296417", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2296417" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_6147.json" } ], "title": "Red Hat Security Advisory: nodejs:18 security update", "tracking": { "current_release_date": "2025-01-06T17:58:16+00:00", "generator": { "date": "2025-01-06T17:58:16+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.5" } }, "id": "RHSA-2024:6147", "initial_release_date": "2024-09-03T02:29:11+00:00", "revision_history": [ { "date": "2024-09-03T02:29:11+00:00", "number": "1", "summary": "Initial version" }, { "date": "2024-09-03T02:29:11+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2025-01-06T17:58:16+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux AppStream (v. 9)", "product": { "name": "Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "nodejs:18:9040020240807131341:rhel9", "product": { "name": "nodejs:18:9040020240807131341:rhel9", "product_id": "nodejs:18:9040020240807131341:rhel9", "product_identification_helper": { "purl": "pkg:rpmmod/redhat/nodejs@18:9040020240807131341:rhel9" } } }, { "category": "product_version", "name": "nodejs-docs-1:18.20.4-1.module+el9.4.0+22195+c221878e.noarch", "product": { "name": "nodejs-docs-1:18.20.4-1.module+el9.4.0+22195+c221878e.noarch", "product_id": "nodejs-docs-1:18.20.4-1.module+el9.4.0+22195+c221878e.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-docs@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=noarch\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-nodemon-0:3.0.1-1.module+el9.3.0+19762+d716bf3b.noarch", "product": { "name": "nodejs-nodemon-0:3.0.1-1.module+el9.3.0+19762+d716bf3b.noarch", "product_id": "nodejs-nodemon-0:3.0.1-1.module+el9.3.0+19762+d716bf3b.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-nodemon@3.0.1-1.module%2Bel9.3.0%2B19762%2Bd716bf3b?arch=noarch" } } }, { "category": "product_version", "name": "nodejs-packaging-0:2021.06-4.module+el9.1.0+15718+e52ec601.noarch", "product": { "name": "nodejs-packaging-0:2021.06-4.module+el9.1.0+15718+e52ec601.noarch", "product_id": "nodejs-packaging-0:2021.06-4.module+el9.1.0+15718+e52ec601.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-packaging@2021.06-4.module%2Bel9.1.0%2B15718%2Be52ec601?arch=noarch" } } }, { "category": "product_version", "name": "nodejs-packaging-bundler-0:2021.06-4.module+el9.1.0+15718+e52ec601.noarch", "product": { "name": "nodejs-packaging-bundler-0:2021.06-4.module+el9.1.0+15718+e52ec601.noarch", "product_id": "nodejs-packaging-bundler-0:2021.06-4.module+el9.1.0+15718+e52ec601.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-packaging-bundler@2021.06-4.module%2Bel9.1.0%2B15718%2Be52ec601?arch=noarch" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.src", "product": { "name": "nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.src", "product_id": "nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=src\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-nodemon-0:3.0.1-1.module+el9.3.0+19762+d716bf3b.src", "product": { "name": "nodejs-nodemon-0:3.0.1-1.module+el9.3.0+19762+d716bf3b.src", "product_id": "nodejs-nodemon-0:3.0.1-1.module+el9.3.0+19762+d716bf3b.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-nodemon@3.0.1-1.module%2Bel9.3.0%2B19762%2Bd716bf3b?arch=src" } } }, { "category": "product_version", "name": "nodejs-packaging-0:2021.06-4.module+el9.1.0+15718+e52ec601.src", "product": { "name": "nodejs-packaging-0:2021.06-4.module+el9.1.0+15718+e52ec601.src", "product_id": "nodejs-packaging-0:2021.06-4.module+el9.1.0+15718+e52ec601.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-packaging@2021.06-4.module%2Bel9.1.0%2B15718%2Be52ec601?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "product": { "name": "nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "product_id": "nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "product": { "name": "nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "product_id": "nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "product": { "name": "nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "product_id": "nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "product": { "name": "nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "product_id": "nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "product": { "name": "nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "product_id": "nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-full-i18n@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.aarch64", "product": { "name": "npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.aarch64", "product_id": "npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@10.7.0-1.18.20.4.1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=aarch64\u0026epoch=1" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "product": { "name": "nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "product_id": "nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "product": { "name": "nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "product_id": "nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "product": { "name": "nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "product_id": "nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "product": { "name": "nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "product_id": "nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "product": { "name": "nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "product_id": "nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-full-i18n@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.ppc64le", "product": { "name": "npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.ppc64le", "product_id": "npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@10.7.0-1.18.20.4.1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=ppc64le\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "product": { "name": "nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "product_id": "nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "product": { "name": "nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "product_id": "nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "product": { "name": "nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "product_id": "nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "product": { "name": "nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "product_id": "nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "product": { "name": "nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "product_id": "nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-full-i18n@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.s390x", "product": { "name": "npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.s390x", "product_id": "npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@10.7.0-1.18.20.4.1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=s390x\u0026epoch=1" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "product": { "name": "nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "product_id": "nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "product": { "name": "nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "product_id": "nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "product": { "name": "nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "product_id": "nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "product": { "name": "nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "product_id": "nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "product": { "name": "nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "product_id": "nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-full-i18n@18.20.4-1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.x86_64", "product": { "name": "npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.x86_64", "product_id": "npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@10.7.0-1.18.20.4.1.module%2Bel9.4.0%2B22195%2Bc221878e?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "nodejs:18:9040020240807131341:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9" }, "product_reference": "nodejs:18:9040020240807131341:rhel9", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64 as a component of nodejs:18:9040020240807131341:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64" }, "product_reference": "nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le as a component of nodejs:18:9040020240807131341:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le" }, "product_reference": "nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x as a component of nodejs:18:9040020240807131341:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x" }, "product_reference": "nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.src as a component of nodejs:18:9040020240807131341:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.src" }, "product_reference": "nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.src", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64 as a component of nodejs:18:9040020240807131341:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64" }, "product_reference": "nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64 as a component of nodejs:18:9040020240807131341:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64" }, "product_reference": "nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le as a component of nodejs:18:9040020240807131341:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le" }, "product_reference": "nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x as a component of nodejs:18:9040020240807131341:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x" }, "product_reference": "nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64 as a component of nodejs:18:9040020240807131341:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64" }, "product_reference": "nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64 as a component of nodejs:18:9040020240807131341:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64" }, "product_reference": "nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le as a component of nodejs:18:9040020240807131341:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le" }, "product_reference": "nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x as a component of nodejs:18:9040020240807131341:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x" }, "product_reference": "nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64 as a component of nodejs:18:9040020240807131341:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64" }, "product_reference": "nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64 as a component of nodejs:18:9040020240807131341:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64" }, "product_reference": "nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le as a component of nodejs:18:9040020240807131341:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le" }, "product_reference": "nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x as a component of nodejs:18:9040020240807131341:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x" }, "product_reference": "nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64 as a component of nodejs:18:9040020240807131341:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64" }, "product_reference": "nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-docs-1:18.20.4-1.module+el9.4.0+22195+c221878e.noarch as a component of nodejs:18:9040020240807131341:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-docs-1:18.20.4-1.module+el9.4.0+22195+c221878e.noarch" }, "product_reference": "nodejs-docs-1:18.20.4-1.module+el9.4.0+22195+c221878e.noarch", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64 as a component of nodejs:18:9040020240807131341:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64" }, "product_reference": "nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le as a component of nodejs:18:9040020240807131341:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le" }, "product_reference": "nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x as a component of nodejs:18:9040020240807131341:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x" }, "product_reference": "nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64 as a component of nodejs:18:9040020240807131341:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64" }, "product_reference": "nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-nodemon-0:3.0.1-1.module+el9.3.0+19762+d716bf3b.noarch as a component of nodejs:18:9040020240807131341:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-nodemon-0:3.0.1-1.module+el9.3.0+19762+d716bf3b.noarch" }, "product_reference": "nodejs-nodemon-0:3.0.1-1.module+el9.3.0+19762+d716bf3b.noarch", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-nodemon-0:3.0.1-1.module+el9.3.0+19762+d716bf3b.src as a component of nodejs:18:9040020240807131341:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-nodemon-0:3.0.1-1.module+el9.3.0+19762+d716bf3b.src" }, "product_reference": "nodejs-nodemon-0:3.0.1-1.module+el9.3.0+19762+d716bf3b.src", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-packaging-0:2021.06-4.module+el9.1.0+15718+e52ec601.noarch as a component of nodejs:18:9040020240807131341:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-packaging-0:2021.06-4.module+el9.1.0+15718+e52ec601.noarch" }, "product_reference": "nodejs-packaging-0:2021.06-4.module+el9.1.0+15718+e52ec601.noarch", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-packaging-0:2021.06-4.module+el9.1.0+15718+e52ec601.src as a component of nodejs:18:9040020240807131341:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-packaging-0:2021.06-4.module+el9.1.0+15718+e52ec601.src" }, "product_reference": "nodejs-packaging-0:2021.06-4.module+el9.1.0+15718+e52ec601.src", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-packaging-bundler-0:2021.06-4.module+el9.1.0+15718+e52ec601.noarch as a component of nodejs:18:9040020240807131341:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-packaging-bundler-0:2021.06-4.module+el9.1.0+15718+e52ec601.noarch" }, "product_reference": "nodejs-packaging-bundler-0:2021.06-4.module+el9.1.0+15718+e52ec601.noarch", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.aarch64 as a component of nodejs:18:9040020240807131341:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.aarch64" }, "product_reference": "npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.aarch64", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.ppc64le as a component of nodejs:18:9040020240807131341:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.ppc64le" }, "product_reference": "npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.ppc64le", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.s390x as a component of nodejs:18:9040020240807131341:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.s390x" }, "product_reference": "npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.s390x", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9" }, { "category": "default_component_of", "full_product_name": { "name": "npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.x86_64 as a component of nodejs:18:9040020240807131341:rhel9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.x86_64" }, "product_reference": "npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.x86_64", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-22020", "discovery_date": "2024-07-09T02:20:08+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2296417" } ], "notes": [ { "category": "description", "text": "A flaw was found in the Node.js package. By embedding non-network imports in data URLs, this flaw allows an attacker to execute arbitrary code, compromising system security.", "title": "Vulnerability description" }, { "category": "summary", "text": "nodejs: Bypass network import restriction via data URL", "title": "Vulnerability summary" }, { "category": "other", "text": "This vulnerability is categorized as moderate severity rather than high due to its specific conditions for exploitation and impact scope. While the flaw permits bypassing network import restrictions via data URLs to execute arbitrary code, its exploitation is contingent on the attacker\u2019s ability to inject and execute code within a controlled environment. The impact is constrained to scenarios where the vulnerable application processes data URLs and lacks robust validation mechanisms. Additionally, this issue requires the attacker to exploit specific code paths and permissions, which limits its widespread applicability.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-docs-1:18.20.4-1.module+el9.4.0+22195+c221878e.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-nodemon-0:3.0.1-1.module+el9.3.0+19762+d716bf3b.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-nodemon-0:3.0.1-1.module+el9.3.0+19762+d716bf3b.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-packaging-0:2021.06-4.module+el9.1.0+15718+e52ec601.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-packaging-0:2021.06-4.module+el9.1.0+15718+e52ec601.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-packaging-bundler-0:2021.06-4.module+el9.1.0+15718+e52ec601.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-22020" }, { "category": "external", "summary": "RHBZ#2296417", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2296417" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-22020", "url": "https://www.cve.org/CVERecord?id=CVE-2024-22020" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-22020", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-22020" }, { "category": "external", "summary": "https://hackerone.com/reports/2092749", "url": "https://hackerone.com/reports/2092749" } ], "release_date": "2024-07-09T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-09-03T02:29:11+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-docs-1:18.20.4-1.module+el9.4.0+22195+c221878e.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-nodemon-0:3.0.1-1.module+el9.3.0+19762+d716bf3b.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-nodemon-0:3.0.1-1.module+el9.3.0+19762+d716bf3b.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-packaging-0:2021.06-4.module+el9.1.0+15718+e52ec601.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-packaging-0:2021.06-4.module+el9.1.0+15718+e52ec601.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-packaging-bundler-0:2021.06-4.module+el9.1.0+15718+e52ec601.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:6147" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-docs-1:18.20.4-1.module+el9.4.0+22195+c221878e.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-nodemon-0:3.0.1-1.module+el9.3.0+19762+d716bf3b.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-nodemon-0:3.0.1-1.module+el9.3.0+19762+d716bf3b.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-packaging-0:2021.06-4.module+el9.1.0+15718+e52ec601.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-packaging-0:2021.06-4.module+el9.1.0+15718+e52ec601.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-packaging-bundler-0:2021.06-4.module+el9.1.0+15718+e52ec601.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H", "version": "3.1" }, "products": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-docs-1:18.20.4-1.module+el9.4.0+22195+c221878e.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-nodemon-0:3.0.1-1.module+el9.3.0+19762+d716bf3b.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-nodemon-0:3.0.1-1.module+el9.3.0+19762+d716bf3b.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-packaging-0:2021.06-4.module+el9.1.0+15718+e52ec601.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-packaging-0:2021.06-4.module+el9.1.0+15718+e52ec601.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-packaging-bundler-0:2021.06-4.module+el9.1.0+15718+e52ec601.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "nodejs: Bypass network import restriction via data URL" }, { "cve": "CVE-2024-28863", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2024-06-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2293200" } ], "notes": [ { "category": "description", "text": "A flaw was found in ISAACS\u0027s node-tar, where it is vulnerable to a denial of service, caused by the lack of folder count validation. The vulnerability exists due to the application not properly controlling the consumption of internal resources while parsing a tar file. By sending a specially crafted request, a remote attacker can trigger resource exhaustion and perform a denial of service (DoS) attack.", "title": "Vulnerability description" }, { "category": "summary", "text": "node-tar: denial of service while parsing a tar file due to lack of folders depth validation", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-docs-1:18.20.4-1.module+el9.4.0+22195+c221878e.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-nodemon-0:3.0.1-1.module+el9.3.0+19762+d716bf3b.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-nodemon-0:3.0.1-1.module+el9.3.0+19762+d716bf3b.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-packaging-0:2021.06-4.module+el9.1.0+15718+e52ec601.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-packaging-0:2021.06-4.module+el9.1.0+15718+e52ec601.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-packaging-bundler-0:2021.06-4.module+el9.1.0+15718+e52ec601.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-28863" }, { "category": "external", "summary": "RHBZ#2293200", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2293200" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-28863", "url": "https://www.cve.org/CVERecord?id=CVE-2024-28863" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-28863", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28863" }, { "category": "external", "summary": "https://github.com/isaacs/node-tar/security/advisories/GHSA-f5x3-32g6-xq36", "url": "https://github.com/isaacs/node-tar/security/advisories/GHSA-f5x3-32g6-xq36" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240524-0005/", "url": "https://security.netapp.com/advisory/ntap-20240524-0005/" } ], "release_date": "2024-03-21T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-09-03T02:29:11+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-docs-1:18.20.4-1.module+el9.4.0+22195+c221878e.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-nodemon-0:3.0.1-1.module+el9.3.0+19762+d716bf3b.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-nodemon-0:3.0.1-1.module+el9.3.0+19762+d716bf3b.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-packaging-0:2021.06-4.module+el9.1.0+15718+e52ec601.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-packaging-0:2021.06-4.module+el9.1.0+15718+e52ec601.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-packaging-bundler-0:2021.06-4.module+el9.1.0+15718+e52ec601.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:6147" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-debugsource-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-devel-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-docs-1:18.20.4-1.module+el9.4.0+22195+c221878e.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-full-i18n-1:18.20.4-1.module+el9.4.0+22195+c221878e.x86_64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-nodemon-0:3.0.1-1.module+el9.3.0+19762+d716bf3b.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-nodemon-0:3.0.1-1.module+el9.3.0+19762+d716bf3b.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-packaging-0:2021.06-4.module+el9.1.0+15718+e52ec601.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-packaging-0:2021.06-4.module+el9.1.0+15718+e52ec601.src", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:nodejs-packaging-bundler-0:2021.06-4.module+el9.1.0+15718+e52ec601.noarch", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.aarch64", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.ppc64le", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.s390x", "AppStream-9.4.0.Z.MAIN.EUS:nodejs:18:9040020240807131341:rhel9:npm-1:10.7.0-1.18.20.4.1.module+el9.4.0+22195+c221878e.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "node-tar: denial of service while parsing a tar file due to lack of folders depth validation" } ] }
rhsa-2024:5814
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for the nodejs:20 module is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. \n\nSecurity Fix(es):\n\n* node-tar: denial of service while parsing a tar file due to lack of folders depth validation (CVE-2024-28863)\n\n* nodejs: Bypass network import restriction via data URL (CVE-2024-22020)\n\n* nodejs: fs.lstat bypasses permission model (CVE-2024-22018)\n\n* nodejs: fs.fchown/fchmod bypasses permission model (CVE-2024-36137)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2024:5814", "url": "https://access.redhat.com/errata/RHSA-2024:5814" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "2293200", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2293200" }, { "category": "external", "summary": "2296417", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2296417" }, { "category": "external", "summary": "2296990", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2296990" }, { "category": "external", "summary": "2299281", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2299281" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_5814.json" } ], "title": "Red Hat Security Advisory: nodejs:20 security update", "tracking": { "current_release_date": "2025-10-07T09:28:38+00:00", "generator": { "date": "2025-10-07T09:28:38+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.6.9" } }, "id": "RHSA-2024:5814", "initial_release_date": "2024-08-26T08:36:35+00:00", "revision_history": [ { "date": "2024-08-26T08:36:35+00:00", "number": "1", "summary": "Initial version" }, { "date": "2024-08-26T08:36:35+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2025-10-07T09:28:38+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux AppStream (v. 8)", "product": { "name": "Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.src.rpm-nodejs:20", "product": { "name": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.src.rpm (nodejs:20)", "product_id": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.src.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=src\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.src.rpm-nodejs:20", "product": { "name": "nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.src.rpm (nodejs:20)", "product_id": "nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.src.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-nodemon@3.0.1-1.module%2Bel8.9.0%2B20473%2Bc4e3d824?arch=src\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.src.rpm-nodejs:20", "product": { "name": "nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.src.rpm (nodejs:20)", "product_id": "nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.src.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-packaging@2021.06-4.module%2Bel8.9.0%2B19519%2Be25b965a?arch=src\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "nodejs-docs-20.16.0-1.module+el8.10.0+22203+a88c8310.noarch.rpm-nodejs:20", "product": { "name": "nodejs-docs-20.16.0-1.module+el8.10.0+22203+a88c8310.noarch.rpm (nodejs:20)", "product_id": "nodejs-docs-20.16.0-1.module+el8.10.0+22203+a88c8310.noarch.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-docs@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=noarch\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch.rpm-nodejs:20", "product": { "name": "nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch.rpm (nodejs:20)", "product_id": "nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-nodemon@3.0.1-1.module%2Bel8.9.0%2B20473%2Bc4e3d824?arch=noarch\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "product": { "name": "nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm (nodejs:20)", "product_id": "nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-packaging@2021.06-4.module%2Bel8.9.0%2B19519%2Be25b965a?arch=noarch\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "product": { "name": "nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm (nodejs:20)", "product_id": "nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-packaging-bundler@2021.06-4.module%2Bel8.9.0%2B19519%2Be25b965a?arch=noarch\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "product": { "name": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm (nodejs:20)", "product_id": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "product": { "name": "nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm (nodejs:20)", "product_id": "nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "product": { "name": "nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm (nodejs:20)", "product_id": "nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "product": { "name": "nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm (nodejs:20)", "product_id": "nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "product": { "name": "nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm (nodejs:20)", "product_id": "nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-full-i18n@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "product": { "name": "npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64.rpm (nodejs:20)", "product_id": "npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@10.8.1-1.20.16.0.1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "product": { "name": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm (nodejs:20)", "product_id": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "product": { "name": "nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm (nodejs:20)", "product_id": "nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "product": { "name": "nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm (nodejs:20)", "product_id": "nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "product": { "name": "nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm (nodejs:20)", "product_id": "nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "product": { "name": "nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm (nodejs:20)", "product_id": "nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-full-i18n@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "product": { "name": "npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le.rpm (nodejs:20)", "product_id": "npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@10.8.1-1.20.16.0.1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "product": { "name": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm (nodejs:20)", "product_id": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "product": { "name": "nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm (nodejs:20)", "product_id": "nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "product": { "name": "nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm (nodejs:20)", "product_id": "nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "product": { "name": "nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm (nodejs:20)", "product_id": "nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "product": { "name": "nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm (nodejs:20)", "product_id": "nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-full-i18n@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "product": { "name": "npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x.rpm (nodejs:20)", "product_id": "npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@10.8.1-1.20.16.0.1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "product": { "name": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm (nodejs:20)", "product_id": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "product": { "name": "nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm (nodejs:20)", "product_id": "nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "product": { "name": "nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm (nodejs:20)", "product_id": "nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "product": { "name": "nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm (nodejs:20)", "product_id": "nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "product": { "name": "nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm (nodejs:20)", "product_id": "nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-full-i18n@20.16.0-1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } }, { "category": "product_version", "name": "npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "product": { "name": "npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64.rpm (nodejs:20)", "product_id": "npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@10.8.1-1.20.16.0.1.module%2Bel8.10.0%2B22203%2Ba88c8310?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:20:8100020240808073736:489197e6" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20" }, "product_reference": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20" }, "product_reference": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20" }, "product_reference": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.src.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.src.rpm-nodejs:20" }, "product_reference": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.src.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20" }, "product_reference": "nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20" }, "product_reference": "nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20" }, "product_reference": "nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20" }, "product_reference": "nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20" }, "product_reference": "nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20" }, "product_reference": "nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20" }, "product_reference": "nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20" }, "product_reference": "nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20" }, "product_reference": "nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20" }, "product_reference": "nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20" }, "product_reference": "nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20" }, "product_reference": "nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20" }, "product_reference": "nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-docs-20.16.0-1.module+el8.10.0+22203+a88c8310.noarch.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el8.10.0+22203+a88c8310.noarch.rpm-nodejs:20" }, "product_reference": "nodejs-docs-20.16.0-1.module+el8.10.0+22203+a88c8310.noarch.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20" }, "product_reference": "nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20" }, "product_reference": "nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20" }, "product_reference": "nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20" }, "product_reference": "nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch.rpm-nodejs:20" }, "product_reference": "nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.src.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.src.rpm-nodejs:20" }, "product_reference": "nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.src.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20" }, "product_reference": "nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.src.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.src.rpm-nodejs:20" }, "product_reference": "nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.src.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20" }, "product_reference": "nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20" }, "product_reference": "npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20" }, "product_reference": "npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20" }, "product_reference": "npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20" }, "product_reference": "npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-22018", "discovery_date": "2024-07-10T02:20:15+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2296990" } ], "notes": [ { "category": "description", "text": "A flaw was found in the Node.js package. This flaw arises from an inadequate permission model that fails to restrict file stats through the fs.lstat API. As a result, malicious actors can retrieve stats from files they do not have explicit read access to.", "title": "Vulnerability description" }, { "category": "summary", "text": "nodejs: fs.lstat bypasses permission model", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el8.10.0+22203+a88c8310.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-22018" }, { "category": "external", "summary": "RHBZ#2296990", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2296990" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-22018", "url": "https://www.cve.org/CVERecord?id=CVE-2024-22018" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-22018", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-22018" }, { "category": "external", "summary": "https://hackerone.com/reports/2145862", "url": "https://hackerone.com/reports/2145862" } ], "release_date": "2024-07-10T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-08-26T08:36:35+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el8.10.0+22203+a88c8310.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:5814" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 2.9, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.0" }, "products": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el8.10.0+22203+a88c8310.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "nodejs: fs.lstat bypasses permission model" }, { "cve": "CVE-2024-22020", "discovery_date": "2024-07-09T02:20:08+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2296417" } ], "notes": [ { "category": "description", "text": "A flaw was found in the Node.js package. By embedding non-network imports in data URLs, this flaw allows an attacker to execute arbitrary code, compromising system security.", "title": "Vulnerability description" }, { "category": "summary", "text": "nodejs: Bypass network import restriction via data URL", "title": "Vulnerability summary" }, { "category": "other", "text": "This vulnerability is categorized as moderate severity rather than high due to its specific conditions for exploitation and impact scope. While the flaw permits bypassing network import restrictions via data URLs to execute arbitrary code, its exploitation is contingent on the attacker\u2019s ability to inject and execute code within a controlled environment. The impact is constrained to scenarios where the vulnerable application processes data URLs and lacks robust validation mechanisms. Additionally, this issue requires the attacker to exploit specific code paths and permissions, which limits its widespread applicability.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el8.10.0+22203+a88c8310.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-22020" }, { "category": "external", "summary": "RHBZ#2296417", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2296417" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-22020", "url": "https://www.cve.org/CVERecord?id=CVE-2024-22020" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-22020", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-22020" }, { "category": "external", "summary": "https://hackerone.com/reports/2092749", "url": "https://hackerone.com/reports/2092749" } ], "release_date": "2024-07-09T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-08-26T08:36:35+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el8.10.0+22203+a88c8310.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:5814" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el8.10.0+22203+a88c8310.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H", "version": "3.1" }, "products": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el8.10.0+22203+a88c8310.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "nodejs: Bypass network import restriction via data URL" }, { "cve": "CVE-2024-28863", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2024-06-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2293200" } ], "notes": [ { "category": "description", "text": "A flaw was found in ISAACS\u0027s node-tar, where it is vulnerable to a denial of service, caused by the lack of folder count validation. The vulnerability exists due to the application not properly controlling the consumption of internal resources while parsing a tar file. By sending a specially crafted request, a remote attacker can trigger resource exhaustion and perform a denial of service (DoS) attack.", "title": "Vulnerability description" }, { "category": "summary", "text": "node-tar: denial of service while parsing a tar file due to lack of folders depth validation", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el8.10.0+22203+a88c8310.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-28863" }, { "category": "external", "summary": "RHBZ#2293200", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2293200" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-28863", "url": "https://www.cve.org/CVERecord?id=CVE-2024-28863" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-28863", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28863" }, { "category": "external", "summary": "https://github.com/isaacs/node-tar/security/advisories/GHSA-f5x3-32g6-xq36", "url": "https://github.com/isaacs/node-tar/security/advisories/GHSA-f5x3-32g6-xq36" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240524-0005/", "url": "https://security.netapp.com/advisory/ntap-20240524-0005/" } ], "release_date": "2024-03-21T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-08-26T08:36:35+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el8.10.0+22203+a88c8310.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:5814" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el8.10.0+22203+a88c8310.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "node-tar: denial of service while parsing a tar file due to lack of folders depth validation" }, { "cve": "CVE-2024-36137", "cwe": { "id": "CWE-732", "name": "Incorrect Permission Assignment for Critical Resource" }, "discovery_date": "2024-07-22T14:03:28+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2299281" } ], "notes": [ { "category": "description", "text": "A flaw was found in Node.js, affecting users of the experimental permission model when the --allow-fs-write flag is used. The Node.js Permission Model does not operate on file descriptors. However, operations such as fs.fchown or fs.fchmod can use a \"read-only\" file descriptor to change the owner and permissions of a file.", "title": "Vulnerability description" }, { "category": "summary", "text": "nodejs: fs.fchown/fchmod bypasses permission model", "title": "Vulnerability summary" }, { "category": "other", "text": "This vulnerability is specific to the Permission Model, which is currently an experimental feature of Node.js.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el8.10.0+22203+a88c8310.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-36137" }, { "category": "external", "summary": "RHBZ#2299281", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2299281" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-36137", "url": "https://www.cve.org/CVERecord?id=CVE-2024-36137" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-36137", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-36137" } ], "release_date": "2024-07-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-08-26T08:36:35+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el8.10.0+22203+a88c8310.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:5814" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 3.9, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N", "version": "3.1" }, "products": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el8.10.0+22203+a88c8310.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a.src.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.aarch64.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.ppc64le.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.s390x.rpm-nodejs:20", "AppStream-8.10.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el8.10.0+22203+a88c8310.x86_64.rpm-nodejs:20" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "nodejs: fs.fchown/fchmod bypasses permission model" } ] }
RHSA-2024:5815
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for the nodejs:20 module is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. \n\nSecurity Fix(es):\n\n* nodejs: Bypass network import restriction via data URL (CVE-2024-22020)\n\n* nodejs: fs.lstat bypasses permission model (CVE-2024-22018)\n\n* nodejs: fs.fchown/fchmod bypasses permission model (CVE-2024-36137)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2024:5815", "url": "https://access.redhat.com/errata/RHSA-2024:5815" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "2296417", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2296417" }, { "category": "external", "summary": "2296990", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2296990" }, { "category": "external", "summary": "2299281", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2299281" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_5815.json" } ], "title": "Red Hat Security Advisory: nodejs:20 security update", "tracking": { "current_release_date": "2025-09-25T15:01:32+00:00", "generator": { "date": "2025-09-25T15:01:32+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.6.8" } }, "id": "RHSA-2024:5815", "initial_release_date": "2024-08-26T08:12:15+00:00", "revision_history": [ { "date": "2024-08-26T08:12:15+00:00", "number": "1", "summary": "Initial version" }, { "date": "2024-08-26T08:12:15+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2025-09-25T15:01:32+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux AppStream (v. 9)", "product": { "name": "Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.src.rpm-nodejs:20", "product": { "name": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.src.rpm (nodejs:20)", "product_id": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.src.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=src\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm-nodejs:20", "product": { "name": "nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm (nodejs:20)", "product_id": "nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-nodemon@3.0.1-1.module%2Bel9.3.0.z%2B20478%2B84a9f781?arch=src\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm-nodejs:20", "product": { "name": "nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm (nodejs:20)", "product_id": "nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-packaging@2021.06-4.module%2Bel9.3.0%2B19518%2B63aad52d?arch=src\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "nodejs-docs-20.16.0-1.module+el9.4.0+22197+9e60f127.noarch.rpm-nodejs:20", "product": { "name": "nodejs-docs-20.16.0-1.module+el9.4.0+22197+9e60f127.noarch.rpm (nodejs:20)", "product_id": "nodejs-docs-20.16.0-1.module+el9.4.0+22197+9e60f127.noarch.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-docs@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=noarch\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm-nodejs:20", "product": { "name": "nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm (nodejs:20)", "product_id": "nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-nodemon@3.0.1-1.module%2Bel9.3.0.z%2B20478%2B84a9f781?arch=noarch\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "product": { "name": "nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm (nodejs:20)", "product_id": "nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-packaging@2021.06-4.module%2Bel9.3.0%2B19518%2B63aad52d?arch=noarch\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "product": { "name": "nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm (nodejs:20)", "product_id": "nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-packaging-bundler@2021.06-4.module%2Bel9.3.0%2B19518%2B63aad52d?arch=noarch\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "product": { "name": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm (nodejs:20)", "product_id": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "product": { "name": "nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm (nodejs:20)", "product_id": "nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "product": { "name": "nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm (nodejs:20)", "product_id": "nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "product": { "name": "nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm (nodejs:20)", "product_id": "nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "product": { "name": "nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm (nodejs:20)", "product_id": "nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-full-i18n@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "product": { "name": "npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.aarch64.rpm (nodejs:20)", "product_id": "npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@10.8.1-1.20.16.0.1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "product": { "name": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm (nodejs:20)", "product_id": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "product": { "name": "nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm (nodejs:20)", "product_id": "nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "product": { "name": "nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm (nodejs:20)", "product_id": "nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "product": { "name": "nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm (nodejs:20)", "product_id": "nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "product": { "name": "nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm (nodejs:20)", "product_id": "nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-full-i18n@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "product": { "name": "npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.ppc64le.rpm (nodejs:20)", "product_id": "npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@10.8.1-1.20.16.0.1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "product": { "name": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm (nodejs:20)", "product_id": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "product": { "name": "nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm (nodejs:20)", "product_id": "nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "product": { "name": "nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm (nodejs:20)", "product_id": "nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "product": { "name": "nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm (nodejs:20)", "product_id": "nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "product": { "name": "nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm (nodejs:20)", "product_id": "nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-full-i18n@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "product": { "name": "npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.s390x.rpm (nodejs:20)", "product_id": "npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@10.8.1-1.20.16.0.1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "product": { "name": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm (nodejs:20)", "product_id": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "product": { "name": "nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm (nodejs:20)", "product_id": "nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "product": { "name": "nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm (nodejs:20)", "product_id": "nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "product": { "name": "nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm (nodejs:20)", "product_id": "nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "product": { "name": "nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm (nodejs:20)", "product_id": "nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-full-i18n@20.16.0-1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } }, { "category": "product_version", "name": "npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "product": { "name": "npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.x86_64.rpm (nodejs:20)", "product_id": "npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@10.8.1-1.20.16.0.1.module%2Bel9.4.0%2B22197%2B9e60f127?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:20:9040020240807145403:rhel9" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20" }, "product_reference": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20" }, "product_reference": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20" }, "product_reference": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.src.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.src.rpm-nodejs:20" }, "product_reference": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.src.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20" }, "product_reference": "nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20" }, "product_reference": "nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20" }, "product_reference": "nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20" }, "product_reference": "nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20" }, "product_reference": "nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20" }, "product_reference": "nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20" }, "product_reference": "nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20" }, "product_reference": "nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20" }, "product_reference": "nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20" }, "product_reference": "nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20" }, "product_reference": "nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20" }, "product_reference": "nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20" }, "product_reference": "nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-docs-20.16.0-1.module+el9.4.0+22197+9e60f127.noarch.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el9.4.0+22197+9e60f127.noarch.rpm-nodejs:20" }, "product_reference": "nodejs-docs-20.16.0-1.module+el9.4.0+22197+9e60f127.noarch.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20" }, "product_reference": "nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20" }, "product_reference": "nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20" }, "product_reference": "nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20" }, "product_reference": "nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm-nodejs:20" }, "product_reference": "nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm-nodejs:20" }, "product_reference": "nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20" }, "product_reference": "nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm-nodejs:20" }, "product_reference": "nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20" }, "product_reference": "nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.aarch64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20" }, "product_reference": "npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.ppc64le.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20" }, "product_reference": "npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.s390x.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20" }, "product_reference": "npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.x86_64.rpm (nodejs:20) as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20" }, "product_reference": "npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-22018", "discovery_date": "2024-07-10T02:20:15+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2296990" } ], "notes": [ { "category": "description", "text": "A flaw was found in the Node.js package. This flaw arises from an inadequate permission model that fails to restrict file stats through the fs.lstat API. As a result, malicious actors can retrieve stats from files they do not have explicit read access to.", "title": "Vulnerability description" }, { "category": "summary", "text": "nodejs: fs.lstat bypasses permission model", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el9.4.0+22197+9e60f127.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-22018" }, { "category": "external", "summary": "RHBZ#2296990", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2296990" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-22018", "url": "https://www.cve.org/CVERecord?id=CVE-2024-22018" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-22018", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-22018" }, { "category": "external", "summary": "https://hackerone.com/reports/2145862", "url": "https://hackerone.com/reports/2145862" } ], "release_date": "2024-07-10T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-08-26T08:12:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el9.4.0+22197+9e60f127.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:5815" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 2.9, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.0" }, "products": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el9.4.0+22197+9e60f127.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "nodejs: fs.lstat bypasses permission model" }, { "cve": "CVE-2024-22020", "discovery_date": "2024-07-09T02:20:08+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2296417" } ], "notes": [ { "category": "description", "text": "A flaw was found in the Node.js package. By embedding non-network imports in data URLs, this flaw allows an attacker to execute arbitrary code, compromising system security.", "title": "Vulnerability description" }, { "category": "summary", "text": "nodejs: Bypass network import restriction via data URL", "title": "Vulnerability summary" }, { "category": "other", "text": "This vulnerability is categorized as moderate severity rather than high due to its specific conditions for exploitation and impact scope. While the flaw permits bypassing network import restrictions via data URLs to execute arbitrary code, its exploitation is contingent on the attacker\u2019s ability to inject and execute code within a controlled environment. The impact is constrained to scenarios where the vulnerable application processes data URLs and lacks robust validation mechanisms. Additionally, this issue requires the attacker to exploit specific code paths and permissions, which limits its widespread applicability.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el9.4.0+22197+9e60f127.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-22020" }, { "category": "external", "summary": "RHBZ#2296417", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2296417" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-22020", "url": "https://www.cve.org/CVERecord?id=CVE-2024-22020" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-22020", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-22020" }, { "category": "external", "summary": "https://hackerone.com/reports/2092749", "url": "https://hackerone.com/reports/2092749" } ], "release_date": "2024-07-09T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-08-26T08:12:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el9.4.0+22197+9e60f127.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:5815" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el9.4.0+22197+9e60f127.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H", "version": "3.1" }, "products": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el9.4.0+22197+9e60f127.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "nodejs: Bypass network import restriction via data URL" }, { "cve": "CVE-2024-36137", "cwe": { "id": "CWE-732", "name": "Incorrect Permission Assignment for Critical Resource" }, "discovery_date": "2024-07-22T14:03:28+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2299281" } ], "notes": [ { "category": "description", "text": "A flaw was found in Node.js, affecting users of the experimental permission model when the --allow-fs-write flag is used. The Node.js Permission Model does not operate on file descriptors. However, operations such as fs.fchown or fs.fchmod can use a \"read-only\" file descriptor to change the owner and permissions of a file.", "title": "Vulnerability description" }, { "category": "summary", "text": "nodejs: fs.fchown/fchmod bypasses permission model", "title": "Vulnerability summary" }, { "category": "other", "text": "This vulnerability is specific to the Permission Model, which is currently an experimental feature of Node.js.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el9.4.0+22197+9e60f127.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-36137" }, { "category": "external", "summary": "RHBZ#2299281", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2299281" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-36137", "url": "https://www.cve.org/CVERecord?id=CVE-2024-36137" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-36137", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-36137" } ], "release_date": "2024-07-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-08-26T08:12:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el9.4.0+22197+9e60f127.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:5815" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 3.9, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N", "version": "3.1" }, "products": [ "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debuginfo-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-debugsource-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-devel-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-docs-20.16.0-1.module+el9.4.0+22197+9e60f127.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-full-i18n-20.16.0-1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d.src.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d.noarch.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.aarch64.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.ppc64le.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.s390x.rpm-nodejs:20", "AppStream-9.4.0.Z.MAIN.EUS:npm-10.8.1-1.20.16.0.1.module+el9.4.0+22197+9e60f127.x86_64.rpm-nodejs:20" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "nodejs: fs.fchown/fchmod bypasses permission model" } ] }
rhsa-2024_6148
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for the nodejs:18 module is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. \n\nSecurity Fix(es):\n\n* node-tar: denial of service while parsing a tar file due to lack of folders depth validation (CVE-2024-28863)\n\n* nodejs: Bypass network import restriction via data URL (CVE-2024-22020)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2024:6148", "url": "https://access.redhat.com/errata/RHSA-2024:6148" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "2293200", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2293200" }, { "category": "external", "summary": "2296417", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2296417" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_6148.json" } ], "title": "Red Hat Security Advisory: nodejs:18 security update", "tracking": { "current_release_date": "2025-01-06T17:58:04+00:00", "generator": { "date": "2025-01-06T17:58:04+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.5" } }, "id": "RHSA-2024:6148", "initial_release_date": "2024-09-03T02:32:16+00:00", "revision_history": [ { "date": "2024-09-03T02:32:16+00:00", "number": "1", "summary": "Initial version" }, { "date": "2024-09-03T02:32:16+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2025-01-06T17:58:04+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux AppStream (v. 8)", "product": { "name": "Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "nodejs:18:8100020240807161023:489197e6", "product": { "name": "nodejs:18:8100020240807161023:489197e6", "product_id": "nodejs:18:8100020240807161023:489197e6", "product_identification_helper": { "purl": "pkg:rpmmod/redhat/nodejs@18:8100020240807161023:489197e6" } } }, { "category": "product_version", "name": "nodejs-docs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.noarch", "product": { "name": "nodejs-docs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.noarch", "product_id": "nodejs-docs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-docs@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=noarch\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-nodemon-0:3.0.1-1.module+el8.10.0+21159+f5a7145d.noarch", "product": { "name": "nodejs-nodemon-0:3.0.1-1.module+el8.10.0+21159+f5a7145d.noarch", "product_id": "nodejs-nodemon-0:3.0.1-1.module+el8.10.0+21159+f5a7145d.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-nodemon@3.0.1-1.module%2Bel8.10.0%2B21159%2Bf5a7145d?arch=noarch" } } }, { "category": "product_version", "name": "nodejs-packaging-0:2021.06-4.module+el8.9.0+19439+7b18b275.noarch", "product": { "name": "nodejs-packaging-0:2021.06-4.module+el8.9.0+19439+7b18b275.noarch", "product_id": "nodejs-packaging-0:2021.06-4.module+el8.9.0+19439+7b18b275.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-packaging@2021.06-4.module%2Bel8.9.0%2B19439%2B7b18b275?arch=noarch" } } }, { "category": "product_version", "name": "nodejs-packaging-bundler-0:2021.06-4.module+el8.9.0+19439+7b18b275.noarch", "product": { "name": "nodejs-packaging-bundler-0:2021.06-4.module+el8.9.0+19439+7b18b275.noarch", "product_id": "nodejs-packaging-bundler-0:2021.06-4.module+el8.9.0+19439+7b18b275.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-packaging-bundler@2021.06-4.module%2Bel8.9.0%2B19439%2B7b18b275?arch=noarch" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.src", "product": { "name": "nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.src", "product_id": "nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=src\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-nodemon-0:3.0.1-1.module+el8.10.0+21159+f5a7145d.src", "product": { "name": "nodejs-nodemon-0:3.0.1-1.module+el8.10.0+21159+f5a7145d.src", "product_id": "nodejs-nodemon-0:3.0.1-1.module+el8.10.0+21159+f5a7145d.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-nodemon@3.0.1-1.module%2Bel8.10.0%2B21159%2Bf5a7145d?arch=src" } } }, { "category": "product_version", "name": "nodejs-packaging-0:2021.06-4.module+el8.9.0+19439+7b18b275.src", "product": { "name": "nodejs-packaging-0:2021.06-4.module+el8.9.0+19439+7b18b275.src", "product_id": "nodejs-packaging-0:2021.06-4.module+el8.9.0+19439+7b18b275.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-packaging@2021.06-4.module%2Bel8.9.0%2B19439%2B7b18b275?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "product": { "name": "nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "product_id": "nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "product": { "name": "nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "product_id": "nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "product": { "name": "nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "product_id": "nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "product": { "name": "nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "product_id": "nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "product": { "name": "nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "product_id": "nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-full-i18n@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.aarch64", "product": { "name": "npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.aarch64", "product_id": "npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@10.7.0-1.18.20.4.1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=aarch64\u0026epoch=1" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "product": { "name": "nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "product_id": "nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "product": { "name": "nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "product_id": "nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "product": { "name": "nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "product_id": "nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "product": { "name": "nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "product_id": "nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "product": { "name": "nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "product_id": "nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-full-i18n@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.ppc64le", "product": { "name": "npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.ppc64le", "product_id": "npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@10.7.0-1.18.20.4.1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=ppc64le\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "product": { "name": "nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "product_id": "nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "product": { "name": "nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "product_id": "nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "product": { "name": "nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "product_id": "nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "product": { "name": "nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "product_id": "nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "product": { "name": "nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "product_id": "nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-full-i18n@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.s390x", "product": { "name": "npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.s390x", "product_id": "npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@10.7.0-1.18.20.4.1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=s390x\u0026epoch=1" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "product": { "name": "nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "product_id": "nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "product": { "name": "nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "product_id": "nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "product": { "name": "nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "product_id": "nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "product": { "name": "nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "product_id": "nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "product": { "name": "nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "product_id": "nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-full-i18n@18.20.4-1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.x86_64", "product": { "name": "npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.x86_64", "product_id": "npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@10.7.0-1.18.20.4.1.module%2Bel8.10.0%2B22199%2B56ea0ead?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "nodejs:18:8100020240807161023:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6" }, "product_reference": "nodejs:18:8100020240807161023:489197e6", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64 as a component of nodejs:18:8100020240807161023:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64" }, "product_reference": "nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le as a component of nodejs:18:8100020240807161023:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le" }, "product_reference": "nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x as a component of nodejs:18:8100020240807161023:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x" }, "product_reference": "nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.src as a component of nodejs:18:8100020240807161023:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.src" }, "product_reference": "nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.src", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64 as a component of nodejs:18:8100020240807161023:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64" }, "product_reference": "nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64 as a component of nodejs:18:8100020240807161023:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64" }, "product_reference": "nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le as a component of nodejs:18:8100020240807161023:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le" }, "product_reference": "nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x as a component of nodejs:18:8100020240807161023:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x" }, "product_reference": "nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64 as a component of nodejs:18:8100020240807161023:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64" }, "product_reference": "nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64 as a component of nodejs:18:8100020240807161023:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64" }, "product_reference": "nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le as a component of nodejs:18:8100020240807161023:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le" }, "product_reference": "nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x as a component of nodejs:18:8100020240807161023:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x" }, "product_reference": "nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64 as a component of nodejs:18:8100020240807161023:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64" }, "product_reference": "nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64 as a component of nodejs:18:8100020240807161023:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64" }, "product_reference": "nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le as a component of nodejs:18:8100020240807161023:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le" }, "product_reference": "nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x as a component of nodejs:18:8100020240807161023:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x" }, "product_reference": "nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64 as a component of nodejs:18:8100020240807161023:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64" }, "product_reference": "nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-docs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.noarch as a component of nodejs:18:8100020240807161023:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-docs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.noarch" }, "product_reference": "nodejs-docs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.noarch", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64 as a component of nodejs:18:8100020240807161023:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64" }, "product_reference": "nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le as a component of nodejs:18:8100020240807161023:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le" }, "product_reference": "nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x as a component of nodejs:18:8100020240807161023:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x" }, "product_reference": "nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64 as a component of nodejs:18:8100020240807161023:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64" }, "product_reference": "nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-nodemon-0:3.0.1-1.module+el8.10.0+21159+f5a7145d.noarch as a component of nodejs:18:8100020240807161023:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-nodemon-0:3.0.1-1.module+el8.10.0+21159+f5a7145d.noarch" }, "product_reference": "nodejs-nodemon-0:3.0.1-1.module+el8.10.0+21159+f5a7145d.noarch", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-nodemon-0:3.0.1-1.module+el8.10.0+21159+f5a7145d.src as a component of nodejs:18:8100020240807161023:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-nodemon-0:3.0.1-1.module+el8.10.0+21159+f5a7145d.src" }, "product_reference": "nodejs-nodemon-0:3.0.1-1.module+el8.10.0+21159+f5a7145d.src", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-packaging-0:2021.06-4.module+el8.9.0+19439+7b18b275.noarch as a component of nodejs:18:8100020240807161023:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-packaging-0:2021.06-4.module+el8.9.0+19439+7b18b275.noarch" }, "product_reference": "nodejs-packaging-0:2021.06-4.module+el8.9.0+19439+7b18b275.noarch", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-packaging-0:2021.06-4.module+el8.9.0+19439+7b18b275.src as a component of nodejs:18:8100020240807161023:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-packaging-0:2021.06-4.module+el8.9.0+19439+7b18b275.src" }, "product_reference": "nodejs-packaging-0:2021.06-4.module+el8.9.0+19439+7b18b275.src", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-packaging-bundler-0:2021.06-4.module+el8.9.0+19439+7b18b275.noarch as a component of nodejs:18:8100020240807161023:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-packaging-bundler-0:2021.06-4.module+el8.9.0+19439+7b18b275.noarch" }, "product_reference": "nodejs-packaging-bundler-0:2021.06-4.module+el8.9.0+19439+7b18b275.noarch", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.aarch64 as a component of nodejs:18:8100020240807161023:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.aarch64" }, "product_reference": "npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.aarch64", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.ppc64le as a component of nodejs:18:8100020240807161023:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.ppc64le" }, "product_reference": "npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.ppc64le", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.s390x as a component of nodejs:18:8100020240807161023:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.s390x" }, "product_reference": "npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.s390x", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6" }, { "category": "default_component_of", "full_product_name": { "name": "npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.x86_64 as a component of nodejs:18:8100020240807161023:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.x86_64" }, "product_reference": "npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.x86_64", "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-22020", "discovery_date": "2024-07-09T02:20:08+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2296417" } ], "notes": [ { "category": "description", "text": "A flaw was found in the Node.js package. By embedding non-network imports in data URLs, this flaw allows an attacker to execute arbitrary code, compromising system security.", "title": "Vulnerability description" }, { "category": "summary", "text": "nodejs: Bypass network import restriction via data URL", "title": "Vulnerability summary" }, { "category": "other", "text": "This vulnerability is categorized as moderate severity rather than high due to its specific conditions for exploitation and impact scope. While the flaw permits bypassing network import restrictions via data URLs to execute arbitrary code, its exploitation is contingent on the attacker\u2019s ability to inject and execute code within a controlled environment. The impact is constrained to scenarios where the vulnerable application processes data URLs and lacks robust validation mechanisms. Additionally, this issue requires the attacker to exploit specific code paths and permissions, which limits its widespread applicability.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-docs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-nodemon-0:3.0.1-1.module+el8.10.0+21159+f5a7145d.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-nodemon-0:3.0.1-1.module+el8.10.0+21159+f5a7145d.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-packaging-0:2021.06-4.module+el8.9.0+19439+7b18b275.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-packaging-0:2021.06-4.module+el8.9.0+19439+7b18b275.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-packaging-bundler-0:2021.06-4.module+el8.9.0+19439+7b18b275.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-22020" }, { "category": "external", "summary": "RHBZ#2296417", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2296417" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-22020", "url": "https://www.cve.org/CVERecord?id=CVE-2024-22020" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-22020", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-22020" }, { "category": "external", "summary": "https://hackerone.com/reports/2092749", "url": "https://hackerone.com/reports/2092749" } ], "release_date": "2024-07-09T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-09-03T02:32:16+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-docs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-nodemon-0:3.0.1-1.module+el8.10.0+21159+f5a7145d.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-nodemon-0:3.0.1-1.module+el8.10.0+21159+f5a7145d.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-packaging-0:2021.06-4.module+el8.9.0+19439+7b18b275.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-packaging-0:2021.06-4.module+el8.9.0+19439+7b18b275.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-packaging-bundler-0:2021.06-4.module+el8.9.0+19439+7b18b275.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:6148" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-docs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-nodemon-0:3.0.1-1.module+el8.10.0+21159+f5a7145d.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-nodemon-0:3.0.1-1.module+el8.10.0+21159+f5a7145d.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-packaging-0:2021.06-4.module+el8.9.0+19439+7b18b275.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-packaging-0:2021.06-4.module+el8.9.0+19439+7b18b275.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-packaging-bundler-0:2021.06-4.module+el8.9.0+19439+7b18b275.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H", "version": "3.1" }, "products": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-docs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-nodemon-0:3.0.1-1.module+el8.10.0+21159+f5a7145d.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-nodemon-0:3.0.1-1.module+el8.10.0+21159+f5a7145d.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-packaging-0:2021.06-4.module+el8.9.0+19439+7b18b275.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-packaging-0:2021.06-4.module+el8.9.0+19439+7b18b275.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-packaging-bundler-0:2021.06-4.module+el8.9.0+19439+7b18b275.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "nodejs: Bypass network import restriction via data URL" }, { "cve": "CVE-2024-28863", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2024-06-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2293200" } ], "notes": [ { "category": "description", "text": "A flaw was found in ISAACS\u0027s node-tar, where it is vulnerable to a denial of service, caused by the lack of folder count validation. The vulnerability exists due to the application not properly controlling the consumption of internal resources while parsing a tar file. By sending a specially crafted request, a remote attacker can trigger resource exhaustion and perform a denial of service (DoS) attack.", "title": "Vulnerability description" }, { "category": "summary", "text": "node-tar: denial of service while parsing a tar file due to lack of folders depth validation", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-docs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-nodemon-0:3.0.1-1.module+el8.10.0+21159+f5a7145d.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-nodemon-0:3.0.1-1.module+el8.10.0+21159+f5a7145d.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-packaging-0:2021.06-4.module+el8.9.0+19439+7b18b275.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-packaging-0:2021.06-4.module+el8.9.0+19439+7b18b275.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-packaging-bundler-0:2021.06-4.module+el8.9.0+19439+7b18b275.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-28863" }, { "category": "external", "summary": "RHBZ#2293200", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2293200" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-28863", "url": "https://www.cve.org/CVERecord?id=CVE-2024-28863" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-28863", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28863" }, { "category": "external", "summary": "https://github.com/isaacs/node-tar/security/advisories/GHSA-f5x3-32g6-xq36", "url": "https://github.com/isaacs/node-tar/security/advisories/GHSA-f5x3-32g6-xq36" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240524-0005/", "url": "https://security.netapp.com/advisory/ntap-20240524-0005/" } ], "release_date": "2024-03-21T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-09-03T02:32:16+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-docs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-nodemon-0:3.0.1-1.module+el8.10.0+21159+f5a7145d.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-nodemon-0:3.0.1-1.module+el8.10.0+21159+f5a7145d.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-packaging-0:2021.06-4.module+el8.9.0+19439+7b18b275.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-packaging-0:2021.06-4.module+el8.9.0+19439+7b18b275.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-packaging-bundler-0:2021.06-4.module+el8.9.0+19439+7b18b275.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:6148" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debuginfo-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-debugsource-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-devel-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-docs-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-full-i18n-1:18.20.4-1.module+el8.10.0+22199+56ea0ead.x86_64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-nodemon-0:3.0.1-1.module+el8.10.0+21159+f5a7145d.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-nodemon-0:3.0.1-1.module+el8.10.0+21159+f5a7145d.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-packaging-0:2021.06-4.module+el8.9.0+19439+7b18b275.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-packaging-0:2021.06-4.module+el8.9.0+19439+7b18b275.src", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:nodejs-packaging-bundler-0:2021.06-4.module+el8.9.0+19439+7b18b275.noarch", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.aarch64", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.ppc64le", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.s390x", "AppStream-8.10.0.Z.MAIN.EUS:nodejs:18:8100020240807161023:489197e6:npm-1:10.7.0-1.18.20.4.1.module+el8.10.0+22199+56ea0ead.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "node-tar: denial of service while parsing a tar file due to lack of folders depth validation" } ] }
suse-su-2024:2496-1
Vulnerability from csaf_suse
Notes
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for nodejs18", "title": "Title of the patch" }, { "category": "description", "text": "This update for nodejs18 fixes the following issues:\n\nUpdate to 18.20.4:\n\n- CVE-2024-36138: Fixed CVE-2024-27980 fix bypass (bsc#1227560)\n- CVE-2024-22020: Fixed a bypass of network import restriction via data URL (bsc#1227554)\n\nChanges in 18.20.3:\n\n- This release fixes a regression introduced in Node.js 18.19.0 where http.server.close() was incorrectly closing idle connections.\n deps:\n - acorn updated to 8.11.3.\n - acorn-walk updated to 8.3.2.\n - ada updated to 2.7.8.\n - c-ares updated to 1.28.1.\n - corepack updated to 0.28.0.\n - nghttp2 updated to 1.61.0.\n - ngtcp2 updated to 1.3.0.\n - npm updated to 10.7.0. Includes a fix from npm@10.5.1 to limit the number of open connections npm/cli#7324.\n - simdutf updated to 5.2.4.\n\nChanges in 18.20.2:\n\n- CVE-2024-27980: Fixed command injection via args parameter of child_process.spawn without shell option enabled on Windows (bsc#1222665)\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-2024-2496,SUSE-SLE-Module-Web-Scripting-12-2024-2496", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_2496-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2024:2496-1", "url": "https://www.suse.com/support/update/announcement/2024/suse-su-20242496-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2024:2496-1", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-July/018981.html" }, { "category": "self", "summary": "SUSE Bug 1222665", "url": "https://bugzilla.suse.com/1222665" }, { "category": "self", "summary": "SUSE Bug 1227554", "url": "https://bugzilla.suse.com/1227554" }, { "category": "self", "summary": "SUSE Bug 1227560", "url": "https://bugzilla.suse.com/1227560" }, { "category": "self", "summary": "SUSE CVE CVE-2024-22020 page", "url": "https://www.suse.com/security/cve/CVE-2024-22020/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-27980 page", "url": "https://www.suse.com/security/cve/CVE-2024-27980/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-36138 page", "url": "https://www.suse.com/security/cve/CVE-2024-36138/" } ], "title": "Security update for nodejs18", "tracking": { "current_release_date": "2024-07-16T07:33:47Z", "generator": { "date": "2024-07-16T07:33:47Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2024:2496-1", "initial_release_date": "2024-07-16T07:33:47Z", "revision_history": [ { "date": "2024-07-16T07:33:47Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "corepack18-18.20.4-8.24.1.aarch64", "product": { "name": "corepack18-18.20.4-8.24.1.aarch64", "product_id": "corepack18-18.20.4-8.24.1.aarch64" } }, { "category": "product_version", "name": "nodejs18-18.20.4-8.24.1.aarch64", "product": { "name": "nodejs18-18.20.4-8.24.1.aarch64", "product_id": "nodejs18-18.20.4-8.24.1.aarch64" } }, { "category": "product_version", "name": "nodejs18-devel-18.20.4-8.24.1.aarch64", "product": { "name": "nodejs18-devel-18.20.4-8.24.1.aarch64", "product_id": "nodejs18-devel-18.20.4-8.24.1.aarch64" } }, { "category": "product_version", "name": "npm18-18.20.4-8.24.1.aarch64", "product": { "name": "npm18-18.20.4-8.24.1.aarch64", "product_id": "npm18-18.20.4-8.24.1.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "corepack18-18.20.4-8.24.1.i586", "product": { "name": "corepack18-18.20.4-8.24.1.i586", "product_id": "corepack18-18.20.4-8.24.1.i586" } }, { "category": "product_version", "name": "nodejs18-18.20.4-8.24.1.i586", "product": { "name": "nodejs18-18.20.4-8.24.1.i586", "product_id": "nodejs18-18.20.4-8.24.1.i586" } }, { "category": "product_version", "name": "nodejs18-devel-18.20.4-8.24.1.i586", "product": { "name": "nodejs18-devel-18.20.4-8.24.1.i586", "product_id": "nodejs18-devel-18.20.4-8.24.1.i586" } }, { "category": "product_version", "name": "npm18-18.20.4-8.24.1.i586", "product": { "name": "npm18-18.20.4-8.24.1.i586", "product_id": "npm18-18.20.4-8.24.1.i586" } } ], "category": "architecture", "name": "i586" }, { "branches": [ { "category": "product_version", "name": "nodejs18-docs-18.20.4-8.24.1.noarch", "product": { "name": "nodejs18-docs-18.20.4-8.24.1.noarch", "product_id": "nodejs18-docs-18.20.4-8.24.1.noarch" } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "corepack18-18.20.4-8.24.1.ppc64le", "product": { "name": "corepack18-18.20.4-8.24.1.ppc64le", "product_id": "corepack18-18.20.4-8.24.1.ppc64le" } }, { "category": "product_version", "name": "nodejs18-18.20.4-8.24.1.ppc64le", "product": { "name": "nodejs18-18.20.4-8.24.1.ppc64le", "product_id": "nodejs18-18.20.4-8.24.1.ppc64le" } }, { "category": "product_version", "name": "nodejs18-devel-18.20.4-8.24.1.ppc64le", "product": { "name": "nodejs18-devel-18.20.4-8.24.1.ppc64le", "product_id": "nodejs18-devel-18.20.4-8.24.1.ppc64le" } }, { "category": "product_version", "name": "npm18-18.20.4-8.24.1.ppc64le", "product": { "name": "npm18-18.20.4-8.24.1.ppc64le", "product_id": "npm18-18.20.4-8.24.1.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "corepack18-18.20.4-8.24.1.s390x", "product": { "name": "corepack18-18.20.4-8.24.1.s390x", "product_id": "corepack18-18.20.4-8.24.1.s390x" } }, { "category": "product_version", "name": "nodejs18-18.20.4-8.24.1.s390x", "product": { "name": "nodejs18-18.20.4-8.24.1.s390x", "product_id": "nodejs18-18.20.4-8.24.1.s390x" } }, { "category": "product_version", "name": "nodejs18-devel-18.20.4-8.24.1.s390x", "product": { "name": "nodejs18-devel-18.20.4-8.24.1.s390x", "product_id": "nodejs18-devel-18.20.4-8.24.1.s390x" } }, { "category": "product_version", "name": "npm18-18.20.4-8.24.1.s390x", "product": { "name": "npm18-18.20.4-8.24.1.s390x", "product_id": "npm18-18.20.4-8.24.1.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "corepack18-18.20.4-8.24.1.x86_64", "product": { "name": "corepack18-18.20.4-8.24.1.x86_64", "product_id": "corepack18-18.20.4-8.24.1.x86_64" } }, { "category": "product_version", "name": "nodejs18-18.20.4-8.24.1.x86_64", "product": { "name": "nodejs18-18.20.4-8.24.1.x86_64", "product_id": "nodejs18-18.20.4-8.24.1.x86_64" } }, { "category": "product_version", "name": "nodejs18-devel-18.20.4-8.24.1.x86_64", "product": { "name": "nodejs18-devel-18.20.4-8.24.1.x86_64", "product_id": "nodejs18-devel-18.20.4-8.24.1.x86_64" } }, { "category": "product_version", "name": "npm18-18.20.4-8.24.1.x86_64", "product": { "name": "npm18-18.20.4-8.24.1.x86_64", "product_id": "npm18-18.20.4-8.24.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Enterprise Module for Web and Scripting 12", "product": { "name": "SUSE Linux Enterprise Module for Web and Scripting 12", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-module-web-scripting:12" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "nodejs18-18.20.4-8.24.1.aarch64 as component of SUSE Linux Enterprise Module for Web and Scripting 12", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-18.20.4-8.24.1.aarch64" }, "product_reference": "nodejs18-18.20.4-8.24.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs18-18.20.4-8.24.1.ppc64le as component of SUSE Linux Enterprise Module for Web and Scripting 12", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-18.20.4-8.24.1.ppc64le" }, "product_reference": "nodejs18-18.20.4-8.24.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs18-18.20.4-8.24.1.s390x as component of SUSE Linux Enterprise Module for Web and Scripting 12", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-18.20.4-8.24.1.s390x" }, "product_reference": "nodejs18-18.20.4-8.24.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs18-18.20.4-8.24.1.x86_64 as component of SUSE Linux Enterprise Module for Web and Scripting 12", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-18.20.4-8.24.1.x86_64" }, "product_reference": "nodejs18-18.20.4-8.24.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs18-devel-18.20.4-8.24.1.aarch64 as component of SUSE Linux Enterprise Module for Web and Scripting 12", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-devel-18.20.4-8.24.1.aarch64" }, "product_reference": "nodejs18-devel-18.20.4-8.24.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs18-devel-18.20.4-8.24.1.ppc64le as component of SUSE Linux Enterprise Module for Web and Scripting 12", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-devel-18.20.4-8.24.1.ppc64le" }, "product_reference": "nodejs18-devel-18.20.4-8.24.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs18-devel-18.20.4-8.24.1.s390x as component of SUSE Linux Enterprise Module for Web and Scripting 12", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-devel-18.20.4-8.24.1.s390x" }, "product_reference": "nodejs18-devel-18.20.4-8.24.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs18-devel-18.20.4-8.24.1.x86_64 as component of SUSE Linux Enterprise Module for Web and Scripting 12", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-devel-18.20.4-8.24.1.x86_64" }, "product_reference": "nodejs18-devel-18.20.4-8.24.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs18-docs-18.20.4-8.24.1.noarch as component of SUSE Linux Enterprise Module for Web and Scripting 12", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-docs-18.20.4-8.24.1.noarch" }, "product_reference": "nodejs18-docs-18.20.4-8.24.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12" }, { "category": "default_component_of", "full_product_name": { "name": "npm18-18.20.4-8.24.1.aarch64 as component of SUSE Linux Enterprise Module for Web and Scripting 12", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:npm18-18.20.4-8.24.1.aarch64" }, "product_reference": "npm18-18.20.4-8.24.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12" }, { "category": "default_component_of", "full_product_name": { "name": "npm18-18.20.4-8.24.1.ppc64le as component of SUSE Linux Enterprise Module for Web and Scripting 12", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:npm18-18.20.4-8.24.1.ppc64le" }, "product_reference": "npm18-18.20.4-8.24.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12" }, { "category": "default_component_of", "full_product_name": { "name": "npm18-18.20.4-8.24.1.s390x as component of SUSE Linux Enterprise Module for Web and Scripting 12", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:npm18-18.20.4-8.24.1.s390x" }, "product_reference": "npm18-18.20.4-8.24.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12" }, { "category": "default_component_of", "full_product_name": { "name": "npm18-18.20.4-8.24.1.x86_64 as component of SUSE Linux Enterprise Module for Web and Scripting 12", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:npm18-18.20.4-8.24.1.x86_64" }, "product_reference": "npm18-18.20.4-8.24.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-22020", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-22020" } ], "notes": [ { "category": "general", "text": "A security flaw in Node.js allows a bypass of network import restrictions.\nBy embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security.\nVerified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports.\nExploiting this flaw can violate network import security, posing a risk to developers and servers.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-18.20.4-8.24.1.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-18.20.4-8.24.1.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-18.20.4-8.24.1.s390x", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-18.20.4-8.24.1.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-devel-18.20.4-8.24.1.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-devel-18.20.4-8.24.1.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-devel-18.20.4-8.24.1.s390x", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-devel-18.20.4-8.24.1.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-docs-18.20.4-8.24.1.noarch", "SUSE Linux Enterprise Module for Web and Scripting 12:npm18-18.20.4-8.24.1.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 12:npm18-18.20.4-8.24.1.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 12:npm18-18.20.4-8.24.1.s390x", "SUSE Linux Enterprise Module for Web and Scripting 12:npm18-18.20.4-8.24.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-22020", "url": "https://www.suse.com/security/cve/CVE-2024-22020" }, { "category": "external", "summary": "SUSE Bug 1227554 for CVE-2024-22020", "url": "https://bugzilla.suse.com/1227554" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-18.20.4-8.24.1.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-18.20.4-8.24.1.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-18.20.4-8.24.1.s390x", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-18.20.4-8.24.1.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-devel-18.20.4-8.24.1.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-devel-18.20.4-8.24.1.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-devel-18.20.4-8.24.1.s390x", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-devel-18.20.4-8.24.1.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-docs-18.20.4-8.24.1.noarch", "SUSE Linux Enterprise Module for Web and Scripting 12:npm18-18.20.4-8.24.1.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 12:npm18-18.20.4-8.24.1.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 12:npm18-18.20.4-8.24.1.s390x", "SUSE Linux Enterprise Module for Web and Scripting 12:npm18-18.20.4-8.24.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-18.20.4-8.24.1.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-18.20.4-8.24.1.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-18.20.4-8.24.1.s390x", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-18.20.4-8.24.1.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-devel-18.20.4-8.24.1.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-devel-18.20.4-8.24.1.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-devel-18.20.4-8.24.1.s390x", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-devel-18.20.4-8.24.1.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-docs-18.20.4-8.24.1.noarch", "SUSE Linux Enterprise Module for Web and Scripting 12:npm18-18.20.4-8.24.1.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 12:npm18-18.20.4-8.24.1.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 12:npm18-18.20.4-8.24.1.s390x", "SUSE Linux Enterprise Module for Web and Scripting 12:npm18-18.20.4-8.24.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-07-16T07:33:47Z", "details": "moderate" } ], "title": "CVE-2024-22020" }, { "cve": "CVE-2024-27980", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-27980" } ], "notes": [ { "category": "general", "text": "Due to the improper handling of batch files in child_process.spawn / child_process.spawnSync, a malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-18.20.4-8.24.1.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-18.20.4-8.24.1.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-18.20.4-8.24.1.s390x", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-18.20.4-8.24.1.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-devel-18.20.4-8.24.1.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-devel-18.20.4-8.24.1.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-devel-18.20.4-8.24.1.s390x", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-devel-18.20.4-8.24.1.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-docs-18.20.4-8.24.1.noarch", "SUSE Linux Enterprise Module for Web and Scripting 12:npm18-18.20.4-8.24.1.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 12:npm18-18.20.4-8.24.1.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 12:npm18-18.20.4-8.24.1.s390x", "SUSE Linux Enterprise Module for Web and Scripting 12:npm18-18.20.4-8.24.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-27980", "url": "https://www.suse.com/security/cve/CVE-2024-27980" }, { "category": "external", "summary": "SUSE Bug 1222665 for CVE-2024-27980", "url": "https://bugzilla.suse.com/1222665" }, { "category": "external", "summary": "SUSE Bug 1227560 for CVE-2024-27980", "url": "https://bugzilla.suse.com/1227560" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-18.20.4-8.24.1.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-18.20.4-8.24.1.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-18.20.4-8.24.1.s390x", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-18.20.4-8.24.1.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-devel-18.20.4-8.24.1.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-devel-18.20.4-8.24.1.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-devel-18.20.4-8.24.1.s390x", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-devel-18.20.4-8.24.1.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-docs-18.20.4-8.24.1.noarch", "SUSE Linux Enterprise Module for Web and Scripting 12:npm18-18.20.4-8.24.1.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 12:npm18-18.20.4-8.24.1.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 12:npm18-18.20.4-8.24.1.s390x", "SUSE Linux Enterprise Module for Web and Scripting 12:npm18-18.20.4-8.24.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-07-16T07:33:47Z", "details": "important" } ], "title": "CVE-2024-27980" }, { "cve": "CVE-2024-36138", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-36138" } ], "notes": [ { "category": "general", "text": "Bypass incomplete fix of CVE-2024-27980, that arises from improper handling of batch files with all possible extensions on Windows via child_process.spawn / child_process.spawnSync. A malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-18.20.4-8.24.1.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-18.20.4-8.24.1.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-18.20.4-8.24.1.s390x", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-18.20.4-8.24.1.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-devel-18.20.4-8.24.1.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-devel-18.20.4-8.24.1.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-devel-18.20.4-8.24.1.s390x", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-devel-18.20.4-8.24.1.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-docs-18.20.4-8.24.1.noarch", "SUSE Linux Enterprise Module for Web and Scripting 12:npm18-18.20.4-8.24.1.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 12:npm18-18.20.4-8.24.1.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 12:npm18-18.20.4-8.24.1.s390x", "SUSE Linux Enterprise Module for Web and Scripting 12:npm18-18.20.4-8.24.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-36138", "url": "https://www.suse.com/security/cve/CVE-2024-36138" }, { "category": "external", "summary": "SUSE Bug 1227560 for CVE-2024-36138", "url": "https://bugzilla.suse.com/1227560" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-18.20.4-8.24.1.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-18.20.4-8.24.1.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-18.20.4-8.24.1.s390x", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-18.20.4-8.24.1.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-devel-18.20.4-8.24.1.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-devel-18.20.4-8.24.1.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-devel-18.20.4-8.24.1.s390x", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-devel-18.20.4-8.24.1.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-docs-18.20.4-8.24.1.noarch", "SUSE Linux Enterprise Module for Web and Scripting 12:npm18-18.20.4-8.24.1.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 12:npm18-18.20.4-8.24.1.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 12:npm18-18.20.4-8.24.1.s390x", "SUSE Linux Enterprise Module for Web and Scripting 12:npm18-18.20.4-8.24.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-07-16T07:33:47Z", "details": "important" } ], "title": "CVE-2024-36138" } ] }
suse-su-2024:2542-1
Vulnerability from csaf_suse
Notes
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for nodejs18", "title": "Title of the patch" }, { "category": "description", "text": "This update for nodejs18 fixes the following issues:\n\nUpdate to 18.20.4:\n\n- CVE-2024-36138: Fixed CVE-2024-27980 fix bypass (bsc#1227560)\n- CVE-2024-22020: Fixed a bypass of network import restriction via data URL (bsc#1227554)\n\nChanges in 18.20.3:\n\n- This release fixes a regression introduced in Node.js 18.19.0 where http.server.close() was incorrectly closing idle connections.\n deps:\n - acorn updated to 8.11.3.\n - acorn-walk updated to 8.3.2.\n - ada updated to 2.7.8.\n - c-ares updated to 1.28.1.\n - corepack updated to 0.28.0.\n - nghttp2 updated to 1.61.0.\n - ngtcp2 updated to 1.3.0.\n - npm updated to 10.7.0. Includes a fix from npm@10.5.1 to limit the number of open connections npm/cli#7324.\n - simdutf updated to 5.2.4.\n\nChanges in 18.20.2:\n\n- CVE-2024-27980: Fixed command injection via args parameter of child_process.spawn without shell option enabled on Windows (bsc#1222665)\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-2024-2542,SUSE-SLE-Module-Web-Scripting-15-SP5-2024-2542,openSUSE-SLE-15.5-2024-2542", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_2542-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2024:2542-1", "url": "https://www.suse.com/support/update/announcement/2024/suse-su-20242542-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2024:2542-1", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-July/018991.html" }, { "category": "self", "summary": "SUSE Bug 1222665", "url": "https://bugzilla.suse.com/1222665" }, { "category": "self", "summary": "SUSE Bug 1227554", "url": "https://bugzilla.suse.com/1227554" }, { "category": "self", "summary": "SUSE Bug 1227560", "url": "https://bugzilla.suse.com/1227560" }, { "category": "self", "summary": "SUSE CVE CVE-2024-22020 page", "url": "https://www.suse.com/security/cve/CVE-2024-22020/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-27980 page", "url": "https://www.suse.com/security/cve/CVE-2024-27980/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-36138 page", "url": "https://www.suse.com/security/cve/CVE-2024-36138/" } ], "title": "Security update for nodejs18", "tracking": { "current_release_date": "2024-07-17T07:51:37Z", "generator": { "date": "2024-07-17T07:51:37Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2024:2542-1", "initial_release_date": "2024-07-17T07:51:37Z", "revision_history": [ { "date": "2024-07-17T07:51:37Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "corepack18-18.20.4-150400.9.24.2.aarch64", "product": { "name": "corepack18-18.20.4-150400.9.24.2.aarch64", "product_id": "corepack18-18.20.4-150400.9.24.2.aarch64" } }, { "category": "product_version", "name": "nodejs18-18.20.4-150400.9.24.2.aarch64", "product": { "name": "nodejs18-18.20.4-150400.9.24.2.aarch64", "product_id": "nodejs18-18.20.4-150400.9.24.2.aarch64" } }, { "category": "product_version", "name": "nodejs18-devel-18.20.4-150400.9.24.2.aarch64", "product": { "name": "nodejs18-devel-18.20.4-150400.9.24.2.aarch64", "product_id": "nodejs18-devel-18.20.4-150400.9.24.2.aarch64" } }, { "category": "product_version", "name": "npm18-18.20.4-150400.9.24.2.aarch64", "product": { "name": "npm18-18.20.4-150400.9.24.2.aarch64", "product_id": "npm18-18.20.4-150400.9.24.2.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "corepack18-18.20.4-150400.9.24.2.i586", "product": { "name": "corepack18-18.20.4-150400.9.24.2.i586", "product_id": "corepack18-18.20.4-150400.9.24.2.i586" } }, { "category": "product_version", "name": "nodejs18-18.20.4-150400.9.24.2.i586", "product": { "name": "nodejs18-18.20.4-150400.9.24.2.i586", "product_id": "nodejs18-18.20.4-150400.9.24.2.i586" } }, { "category": "product_version", "name": "nodejs18-devel-18.20.4-150400.9.24.2.i586", "product": { "name": "nodejs18-devel-18.20.4-150400.9.24.2.i586", "product_id": "nodejs18-devel-18.20.4-150400.9.24.2.i586" } }, { "category": "product_version", "name": "npm18-18.20.4-150400.9.24.2.i586", "product": { "name": "npm18-18.20.4-150400.9.24.2.i586", "product_id": "npm18-18.20.4-150400.9.24.2.i586" } } ], "category": "architecture", "name": "i586" }, { "branches": [ { "category": "product_version", "name": "nodejs18-docs-18.20.4-150400.9.24.2.noarch", "product": { "name": "nodejs18-docs-18.20.4-150400.9.24.2.noarch", "product_id": "nodejs18-docs-18.20.4-150400.9.24.2.noarch" } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "corepack18-18.20.4-150400.9.24.2.ppc64le", "product": { "name": "corepack18-18.20.4-150400.9.24.2.ppc64le", "product_id": "corepack18-18.20.4-150400.9.24.2.ppc64le" } }, { "category": "product_version", "name": "nodejs18-18.20.4-150400.9.24.2.ppc64le", "product": { "name": "nodejs18-18.20.4-150400.9.24.2.ppc64le", "product_id": "nodejs18-18.20.4-150400.9.24.2.ppc64le" } }, { "category": "product_version", "name": "nodejs18-devel-18.20.4-150400.9.24.2.ppc64le", "product": { "name": "nodejs18-devel-18.20.4-150400.9.24.2.ppc64le", "product_id": "nodejs18-devel-18.20.4-150400.9.24.2.ppc64le" } }, { "category": "product_version", "name": "npm18-18.20.4-150400.9.24.2.ppc64le", "product": { "name": "npm18-18.20.4-150400.9.24.2.ppc64le", "product_id": "npm18-18.20.4-150400.9.24.2.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "corepack18-18.20.4-150400.9.24.2.s390x", "product": { "name": "corepack18-18.20.4-150400.9.24.2.s390x", "product_id": "corepack18-18.20.4-150400.9.24.2.s390x" } }, { "category": "product_version", "name": "nodejs18-18.20.4-150400.9.24.2.s390x", "product": { "name": "nodejs18-18.20.4-150400.9.24.2.s390x", "product_id": "nodejs18-18.20.4-150400.9.24.2.s390x" } }, { "category": "product_version", "name": "nodejs18-devel-18.20.4-150400.9.24.2.s390x", "product": { "name": "nodejs18-devel-18.20.4-150400.9.24.2.s390x", "product_id": "nodejs18-devel-18.20.4-150400.9.24.2.s390x" } }, { "category": "product_version", "name": "npm18-18.20.4-150400.9.24.2.s390x", "product": { "name": "npm18-18.20.4-150400.9.24.2.s390x", "product_id": "npm18-18.20.4-150400.9.24.2.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "corepack18-18.20.4-150400.9.24.2.x86_64", "product": { "name": "corepack18-18.20.4-150400.9.24.2.x86_64", "product_id": "corepack18-18.20.4-150400.9.24.2.x86_64" } }, { "category": "product_version", "name": "nodejs18-18.20.4-150400.9.24.2.x86_64", "product": { "name": "nodejs18-18.20.4-150400.9.24.2.x86_64", "product_id": "nodejs18-18.20.4-150400.9.24.2.x86_64" } }, { "category": "product_version", "name": "nodejs18-devel-18.20.4-150400.9.24.2.x86_64", "product": { "name": "nodejs18-devel-18.20.4-150400.9.24.2.x86_64", "product_id": "nodejs18-devel-18.20.4-150400.9.24.2.x86_64" } }, { "category": "product_version", "name": "npm18-18.20.4-150400.9.24.2.x86_64", "product": { "name": "npm18-18.20.4-150400.9.24.2.x86_64", "product_id": "npm18-18.20.4-150400.9.24.2.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5", "product": { "name": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-module-web-scripting:15:sp5" } } }, { "category": "product_name", "name": "openSUSE Leap 15.5", "product": { "name": "openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5", "product_identification_helper": { "cpe": "cpe:/o:opensuse:leap:15.5" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "nodejs18-18.20.4-150400.9.24.2.aarch64 as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-18.20.4-150400.9.24.2.aarch64" }, "product_reference": "nodejs18-18.20.4-150400.9.24.2.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs18-18.20.4-150400.9.24.2.ppc64le as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-18.20.4-150400.9.24.2.ppc64le" }, "product_reference": "nodejs18-18.20.4-150400.9.24.2.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs18-18.20.4-150400.9.24.2.s390x as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-18.20.4-150400.9.24.2.s390x" }, "product_reference": "nodejs18-18.20.4-150400.9.24.2.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs18-18.20.4-150400.9.24.2.x86_64 as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-18.20.4-150400.9.24.2.x86_64" }, "product_reference": "nodejs18-18.20.4-150400.9.24.2.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs18-devel-18.20.4-150400.9.24.2.aarch64 as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-devel-18.20.4-150400.9.24.2.aarch64" }, "product_reference": "nodejs18-devel-18.20.4-150400.9.24.2.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs18-devel-18.20.4-150400.9.24.2.ppc64le as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-devel-18.20.4-150400.9.24.2.ppc64le" }, "product_reference": "nodejs18-devel-18.20.4-150400.9.24.2.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs18-devel-18.20.4-150400.9.24.2.s390x as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-devel-18.20.4-150400.9.24.2.s390x" }, "product_reference": "nodejs18-devel-18.20.4-150400.9.24.2.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs18-devel-18.20.4-150400.9.24.2.x86_64 as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-devel-18.20.4-150400.9.24.2.x86_64" }, "product_reference": "nodejs18-devel-18.20.4-150400.9.24.2.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs18-docs-18.20.4-150400.9.24.2.noarch as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-docs-18.20.4-150400.9.24.2.noarch" }, "product_reference": "nodejs18-docs-18.20.4-150400.9.24.2.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "npm18-18.20.4-150400.9.24.2.aarch64 as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm18-18.20.4-150400.9.24.2.aarch64" }, "product_reference": "npm18-18.20.4-150400.9.24.2.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "npm18-18.20.4-150400.9.24.2.ppc64le as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm18-18.20.4-150400.9.24.2.ppc64le" }, "product_reference": "npm18-18.20.4-150400.9.24.2.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "npm18-18.20.4-150400.9.24.2.s390x as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm18-18.20.4-150400.9.24.2.s390x" }, "product_reference": "npm18-18.20.4-150400.9.24.2.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "npm18-18.20.4-150400.9.24.2.x86_64 as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm18-18.20.4-150400.9.24.2.x86_64" }, "product_reference": "npm18-18.20.4-150400.9.24.2.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "corepack18-18.20.4-150400.9.24.2.aarch64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:corepack18-18.20.4-150400.9.24.2.aarch64" }, "product_reference": "corepack18-18.20.4-150400.9.24.2.aarch64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "corepack18-18.20.4-150400.9.24.2.ppc64le as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:corepack18-18.20.4-150400.9.24.2.ppc64le" }, "product_reference": "corepack18-18.20.4-150400.9.24.2.ppc64le", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "corepack18-18.20.4-150400.9.24.2.s390x as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:corepack18-18.20.4-150400.9.24.2.s390x" }, "product_reference": "corepack18-18.20.4-150400.9.24.2.s390x", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "corepack18-18.20.4-150400.9.24.2.x86_64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:corepack18-18.20.4-150400.9.24.2.x86_64" }, "product_reference": "corepack18-18.20.4-150400.9.24.2.x86_64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs18-18.20.4-150400.9.24.2.aarch64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:nodejs18-18.20.4-150400.9.24.2.aarch64" }, "product_reference": "nodejs18-18.20.4-150400.9.24.2.aarch64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs18-18.20.4-150400.9.24.2.ppc64le as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:nodejs18-18.20.4-150400.9.24.2.ppc64le" }, "product_reference": "nodejs18-18.20.4-150400.9.24.2.ppc64le", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs18-18.20.4-150400.9.24.2.s390x as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:nodejs18-18.20.4-150400.9.24.2.s390x" }, "product_reference": "nodejs18-18.20.4-150400.9.24.2.s390x", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs18-18.20.4-150400.9.24.2.x86_64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:nodejs18-18.20.4-150400.9.24.2.x86_64" }, "product_reference": "nodejs18-18.20.4-150400.9.24.2.x86_64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs18-devel-18.20.4-150400.9.24.2.aarch64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:nodejs18-devel-18.20.4-150400.9.24.2.aarch64" }, "product_reference": "nodejs18-devel-18.20.4-150400.9.24.2.aarch64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs18-devel-18.20.4-150400.9.24.2.ppc64le as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:nodejs18-devel-18.20.4-150400.9.24.2.ppc64le" }, "product_reference": "nodejs18-devel-18.20.4-150400.9.24.2.ppc64le", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs18-devel-18.20.4-150400.9.24.2.s390x as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:nodejs18-devel-18.20.4-150400.9.24.2.s390x" }, "product_reference": "nodejs18-devel-18.20.4-150400.9.24.2.s390x", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs18-devel-18.20.4-150400.9.24.2.x86_64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:nodejs18-devel-18.20.4-150400.9.24.2.x86_64" }, "product_reference": "nodejs18-devel-18.20.4-150400.9.24.2.x86_64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs18-docs-18.20.4-150400.9.24.2.noarch as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:nodejs18-docs-18.20.4-150400.9.24.2.noarch" }, "product_reference": "nodejs18-docs-18.20.4-150400.9.24.2.noarch", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "npm18-18.20.4-150400.9.24.2.aarch64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:npm18-18.20.4-150400.9.24.2.aarch64" }, "product_reference": "npm18-18.20.4-150400.9.24.2.aarch64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "npm18-18.20.4-150400.9.24.2.ppc64le as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:npm18-18.20.4-150400.9.24.2.ppc64le" }, "product_reference": "npm18-18.20.4-150400.9.24.2.ppc64le", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "npm18-18.20.4-150400.9.24.2.s390x as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:npm18-18.20.4-150400.9.24.2.s390x" }, "product_reference": "npm18-18.20.4-150400.9.24.2.s390x", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "npm18-18.20.4-150400.9.24.2.x86_64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:npm18-18.20.4-150400.9.24.2.x86_64" }, "product_reference": "npm18-18.20.4-150400.9.24.2.x86_64", "relates_to_product_reference": "openSUSE Leap 15.5" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-22020", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-22020" } ], "notes": [ { "category": "general", "text": "A security flaw in Node.js allows a bypass of network import restrictions.\nBy embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security.\nVerified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports.\nExploiting this flaw can violate network import security, posing a risk to developers and servers.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-18.20.4-150400.9.24.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-18.20.4-150400.9.24.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-18.20.4-150400.9.24.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-18.20.4-150400.9.24.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-devel-18.20.4-150400.9.24.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-devel-18.20.4-150400.9.24.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-devel-18.20.4-150400.9.24.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-devel-18.20.4-150400.9.24.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-docs-18.20.4-150400.9.24.2.noarch", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm18-18.20.4-150400.9.24.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm18-18.20.4-150400.9.24.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm18-18.20.4-150400.9.24.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm18-18.20.4-150400.9.24.2.x86_64", "openSUSE Leap 15.5:corepack18-18.20.4-150400.9.24.2.aarch64", "openSUSE Leap 15.5:corepack18-18.20.4-150400.9.24.2.ppc64le", "openSUSE Leap 15.5:corepack18-18.20.4-150400.9.24.2.s390x", "openSUSE Leap 15.5:corepack18-18.20.4-150400.9.24.2.x86_64", "openSUSE Leap 15.5:nodejs18-18.20.4-150400.9.24.2.aarch64", "openSUSE Leap 15.5:nodejs18-18.20.4-150400.9.24.2.ppc64le", "openSUSE Leap 15.5:nodejs18-18.20.4-150400.9.24.2.s390x", "openSUSE Leap 15.5:nodejs18-18.20.4-150400.9.24.2.x86_64", "openSUSE Leap 15.5:nodejs18-devel-18.20.4-150400.9.24.2.aarch64", "openSUSE Leap 15.5:nodejs18-devel-18.20.4-150400.9.24.2.ppc64le", "openSUSE Leap 15.5:nodejs18-devel-18.20.4-150400.9.24.2.s390x", "openSUSE Leap 15.5:nodejs18-devel-18.20.4-150400.9.24.2.x86_64", "openSUSE Leap 15.5:nodejs18-docs-18.20.4-150400.9.24.2.noarch", "openSUSE Leap 15.5:npm18-18.20.4-150400.9.24.2.aarch64", "openSUSE Leap 15.5:npm18-18.20.4-150400.9.24.2.ppc64le", "openSUSE Leap 15.5:npm18-18.20.4-150400.9.24.2.s390x", "openSUSE Leap 15.5:npm18-18.20.4-150400.9.24.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-22020", "url": "https://www.suse.com/security/cve/CVE-2024-22020" }, { "category": "external", "summary": "SUSE Bug 1227554 for CVE-2024-22020", "url": "https://bugzilla.suse.com/1227554" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-18.20.4-150400.9.24.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-18.20.4-150400.9.24.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-18.20.4-150400.9.24.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-18.20.4-150400.9.24.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-devel-18.20.4-150400.9.24.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-devel-18.20.4-150400.9.24.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-devel-18.20.4-150400.9.24.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-devel-18.20.4-150400.9.24.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-docs-18.20.4-150400.9.24.2.noarch", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm18-18.20.4-150400.9.24.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm18-18.20.4-150400.9.24.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm18-18.20.4-150400.9.24.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm18-18.20.4-150400.9.24.2.x86_64", "openSUSE Leap 15.5:corepack18-18.20.4-150400.9.24.2.aarch64", "openSUSE Leap 15.5:corepack18-18.20.4-150400.9.24.2.ppc64le", "openSUSE Leap 15.5:corepack18-18.20.4-150400.9.24.2.s390x", "openSUSE Leap 15.5:corepack18-18.20.4-150400.9.24.2.x86_64", "openSUSE Leap 15.5:nodejs18-18.20.4-150400.9.24.2.aarch64", "openSUSE Leap 15.5:nodejs18-18.20.4-150400.9.24.2.ppc64le", "openSUSE Leap 15.5:nodejs18-18.20.4-150400.9.24.2.s390x", "openSUSE Leap 15.5:nodejs18-18.20.4-150400.9.24.2.x86_64", "openSUSE Leap 15.5:nodejs18-devel-18.20.4-150400.9.24.2.aarch64", "openSUSE Leap 15.5:nodejs18-devel-18.20.4-150400.9.24.2.ppc64le", "openSUSE Leap 15.5:nodejs18-devel-18.20.4-150400.9.24.2.s390x", "openSUSE Leap 15.5:nodejs18-devel-18.20.4-150400.9.24.2.x86_64", "openSUSE Leap 15.5:nodejs18-docs-18.20.4-150400.9.24.2.noarch", "openSUSE Leap 15.5:npm18-18.20.4-150400.9.24.2.aarch64", "openSUSE Leap 15.5:npm18-18.20.4-150400.9.24.2.ppc64le", "openSUSE Leap 15.5:npm18-18.20.4-150400.9.24.2.s390x", "openSUSE Leap 15.5:npm18-18.20.4-150400.9.24.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-18.20.4-150400.9.24.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-18.20.4-150400.9.24.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-18.20.4-150400.9.24.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-18.20.4-150400.9.24.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-devel-18.20.4-150400.9.24.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-devel-18.20.4-150400.9.24.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-devel-18.20.4-150400.9.24.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-devel-18.20.4-150400.9.24.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-docs-18.20.4-150400.9.24.2.noarch", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm18-18.20.4-150400.9.24.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm18-18.20.4-150400.9.24.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm18-18.20.4-150400.9.24.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm18-18.20.4-150400.9.24.2.x86_64", "openSUSE Leap 15.5:corepack18-18.20.4-150400.9.24.2.aarch64", "openSUSE Leap 15.5:corepack18-18.20.4-150400.9.24.2.ppc64le", "openSUSE Leap 15.5:corepack18-18.20.4-150400.9.24.2.s390x", "openSUSE Leap 15.5:corepack18-18.20.4-150400.9.24.2.x86_64", "openSUSE Leap 15.5:nodejs18-18.20.4-150400.9.24.2.aarch64", "openSUSE Leap 15.5:nodejs18-18.20.4-150400.9.24.2.ppc64le", "openSUSE Leap 15.5:nodejs18-18.20.4-150400.9.24.2.s390x", "openSUSE Leap 15.5:nodejs18-18.20.4-150400.9.24.2.x86_64", "openSUSE Leap 15.5:nodejs18-devel-18.20.4-150400.9.24.2.aarch64", "openSUSE Leap 15.5:nodejs18-devel-18.20.4-150400.9.24.2.ppc64le", "openSUSE Leap 15.5:nodejs18-devel-18.20.4-150400.9.24.2.s390x", "openSUSE Leap 15.5:nodejs18-devel-18.20.4-150400.9.24.2.x86_64", "openSUSE Leap 15.5:nodejs18-docs-18.20.4-150400.9.24.2.noarch", "openSUSE Leap 15.5:npm18-18.20.4-150400.9.24.2.aarch64", "openSUSE Leap 15.5:npm18-18.20.4-150400.9.24.2.ppc64le", "openSUSE Leap 15.5:npm18-18.20.4-150400.9.24.2.s390x", "openSUSE Leap 15.5:npm18-18.20.4-150400.9.24.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-07-17T07:51:37Z", "details": "moderate" } ], "title": "CVE-2024-22020" }, { "cve": "CVE-2024-27980", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-27980" } ], "notes": [ { "category": "general", "text": "Due to the improper handling of batch files in child_process.spawn / child_process.spawnSync, a malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-18.20.4-150400.9.24.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-18.20.4-150400.9.24.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-18.20.4-150400.9.24.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-18.20.4-150400.9.24.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-devel-18.20.4-150400.9.24.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-devel-18.20.4-150400.9.24.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-devel-18.20.4-150400.9.24.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-devel-18.20.4-150400.9.24.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-docs-18.20.4-150400.9.24.2.noarch", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm18-18.20.4-150400.9.24.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm18-18.20.4-150400.9.24.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm18-18.20.4-150400.9.24.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm18-18.20.4-150400.9.24.2.x86_64", "openSUSE Leap 15.5:corepack18-18.20.4-150400.9.24.2.aarch64", "openSUSE Leap 15.5:corepack18-18.20.4-150400.9.24.2.ppc64le", "openSUSE Leap 15.5:corepack18-18.20.4-150400.9.24.2.s390x", "openSUSE Leap 15.5:corepack18-18.20.4-150400.9.24.2.x86_64", "openSUSE Leap 15.5:nodejs18-18.20.4-150400.9.24.2.aarch64", "openSUSE Leap 15.5:nodejs18-18.20.4-150400.9.24.2.ppc64le", "openSUSE Leap 15.5:nodejs18-18.20.4-150400.9.24.2.s390x", "openSUSE Leap 15.5:nodejs18-18.20.4-150400.9.24.2.x86_64", "openSUSE Leap 15.5:nodejs18-devel-18.20.4-150400.9.24.2.aarch64", "openSUSE Leap 15.5:nodejs18-devel-18.20.4-150400.9.24.2.ppc64le", "openSUSE Leap 15.5:nodejs18-devel-18.20.4-150400.9.24.2.s390x", "openSUSE Leap 15.5:nodejs18-devel-18.20.4-150400.9.24.2.x86_64", "openSUSE Leap 15.5:nodejs18-docs-18.20.4-150400.9.24.2.noarch", "openSUSE Leap 15.5:npm18-18.20.4-150400.9.24.2.aarch64", "openSUSE Leap 15.5:npm18-18.20.4-150400.9.24.2.ppc64le", "openSUSE Leap 15.5:npm18-18.20.4-150400.9.24.2.s390x", "openSUSE Leap 15.5:npm18-18.20.4-150400.9.24.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-27980", "url": "https://www.suse.com/security/cve/CVE-2024-27980" }, { "category": "external", "summary": "SUSE Bug 1222665 for CVE-2024-27980", "url": "https://bugzilla.suse.com/1222665" }, { "category": "external", "summary": "SUSE Bug 1227560 for CVE-2024-27980", "url": "https://bugzilla.suse.com/1227560" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-18.20.4-150400.9.24.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-18.20.4-150400.9.24.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-18.20.4-150400.9.24.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-18.20.4-150400.9.24.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-devel-18.20.4-150400.9.24.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-devel-18.20.4-150400.9.24.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-devel-18.20.4-150400.9.24.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-devel-18.20.4-150400.9.24.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-docs-18.20.4-150400.9.24.2.noarch", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm18-18.20.4-150400.9.24.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm18-18.20.4-150400.9.24.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm18-18.20.4-150400.9.24.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm18-18.20.4-150400.9.24.2.x86_64", "openSUSE Leap 15.5:corepack18-18.20.4-150400.9.24.2.aarch64", "openSUSE Leap 15.5:corepack18-18.20.4-150400.9.24.2.ppc64le", "openSUSE Leap 15.5:corepack18-18.20.4-150400.9.24.2.s390x", "openSUSE Leap 15.5:corepack18-18.20.4-150400.9.24.2.x86_64", "openSUSE Leap 15.5:nodejs18-18.20.4-150400.9.24.2.aarch64", "openSUSE Leap 15.5:nodejs18-18.20.4-150400.9.24.2.ppc64le", "openSUSE Leap 15.5:nodejs18-18.20.4-150400.9.24.2.s390x", "openSUSE Leap 15.5:nodejs18-18.20.4-150400.9.24.2.x86_64", "openSUSE Leap 15.5:nodejs18-devel-18.20.4-150400.9.24.2.aarch64", "openSUSE Leap 15.5:nodejs18-devel-18.20.4-150400.9.24.2.ppc64le", "openSUSE Leap 15.5:nodejs18-devel-18.20.4-150400.9.24.2.s390x", "openSUSE Leap 15.5:nodejs18-devel-18.20.4-150400.9.24.2.x86_64", "openSUSE Leap 15.5:nodejs18-docs-18.20.4-150400.9.24.2.noarch", "openSUSE Leap 15.5:npm18-18.20.4-150400.9.24.2.aarch64", "openSUSE Leap 15.5:npm18-18.20.4-150400.9.24.2.ppc64le", "openSUSE Leap 15.5:npm18-18.20.4-150400.9.24.2.s390x", "openSUSE Leap 15.5:npm18-18.20.4-150400.9.24.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-07-17T07:51:37Z", "details": "important" } ], "title": "CVE-2024-27980" }, { "cve": "CVE-2024-36138", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-36138" } ], "notes": [ { "category": "general", "text": "Bypass incomplete fix of CVE-2024-27980, that arises from improper handling of batch files with all possible extensions on Windows via child_process.spawn / child_process.spawnSync. A malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-18.20.4-150400.9.24.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-18.20.4-150400.9.24.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-18.20.4-150400.9.24.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-18.20.4-150400.9.24.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-devel-18.20.4-150400.9.24.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-devel-18.20.4-150400.9.24.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-devel-18.20.4-150400.9.24.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-devel-18.20.4-150400.9.24.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-docs-18.20.4-150400.9.24.2.noarch", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm18-18.20.4-150400.9.24.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm18-18.20.4-150400.9.24.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm18-18.20.4-150400.9.24.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm18-18.20.4-150400.9.24.2.x86_64", "openSUSE Leap 15.5:corepack18-18.20.4-150400.9.24.2.aarch64", "openSUSE Leap 15.5:corepack18-18.20.4-150400.9.24.2.ppc64le", "openSUSE Leap 15.5:corepack18-18.20.4-150400.9.24.2.s390x", "openSUSE Leap 15.5:corepack18-18.20.4-150400.9.24.2.x86_64", "openSUSE Leap 15.5:nodejs18-18.20.4-150400.9.24.2.aarch64", "openSUSE Leap 15.5:nodejs18-18.20.4-150400.9.24.2.ppc64le", "openSUSE Leap 15.5:nodejs18-18.20.4-150400.9.24.2.s390x", "openSUSE Leap 15.5:nodejs18-18.20.4-150400.9.24.2.x86_64", "openSUSE Leap 15.5:nodejs18-devel-18.20.4-150400.9.24.2.aarch64", "openSUSE Leap 15.5:nodejs18-devel-18.20.4-150400.9.24.2.ppc64le", "openSUSE Leap 15.5:nodejs18-devel-18.20.4-150400.9.24.2.s390x", "openSUSE Leap 15.5:nodejs18-devel-18.20.4-150400.9.24.2.x86_64", "openSUSE Leap 15.5:nodejs18-docs-18.20.4-150400.9.24.2.noarch", "openSUSE Leap 15.5:npm18-18.20.4-150400.9.24.2.aarch64", "openSUSE Leap 15.5:npm18-18.20.4-150400.9.24.2.ppc64le", "openSUSE Leap 15.5:npm18-18.20.4-150400.9.24.2.s390x", "openSUSE Leap 15.5:npm18-18.20.4-150400.9.24.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-36138", "url": "https://www.suse.com/security/cve/CVE-2024-36138" }, { "category": "external", "summary": "SUSE Bug 1227560 for CVE-2024-36138", "url": "https://bugzilla.suse.com/1227560" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-18.20.4-150400.9.24.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-18.20.4-150400.9.24.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-18.20.4-150400.9.24.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-18.20.4-150400.9.24.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-devel-18.20.4-150400.9.24.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-devel-18.20.4-150400.9.24.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-devel-18.20.4-150400.9.24.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-devel-18.20.4-150400.9.24.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-docs-18.20.4-150400.9.24.2.noarch", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm18-18.20.4-150400.9.24.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm18-18.20.4-150400.9.24.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm18-18.20.4-150400.9.24.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm18-18.20.4-150400.9.24.2.x86_64", "openSUSE Leap 15.5:corepack18-18.20.4-150400.9.24.2.aarch64", "openSUSE Leap 15.5:corepack18-18.20.4-150400.9.24.2.ppc64le", "openSUSE Leap 15.5:corepack18-18.20.4-150400.9.24.2.s390x", "openSUSE Leap 15.5:corepack18-18.20.4-150400.9.24.2.x86_64", "openSUSE Leap 15.5:nodejs18-18.20.4-150400.9.24.2.aarch64", "openSUSE Leap 15.5:nodejs18-18.20.4-150400.9.24.2.ppc64le", "openSUSE Leap 15.5:nodejs18-18.20.4-150400.9.24.2.s390x", "openSUSE Leap 15.5:nodejs18-18.20.4-150400.9.24.2.x86_64", "openSUSE Leap 15.5:nodejs18-devel-18.20.4-150400.9.24.2.aarch64", "openSUSE Leap 15.5:nodejs18-devel-18.20.4-150400.9.24.2.ppc64le", "openSUSE Leap 15.5:nodejs18-devel-18.20.4-150400.9.24.2.s390x", "openSUSE Leap 15.5:nodejs18-devel-18.20.4-150400.9.24.2.x86_64", "openSUSE Leap 15.5:nodejs18-docs-18.20.4-150400.9.24.2.noarch", "openSUSE Leap 15.5:npm18-18.20.4-150400.9.24.2.aarch64", "openSUSE Leap 15.5:npm18-18.20.4-150400.9.24.2.ppc64le", "openSUSE Leap 15.5:npm18-18.20.4-150400.9.24.2.s390x", "openSUSE Leap 15.5:npm18-18.20.4-150400.9.24.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-07-17T07:51:37Z", "details": "important" } ], "title": "CVE-2024-36138" } ] }
suse-su-2024:2574-1
Vulnerability from csaf_suse
Notes
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for nodejs20", "title": "Title of the patch" }, { "category": "description", "text": "This update for nodejs20 fixes the following issues:\n\nUpdate to 20.15.1:\n\n- CVE-2024-36138: Fixed CVE-2024-27980 fix bypass (bsc#1227560)\n- CVE-2024-22020: Fixed a bypass of network import restriction via data URL (bsc#1227554)\n- CVE-2024-22018: Fixed fs.lstat bypasses permission model (bsc#1227562)\n- CVE-2024-36137: Fixed fs.fchown/fchmod bypasses permission model (bsc#1227561)\n- CVE-2024-37372: Fixed Permission model improperly processes UNC paths (bsc#1227563)\n\nChanges in 20.15.0:\n\n- test_runner: support test plans\n- inspector: introduce the --inspect-wait flag\n- zlib: expose zlib.crc32()\n- cli: allow running wasm in limited vmem with --disable-wasm-trap-handler\n\nChanges in 20.14.0\n\n- src,permission: throw async errors on async APIs\n- test_runner: support forced exit\n\nChanges in 20.13.1:\n\n- buffer: improve base64 and base64url performance\n- crypto: deprecate implicitly shortened GCM tags\n- events,doc: mark CustomEvent as stable\n- fs: add stacktrace to fs/promises\n- report: add --report-exclude-network option\n- src: add uv_get_available_memory to report and process\n- stream: support typed arrays\n- util: support array of formats in util.styleText\n- v8: implement v8.queryObjects() for memory leak regression testing\n- watch: mark as stable\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-2024-2574,SUSE-SLE-Module-Web-Scripting-15-SP6-2024-2574,openSUSE-SLE-15.6-2024-2574", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_2574-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2024:2574-1", "url": "https://www.suse.com/support/update/announcement/2024/suse-su-20242574-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2024:2574-1", "url": "https://lists.suse.com/pipermail/sle-updates/2024-July/036101.html" }, { "category": "self", "summary": "SUSE Bug 1227554", "url": "https://bugzilla.suse.com/1227554" }, { "category": "self", "summary": "SUSE Bug 1227560", "url": "https://bugzilla.suse.com/1227560" }, { "category": "self", "summary": "SUSE Bug 1227561", "url": "https://bugzilla.suse.com/1227561" }, { "category": "self", "summary": "SUSE Bug 1227562", "url": "https://bugzilla.suse.com/1227562" }, { "category": "self", "summary": "SUSE Bug 1227563", "url": "https://bugzilla.suse.com/1227563" }, { "category": "self", "summary": "SUSE CVE CVE-2024-22018 page", "url": "https://www.suse.com/security/cve/CVE-2024-22018/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-22020 page", "url": "https://www.suse.com/security/cve/CVE-2024-22020/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-27980 page", "url": "https://www.suse.com/security/cve/CVE-2024-27980/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-36137 page", "url": "https://www.suse.com/security/cve/CVE-2024-36137/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-36138 page", "url": "https://www.suse.com/security/cve/CVE-2024-36138/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-37372 page", "url": "https://www.suse.com/security/cve/CVE-2024-37372/" } ], "title": "Security update for nodejs20", "tracking": { "current_release_date": "2024-07-22T10:35:15Z", "generator": { "date": "2024-07-22T10:35:15Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2024:2574-1", "initial_release_date": "2024-07-22T10:35:15Z", "revision_history": [ { "date": "2024-07-22T10:35:15Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "corepack20-20.15.1-150600.3.3.2.aarch64", "product": { "name": "corepack20-20.15.1-150600.3.3.2.aarch64", "product_id": "corepack20-20.15.1-150600.3.3.2.aarch64" } }, { "category": "product_version", "name": "nodejs20-20.15.1-150600.3.3.2.aarch64", "product": { "name": "nodejs20-20.15.1-150600.3.3.2.aarch64", "product_id": "nodejs20-20.15.1-150600.3.3.2.aarch64" } }, { "category": "product_version", "name": "nodejs20-devel-20.15.1-150600.3.3.2.aarch64", "product": { "name": "nodejs20-devel-20.15.1-150600.3.3.2.aarch64", "product_id": "nodejs20-devel-20.15.1-150600.3.3.2.aarch64" } }, { "category": "product_version", "name": "npm20-20.15.1-150600.3.3.2.aarch64", "product": { "name": "npm20-20.15.1-150600.3.3.2.aarch64", "product_id": "npm20-20.15.1-150600.3.3.2.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "corepack20-20.15.1-150600.3.3.2.i586", "product": { "name": "corepack20-20.15.1-150600.3.3.2.i586", "product_id": "corepack20-20.15.1-150600.3.3.2.i586" } }, { "category": "product_version", "name": "nodejs20-20.15.1-150600.3.3.2.i586", "product": { "name": "nodejs20-20.15.1-150600.3.3.2.i586", "product_id": "nodejs20-20.15.1-150600.3.3.2.i586" } }, { "category": "product_version", "name": "nodejs20-devel-20.15.1-150600.3.3.2.i586", "product": { "name": "nodejs20-devel-20.15.1-150600.3.3.2.i586", "product_id": "nodejs20-devel-20.15.1-150600.3.3.2.i586" } }, { "category": "product_version", "name": "npm20-20.15.1-150600.3.3.2.i586", "product": { "name": "npm20-20.15.1-150600.3.3.2.i586", "product_id": "npm20-20.15.1-150600.3.3.2.i586" } } ], "category": "architecture", "name": "i586" }, { "branches": [ { "category": "product_version", "name": "nodejs20-docs-20.15.1-150600.3.3.2.noarch", "product": { "name": "nodejs20-docs-20.15.1-150600.3.3.2.noarch", "product_id": "nodejs20-docs-20.15.1-150600.3.3.2.noarch" } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "corepack20-20.15.1-150600.3.3.2.ppc64le", "product": { "name": "corepack20-20.15.1-150600.3.3.2.ppc64le", "product_id": "corepack20-20.15.1-150600.3.3.2.ppc64le" } }, { "category": "product_version", "name": "nodejs20-20.15.1-150600.3.3.2.ppc64le", "product": { "name": "nodejs20-20.15.1-150600.3.3.2.ppc64le", "product_id": "nodejs20-20.15.1-150600.3.3.2.ppc64le" } }, { "category": "product_version", "name": "nodejs20-devel-20.15.1-150600.3.3.2.ppc64le", "product": { "name": "nodejs20-devel-20.15.1-150600.3.3.2.ppc64le", "product_id": "nodejs20-devel-20.15.1-150600.3.3.2.ppc64le" } }, { "category": "product_version", "name": "npm20-20.15.1-150600.3.3.2.ppc64le", "product": { "name": "npm20-20.15.1-150600.3.3.2.ppc64le", "product_id": "npm20-20.15.1-150600.3.3.2.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "corepack20-20.15.1-150600.3.3.2.s390x", "product": { "name": "corepack20-20.15.1-150600.3.3.2.s390x", "product_id": "corepack20-20.15.1-150600.3.3.2.s390x" } }, { "category": "product_version", "name": "nodejs20-20.15.1-150600.3.3.2.s390x", "product": { "name": "nodejs20-20.15.1-150600.3.3.2.s390x", "product_id": "nodejs20-20.15.1-150600.3.3.2.s390x" } }, { "category": "product_version", "name": "nodejs20-devel-20.15.1-150600.3.3.2.s390x", "product": { "name": "nodejs20-devel-20.15.1-150600.3.3.2.s390x", "product_id": "nodejs20-devel-20.15.1-150600.3.3.2.s390x" } }, { "category": "product_version", "name": "npm20-20.15.1-150600.3.3.2.s390x", "product": { "name": "npm20-20.15.1-150600.3.3.2.s390x", "product_id": "npm20-20.15.1-150600.3.3.2.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "corepack20-20.15.1-150600.3.3.2.x86_64", "product": { "name": "corepack20-20.15.1-150600.3.3.2.x86_64", "product_id": "corepack20-20.15.1-150600.3.3.2.x86_64" } }, { "category": "product_version", "name": "nodejs20-20.15.1-150600.3.3.2.x86_64", "product": { "name": "nodejs20-20.15.1-150600.3.3.2.x86_64", "product_id": "nodejs20-20.15.1-150600.3.3.2.x86_64" } }, { "category": "product_version", "name": "nodejs20-devel-20.15.1-150600.3.3.2.x86_64", "product": { "name": "nodejs20-devel-20.15.1-150600.3.3.2.x86_64", "product_id": "nodejs20-devel-20.15.1-150600.3.3.2.x86_64" } }, { "category": "product_version", "name": "npm20-20.15.1-150600.3.3.2.x86_64", "product": { "name": "npm20-20.15.1-150600.3.3.2.x86_64", "product_id": "npm20-20.15.1-150600.3.3.2.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6", "product": { "name": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-module-web-scripting:15:sp6" } } }, { "category": "product_name", "name": "openSUSE Leap 15.6", "product": { "name": "openSUSE Leap 15.6", "product_id": "openSUSE Leap 15.6", "product_identification_helper": { "cpe": "cpe:/o:opensuse:leap:15.6" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "nodejs20-20.15.1-150600.3.3.2.aarch64 as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP6", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.aarch64" }, "product_reference": "nodejs20-20.15.1-150600.3.3.2.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs20-20.15.1-150600.3.3.2.ppc64le as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP6", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.ppc64le" }, "product_reference": "nodejs20-20.15.1-150600.3.3.2.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs20-20.15.1-150600.3.3.2.s390x as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP6", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.s390x" }, "product_reference": "nodejs20-20.15.1-150600.3.3.2.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs20-20.15.1-150600.3.3.2.x86_64 as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP6", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.x86_64" }, "product_reference": "nodejs20-20.15.1-150600.3.3.2.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs20-devel-20.15.1-150600.3.3.2.aarch64 as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP6", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.aarch64" }, "product_reference": "nodejs20-devel-20.15.1-150600.3.3.2.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs20-devel-20.15.1-150600.3.3.2.ppc64le as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP6", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.ppc64le" }, "product_reference": "nodejs20-devel-20.15.1-150600.3.3.2.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs20-devel-20.15.1-150600.3.3.2.s390x as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP6", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.s390x" }, "product_reference": "nodejs20-devel-20.15.1-150600.3.3.2.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs20-devel-20.15.1-150600.3.3.2.x86_64 as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP6", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.x86_64" }, "product_reference": "nodejs20-devel-20.15.1-150600.3.3.2.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs20-docs-20.15.1-150600.3.3.2.noarch as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP6", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-docs-20.15.1-150600.3.3.2.noarch" }, "product_reference": "nodejs20-docs-20.15.1-150600.3.3.2.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6" }, { "category": "default_component_of", "full_product_name": { "name": "npm20-20.15.1-150600.3.3.2.aarch64 as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP6", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.aarch64" }, "product_reference": "npm20-20.15.1-150600.3.3.2.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6" }, { "category": "default_component_of", "full_product_name": { "name": "npm20-20.15.1-150600.3.3.2.ppc64le as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP6", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.ppc64le" }, "product_reference": "npm20-20.15.1-150600.3.3.2.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6" }, { "category": "default_component_of", "full_product_name": { "name": "npm20-20.15.1-150600.3.3.2.s390x as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP6", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.s390x" }, "product_reference": "npm20-20.15.1-150600.3.3.2.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6" }, { "category": "default_component_of", "full_product_name": { "name": "npm20-20.15.1-150600.3.3.2.x86_64 as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP6", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.x86_64" }, "product_reference": "npm20-20.15.1-150600.3.3.2.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP6" }, { "category": "default_component_of", "full_product_name": { "name": "corepack20-20.15.1-150600.3.3.2.aarch64 as component of openSUSE Leap 15.6", "product_id": "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.aarch64" }, "product_reference": "corepack20-20.15.1-150600.3.3.2.aarch64", "relates_to_product_reference": "openSUSE Leap 15.6" }, { "category": "default_component_of", "full_product_name": { "name": "corepack20-20.15.1-150600.3.3.2.ppc64le as component of openSUSE Leap 15.6", "product_id": "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.ppc64le" }, "product_reference": "corepack20-20.15.1-150600.3.3.2.ppc64le", "relates_to_product_reference": "openSUSE Leap 15.6" }, { "category": "default_component_of", "full_product_name": { "name": "corepack20-20.15.1-150600.3.3.2.s390x as component of openSUSE Leap 15.6", "product_id": "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.s390x" }, "product_reference": "corepack20-20.15.1-150600.3.3.2.s390x", "relates_to_product_reference": "openSUSE Leap 15.6" }, { "category": "default_component_of", "full_product_name": { "name": "corepack20-20.15.1-150600.3.3.2.x86_64 as component of openSUSE Leap 15.6", "product_id": "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.x86_64" }, "product_reference": "corepack20-20.15.1-150600.3.3.2.x86_64", "relates_to_product_reference": "openSUSE Leap 15.6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs20-20.15.1-150600.3.3.2.aarch64 as component of openSUSE Leap 15.6", "product_id": "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.aarch64" }, "product_reference": "nodejs20-20.15.1-150600.3.3.2.aarch64", "relates_to_product_reference": "openSUSE Leap 15.6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs20-20.15.1-150600.3.3.2.ppc64le as component of openSUSE Leap 15.6", "product_id": "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.ppc64le" }, "product_reference": "nodejs20-20.15.1-150600.3.3.2.ppc64le", "relates_to_product_reference": "openSUSE Leap 15.6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs20-20.15.1-150600.3.3.2.s390x as component of openSUSE Leap 15.6", "product_id": "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.s390x" }, "product_reference": "nodejs20-20.15.1-150600.3.3.2.s390x", "relates_to_product_reference": "openSUSE Leap 15.6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs20-20.15.1-150600.3.3.2.x86_64 as component of openSUSE Leap 15.6", "product_id": "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.x86_64" }, "product_reference": "nodejs20-20.15.1-150600.3.3.2.x86_64", "relates_to_product_reference": "openSUSE Leap 15.6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs20-devel-20.15.1-150600.3.3.2.aarch64 as component of openSUSE Leap 15.6", "product_id": "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.aarch64" }, "product_reference": "nodejs20-devel-20.15.1-150600.3.3.2.aarch64", "relates_to_product_reference": "openSUSE Leap 15.6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs20-devel-20.15.1-150600.3.3.2.ppc64le as component of openSUSE Leap 15.6", "product_id": "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.ppc64le" }, "product_reference": "nodejs20-devel-20.15.1-150600.3.3.2.ppc64le", "relates_to_product_reference": "openSUSE Leap 15.6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs20-devel-20.15.1-150600.3.3.2.s390x as component of openSUSE Leap 15.6", "product_id": "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.s390x" }, "product_reference": "nodejs20-devel-20.15.1-150600.3.3.2.s390x", "relates_to_product_reference": "openSUSE Leap 15.6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs20-devel-20.15.1-150600.3.3.2.x86_64 as component of openSUSE Leap 15.6", "product_id": "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.x86_64" }, "product_reference": "nodejs20-devel-20.15.1-150600.3.3.2.x86_64", "relates_to_product_reference": "openSUSE Leap 15.6" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs20-docs-20.15.1-150600.3.3.2.noarch as component of openSUSE Leap 15.6", "product_id": "openSUSE Leap 15.6:nodejs20-docs-20.15.1-150600.3.3.2.noarch" }, "product_reference": "nodejs20-docs-20.15.1-150600.3.3.2.noarch", "relates_to_product_reference": "openSUSE Leap 15.6" }, { "category": "default_component_of", "full_product_name": { "name": "npm20-20.15.1-150600.3.3.2.aarch64 as component of openSUSE Leap 15.6", "product_id": "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.aarch64" }, "product_reference": "npm20-20.15.1-150600.3.3.2.aarch64", "relates_to_product_reference": "openSUSE Leap 15.6" }, { "category": "default_component_of", "full_product_name": { "name": "npm20-20.15.1-150600.3.3.2.ppc64le as component of openSUSE Leap 15.6", "product_id": "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.ppc64le" }, "product_reference": "npm20-20.15.1-150600.3.3.2.ppc64le", "relates_to_product_reference": "openSUSE Leap 15.6" }, { "category": "default_component_of", "full_product_name": { "name": "npm20-20.15.1-150600.3.3.2.s390x as component of openSUSE Leap 15.6", "product_id": "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.s390x" }, "product_reference": "npm20-20.15.1-150600.3.3.2.s390x", "relates_to_product_reference": "openSUSE Leap 15.6" }, { "category": "default_component_of", "full_product_name": { "name": "npm20-20.15.1-150600.3.3.2.x86_64 as component of openSUSE Leap 15.6", "product_id": "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.x86_64" }, "product_reference": "npm20-20.15.1-150600.3.3.2.x86_64", "relates_to_product_reference": "openSUSE Leap 15.6" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-22018", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-22018" } ], "notes": [ { "category": "general", "text": "A vulnerability has been identified in Node.js, affecting users of the experimental permission model when the --allow-fs-read flag is used.\nThis flaw arises from an inadequate permission model that fails to restrict file stats through the fs.lstat API. As a result, malicious actors can retrieve stats from files that they do not have explicit read access to.\nThis vulnerability affects all users using the experimental permission model in Node.js 20 and Node.js 21.\nPlease note that at the time this CVE was issued, the permission model is an experimental feature of Node.js.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-docs-20.15.1-150600.3.3.2.noarch", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:nodejs20-docs-20.15.1-150600.3.3.2.noarch", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-22018", "url": "https://www.suse.com/security/cve/CVE-2024-22018" }, { "category": "external", "summary": "SUSE Bug 1227562 for CVE-2024-22018", "url": "https://bugzilla.suse.com/1227562" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-docs-20.15.1-150600.3.3.2.noarch", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:nodejs20-docs-20.15.1-150600.3.3.2.noarch", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 2.8, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-docs-20.15.1-150600.3.3.2.noarch", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:nodejs20-docs-20.15.1-150600.3.3.2.noarch", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-07-22T10:35:15Z", "details": "low" } ], "title": "CVE-2024-22018" }, { "cve": "CVE-2024-22020", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-22020" } ], "notes": [ { "category": "general", "text": "A security flaw in Node.js allows a bypass of network import restrictions.\nBy embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security.\nVerified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports.\nExploiting this flaw can violate network import security, posing a risk to developers and servers.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-docs-20.15.1-150600.3.3.2.noarch", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:nodejs20-docs-20.15.1-150600.3.3.2.noarch", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-22020", "url": "https://www.suse.com/security/cve/CVE-2024-22020" }, { "category": "external", "summary": "SUSE Bug 1227554 for CVE-2024-22020", "url": "https://bugzilla.suse.com/1227554" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-docs-20.15.1-150600.3.3.2.noarch", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:nodejs20-docs-20.15.1-150600.3.3.2.noarch", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-docs-20.15.1-150600.3.3.2.noarch", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:nodejs20-docs-20.15.1-150600.3.3.2.noarch", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-07-22T10:35:15Z", "details": "moderate" } ], "title": "CVE-2024-22020" }, { "cve": "CVE-2024-27980", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-27980" } ], "notes": [ { "category": "general", "text": "Due to the improper handling of batch files in child_process.spawn / child_process.spawnSync, a malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-docs-20.15.1-150600.3.3.2.noarch", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:nodejs20-docs-20.15.1-150600.3.3.2.noarch", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-27980", "url": "https://www.suse.com/security/cve/CVE-2024-27980" }, { "category": "external", "summary": "SUSE Bug 1222665 for CVE-2024-27980", "url": "https://bugzilla.suse.com/1222665" }, { "category": "external", "summary": "SUSE Bug 1227560 for CVE-2024-27980", "url": "https://bugzilla.suse.com/1227560" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-docs-20.15.1-150600.3.3.2.noarch", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:nodejs20-docs-20.15.1-150600.3.3.2.noarch", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-07-22T10:35:15Z", "details": "important" } ], "title": "CVE-2024-27980" }, { "cve": "CVE-2024-36137", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-36137" } ], "notes": [ { "category": "general", "text": "A vulnerability has been identified in Node.js, affecting users of the experimental permission model when the --allow-fs-write flag is used.\r\n\r\nNode.js Permission Model do not operate on file descriptors, however, operations such as fs.fchown or fs.fchmod can use a \"read-only\" file descriptor to change the owner and permissions of a file.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-docs-20.15.1-150600.3.3.2.noarch", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:nodejs20-docs-20.15.1-150600.3.3.2.noarch", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-36137", "url": "https://www.suse.com/security/cve/CVE-2024-36137" }, { "category": "external", "summary": "SUSE Bug 1227561 for CVE-2024-36137", "url": "https://bugzilla.suse.com/1227561" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-docs-20.15.1-150600.3.3.2.noarch", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:nodejs20-docs-20.15.1-150600.3.3.2.noarch", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.9, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-docs-20.15.1-150600.3.3.2.noarch", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:nodejs20-docs-20.15.1-150600.3.3.2.noarch", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-07-22T10:35:15Z", "details": "low" } ], "title": "CVE-2024-36137" }, { "cve": "CVE-2024-36138", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-36138" } ], "notes": [ { "category": "general", "text": "Bypass incomplete fix of CVE-2024-27980, that arises from improper handling of batch files with all possible extensions on Windows via child_process.spawn / child_process.spawnSync. A malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-docs-20.15.1-150600.3.3.2.noarch", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:nodejs20-docs-20.15.1-150600.3.3.2.noarch", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-36138", "url": "https://www.suse.com/security/cve/CVE-2024-36138" }, { "category": "external", "summary": "SUSE Bug 1227560 for CVE-2024-36138", "url": "https://bugzilla.suse.com/1227560" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-docs-20.15.1-150600.3.3.2.noarch", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:nodejs20-docs-20.15.1-150600.3.3.2.noarch", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-07-22T10:35:15Z", "details": "important" } ], "title": "CVE-2024-36138" }, { "cve": "CVE-2024-37372", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-37372" } ], "notes": [ { "category": "general", "text": "The Permission Model assumes that any path starting with two backslashes \\ has a four-character prefix that can be ignored, which is not always true. This subtle bug leads to vulnerable edge cases.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-docs-20.15.1-150600.3.3.2.noarch", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:nodejs20-docs-20.15.1-150600.3.3.2.noarch", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-37372", "url": "https://www.suse.com/security/cve/CVE-2024-37372" }, { "category": "external", "summary": "SUSE Bug 1227563 for CVE-2024-37372", "url": "https://bugzilla.suse.com/1227563" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-20.15.1-150600.3.3.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-devel-20.15.1-150600.3.3.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:nodejs20-docs-20.15.1-150600.3.3.2.noarch", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP6:npm20-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:corepack20-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:nodejs20-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:nodejs20-devel-20.15.1-150600.3.3.2.x86_64", "openSUSE Leap 15.6:nodejs20-docs-20.15.1-150600.3.3.2.noarch", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.aarch64", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.ppc64le", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.s390x", "openSUSE Leap 15.6:npm20-20.15.1-150600.3.3.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-07-22T10:35:15Z", "details": "low" } ], "title": "CVE-2024-37372" } ] }
suse-su-2024:2543-1
Vulnerability from csaf_suse
Notes
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for nodejs20", "title": "Title of the patch" }, { "category": "description", "text": "This update for nodejs20 fixes the following issues:\n\nUpdate to 20.15.1:\n\n- CVE-2024-36138: Fixed CVE-2024-27980 fix bypass (bsc#1227560)\n- CVE-2024-22020: Fixed a bypass of network import restriction via data URL (bsc#1227554)\n- CVE-2024-22018: Fixed fs.lstat bypasses permission model (bsc#1227562)\n- CVE-2024-36137: Fixed fs.fchown/fchmod bypasses permission model (bsc#1227561)\n- CVE-2024-37372: Fixed Permission model improperly processes UNC paths (bsc#1227563)\n\nChanges in 20.15.0:\n\n- test_runner: support test plans\n- inspector: introduce the --inspect-wait flag\n- zlib: expose zlib.crc32()\n- cli: allow running wasm in limited vmem with --disable-wasm-trap-handler\n\nChanges in 20.14.0\n\n- src,permission: throw async errors on async APIs\n- test_runner: support forced exit\n\nChanges in 20.13.1:\n\n- buffer: improve base64 and base64url performance\n- crypto: deprecate implicitly shortened GCM tags\n- events,doc: mark CustomEvent as stable\n- fs: add stacktrace to fs/promises\n- report: add --report-exclude-network option\n- src: add uv_get_available_memory to report and process\n- stream: support typed arrays\n- util: support array of formats in util.styleText\n- v8: implement v8.queryObjects() for memory leak regression testing\n- watch: mark as stable\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-2024-2543,SUSE-SLE-Module-Web-Scripting-15-SP5-2024-2543,openSUSE-SLE-15.5-2024-2543", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_2543-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2024:2543-1", "url": "https://www.suse.com/support/update/announcement/2024/suse-su-20242543-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2024:2543-1", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-July/018990.html" }, { "category": "self", "summary": "SUSE Bug 1227554", "url": "https://bugzilla.suse.com/1227554" }, { "category": "self", "summary": "SUSE Bug 1227560", "url": "https://bugzilla.suse.com/1227560" }, { "category": "self", "summary": "SUSE Bug 1227561", "url": "https://bugzilla.suse.com/1227561" }, { "category": "self", "summary": "SUSE Bug 1227562", "url": "https://bugzilla.suse.com/1227562" }, { "category": "self", "summary": "SUSE Bug 1227563", "url": "https://bugzilla.suse.com/1227563" }, { "category": "self", "summary": "SUSE CVE CVE-2024-22018 page", "url": "https://www.suse.com/security/cve/CVE-2024-22018/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-22020 page", "url": "https://www.suse.com/security/cve/CVE-2024-22020/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-27980 page", "url": "https://www.suse.com/security/cve/CVE-2024-27980/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-36137 page", "url": "https://www.suse.com/security/cve/CVE-2024-36137/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-36138 page", "url": "https://www.suse.com/security/cve/CVE-2024-36138/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-37372 page", "url": "https://www.suse.com/security/cve/CVE-2024-37372/" } ], "title": "Security update for nodejs20", "tracking": { "current_release_date": "2024-07-17T07:51:52Z", "generator": { "date": "2024-07-17T07:51:52Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2024:2543-1", "initial_release_date": "2024-07-17T07:51:52Z", "revision_history": [ { "date": "2024-07-17T07:51:52Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "corepack20-20.15.1-150500.11.12.2.aarch64", "product": { "name": "corepack20-20.15.1-150500.11.12.2.aarch64", "product_id": "corepack20-20.15.1-150500.11.12.2.aarch64" } }, { "category": "product_version", "name": "nodejs20-20.15.1-150500.11.12.2.aarch64", "product": { "name": "nodejs20-20.15.1-150500.11.12.2.aarch64", "product_id": "nodejs20-20.15.1-150500.11.12.2.aarch64" } }, { "category": "product_version", "name": "nodejs20-devel-20.15.1-150500.11.12.2.aarch64", "product": { "name": "nodejs20-devel-20.15.1-150500.11.12.2.aarch64", "product_id": "nodejs20-devel-20.15.1-150500.11.12.2.aarch64" } }, { "category": "product_version", "name": "npm20-20.15.1-150500.11.12.2.aarch64", "product": { "name": "npm20-20.15.1-150500.11.12.2.aarch64", "product_id": "npm20-20.15.1-150500.11.12.2.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "corepack20-20.15.1-150500.11.12.2.i586", "product": { "name": "corepack20-20.15.1-150500.11.12.2.i586", "product_id": "corepack20-20.15.1-150500.11.12.2.i586" } }, { "category": "product_version", "name": "nodejs20-20.15.1-150500.11.12.2.i586", "product": { "name": "nodejs20-20.15.1-150500.11.12.2.i586", "product_id": "nodejs20-20.15.1-150500.11.12.2.i586" } }, { "category": "product_version", "name": "nodejs20-devel-20.15.1-150500.11.12.2.i586", "product": { "name": "nodejs20-devel-20.15.1-150500.11.12.2.i586", "product_id": "nodejs20-devel-20.15.1-150500.11.12.2.i586" } }, { "category": "product_version", "name": "npm20-20.15.1-150500.11.12.2.i586", "product": { "name": "npm20-20.15.1-150500.11.12.2.i586", "product_id": "npm20-20.15.1-150500.11.12.2.i586" } } ], "category": "architecture", "name": "i586" }, { "branches": [ { "category": "product_version", "name": "nodejs20-docs-20.15.1-150500.11.12.2.noarch", "product": { "name": "nodejs20-docs-20.15.1-150500.11.12.2.noarch", "product_id": "nodejs20-docs-20.15.1-150500.11.12.2.noarch" } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "corepack20-20.15.1-150500.11.12.2.ppc64le", "product": { "name": "corepack20-20.15.1-150500.11.12.2.ppc64le", "product_id": "corepack20-20.15.1-150500.11.12.2.ppc64le" } }, { "category": "product_version", "name": "nodejs20-20.15.1-150500.11.12.2.ppc64le", "product": { "name": "nodejs20-20.15.1-150500.11.12.2.ppc64le", "product_id": "nodejs20-20.15.1-150500.11.12.2.ppc64le" } }, { "category": "product_version", "name": "nodejs20-devel-20.15.1-150500.11.12.2.ppc64le", "product": { "name": "nodejs20-devel-20.15.1-150500.11.12.2.ppc64le", "product_id": "nodejs20-devel-20.15.1-150500.11.12.2.ppc64le" } }, { "category": "product_version", "name": "npm20-20.15.1-150500.11.12.2.ppc64le", "product": { "name": "npm20-20.15.1-150500.11.12.2.ppc64le", "product_id": "npm20-20.15.1-150500.11.12.2.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "corepack20-20.15.1-150500.11.12.2.s390x", "product": { "name": "corepack20-20.15.1-150500.11.12.2.s390x", "product_id": "corepack20-20.15.1-150500.11.12.2.s390x" } }, { "category": "product_version", "name": "nodejs20-20.15.1-150500.11.12.2.s390x", "product": { "name": "nodejs20-20.15.1-150500.11.12.2.s390x", "product_id": "nodejs20-20.15.1-150500.11.12.2.s390x" } }, { "category": "product_version", "name": "nodejs20-devel-20.15.1-150500.11.12.2.s390x", "product": { "name": "nodejs20-devel-20.15.1-150500.11.12.2.s390x", "product_id": "nodejs20-devel-20.15.1-150500.11.12.2.s390x" } }, { "category": "product_version", "name": "npm20-20.15.1-150500.11.12.2.s390x", "product": { "name": "npm20-20.15.1-150500.11.12.2.s390x", "product_id": "npm20-20.15.1-150500.11.12.2.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "corepack20-20.15.1-150500.11.12.2.x86_64", "product": { "name": "corepack20-20.15.1-150500.11.12.2.x86_64", "product_id": "corepack20-20.15.1-150500.11.12.2.x86_64" } }, { "category": "product_version", "name": "nodejs20-20.15.1-150500.11.12.2.x86_64", "product": { "name": "nodejs20-20.15.1-150500.11.12.2.x86_64", "product_id": "nodejs20-20.15.1-150500.11.12.2.x86_64" } }, { "category": "product_version", "name": "nodejs20-devel-20.15.1-150500.11.12.2.x86_64", "product": { "name": "nodejs20-devel-20.15.1-150500.11.12.2.x86_64", "product_id": "nodejs20-devel-20.15.1-150500.11.12.2.x86_64" } }, { "category": "product_version", "name": "npm20-20.15.1-150500.11.12.2.x86_64", "product": { "name": "npm20-20.15.1-150500.11.12.2.x86_64", "product_id": "npm20-20.15.1-150500.11.12.2.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5", "product": { "name": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-module-web-scripting:15:sp5" } } }, { "category": "product_name", "name": "openSUSE Leap 15.5", "product": { "name": "openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5", "product_identification_helper": { "cpe": "cpe:/o:opensuse:leap:15.5" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "nodejs20-20.15.1-150500.11.12.2.aarch64 as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.aarch64" }, "product_reference": "nodejs20-20.15.1-150500.11.12.2.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs20-20.15.1-150500.11.12.2.ppc64le as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.ppc64le" }, "product_reference": "nodejs20-20.15.1-150500.11.12.2.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs20-20.15.1-150500.11.12.2.s390x as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.s390x" }, "product_reference": "nodejs20-20.15.1-150500.11.12.2.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs20-20.15.1-150500.11.12.2.x86_64 as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.x86_64" }, "product_reference": "nodejs20-20.15.1-150500.11.12.2.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs20-devel-20.15.1-150500.11.12.2.aarch64 as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.aarch64" }, "product_reference": "nodejs20-devel-20.15.1-150500.11.12.2.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs20-devel-20.15.1-150500.11.12.2.ppc64le as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.ppc64le" }, "product_reference": "nodejs20-devel-20.15.1-150500.11.12.2.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs20-devel-20.15.1-150500.11.12.2.s390x as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.s390x" }, "product_reference": "nodejs20-devel-20.15.1-150500.11.12.2.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs20-devel-20.15.1-150500.11.12.2.x86_64 as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.x86_64" }, "product_reference": "nodejs20-devel-20.15.1-150500.11.12.2.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs20-docs-20.15.1-150500.11.12.2.noarch as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-docs-20.15.1-150500.11.12.2.noarch" }, "product_reference": "nodejs20-docs-20.15.1-150500.11.12.2.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "npm20-20.15.1-150500.11.12.2.aarch64 as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.aarch64" }, "product_reference": "npm20-20.15.1-150500.11.12.2.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "npm20-20.15.1-150500.11.12.2.ppc64le as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.ppc64le" }, "product_reference": "npm20-20.15.1-150500.11.12.2.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "npm20-20.15.1-150500.11.12.2.s390x as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.s390x" }, "product_reference": "npm20-20.15.1-150500.11.12.2.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "npm20-20.15.1-150500.11.12.2.x86_64 as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5", "product_id": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.x86_64" }, "product_reference": "npm20-20.15.1-150500.11.12.2.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "corepack20-20.15.1-150500.11.12.2.aarch64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.aarch64" }, "product_reference": "corepack20-20.15.1-150500.11.12.2.aarch64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "corepack20-20.15.1-150500.11.12.2.ppc64le as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.ppc64le" }, "product_reference": "corepack20-20.15.1-150500.11.12.2.ppc64le", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "corepack20-20.15.1-150500.11.12.2.s390x as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.s390x" }, "product_reference": "corepack20-20.15.1-150500.11.12.2.s390x", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "corepack20-20.15.1-150500.11.12.2.x86_64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.x86_64" }, "product_reference": "corepack20-20.15.1-150500.11.12.2.x86_64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs20-20.15.1-150500.11.12.2.aarch64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.aarch64" }, "product_reference": "nodejs20-20.15.1-150500.11.12.2.aarch64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs20-20.15.1-150500.11.12.2.ppc64le as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.ppc64le" }, "product_reference": "nodejs20-20.15.1-150500.11.12.2.ppc64le", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs20-20.15.1-150500.11.12.2.s390x as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.s390x" }, "product_reference": "nodejs20-20.15.1-150500.11.12.2.s390x", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs20-20.15.1-150500.11.12.2.x86_64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.x86_64" }, "product_reference": "nodejs20-20.15.1-150500.11.12.2.x86_64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs20-devel-20.15.1-150500.11.12.2.aarch64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.aarch64" }, "product_reference": "nodejs20-devel-20.15.1-150500.11.12.2.aarch64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs20-devel-20.15.1-150500.11.12.2.ppc64le as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.ppc64le" }, "product_reference": "nodejs20-devel-20.15.1-150500.11.12.2.ppc64le", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs20-devel-20.15.1-150500.11.12.2.s390x as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.s390x" }, "product_reference": "nodejs20-devel-20.15.1-150500.11.12.2.s390x", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs20-devel-20.15.1-150500.11.12.2.x86_64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.x86_64" }, "product_reference": "nodejs20-devel-20.15.1-150500.11.12.2.x86_64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs20-docs-20.15.1-150500.11.12.2.noarch as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:nodejs20-docs-20.15.1-150500.11.12.2.noarch" }, "product_reference": "nodejs20-docs-20.15.1-150500.11.12.2.noarch", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "npm20-20.15.1-150500.11.12.2.aarch64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.aarch64" }, "product_reference": "npm20-20.15.1-150500.11.12.2.aarch64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "npm20-20.15.1-150500.11.12.2.ppc64le as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.ppc64le" }, "product_reference": "npm20-20.15.1-150500.11.12.2.ppc64le", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "npm20-20.15.1-150500.11.12.2.s390x as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.s390x" }, "product_reference": "npm20-20.15.1-150500.11.12.2.s390x", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "npm20-20.15.1-150500.11.12.2.x86_64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.x86_64" }, "product_reference": "npm20-20.15.1-150500.11.12.2.x86_64", "relates_to_product_reference": "openSUSE Leap 15.5" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-22018", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-22018" } ], "notes": [ { "category": "general", "text": "A vulnerability has been identified in Node.js, affecting users of the experimental permission model when the --allow-fs-read flag is used.\nThis flaw arises from an inadequate permission model that fails to restrict file stats through the fs.lstat API. As a result, malicious actors can retrieve stats from files that they do not have explicit read access to.\nThis vulnerability affects all users using the experimental permission model in Node.js 20 and Node.js 21.\nPlease note that at the time this CVE was issued, the permission model is an experimental feature of Node.js.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-docs-20.15.1-150500.11.12.2.noarch", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:nodejs20-docs-20.15.1-150500.11.12.2.noarch", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-22018", "url": "https://www.suse.com/security/cve/CVE-2024-22018" }, { "category": "external", "summary": "SUSE Bug 1227562 for CVE-2024-22018", "url": "https://bugzilla.suse.com/1227562" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-docs-20.15.1-150500.11.12.2.noarch", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:nodejs20-docs-20.15.1-150500.11.12.2.noarch", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 2.8, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-docs-20.15.1-150500.11.12.2.noarch", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:nodejs20-docs-20.15.1-150500.11.12.2.noarch", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-07-17T07:51:52Z", "details": "low" } ], "title": "CVE-2024-22018" }, { "cve": "CVE-2024-22020", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-22020" } ], "notes": [ { "category": "general", "text": "A security flaw in Node.js allows a bypass of network import restrictions.\nBy embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security.\nVerified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports.\nExploiting this flaw can violate network import security, posing a risk to developers and servers.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-docs-20.15.1-150500.11.12.2.noarch", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:nodejs20-docs-20.15.1-150500.11.12.2.noarch", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-22020", "url": "https://www.suse.com/security/cve/CVE-2024-22020" }, { "category": "external", "summary": "SUSE Bug 1227554 for CVE-2024-22020", "url": "https://bugzilla.suse.com/1227554" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-docs-20.15.1-150500.11.12.2.noarch", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:nodejs20-docs-20.15.1-150500.11.12.2.noarch", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-docs-20.15.1-150500.11.12.2.noarch", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:nodejs20-docs-20.15.1-150500.11.12.2.noarch", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-07-17T07:51:52Z", "details": "moderate" } ], "title": "CVE-2024-22020" }, { "cve": "CVE-2024-27980", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-27980" } ], "notes": [ { "category": "general", "text": "Due to the improper handling of batch files in child_process.spawn / child_process.spawnSync, a malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-docs-20.15.1-150500.11.12.2.noarch", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:nodejs20-docs-20.15.1-150500.11.12.2.noarch", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-27980", "url": "https://www.suse.com/security/cve/CVE-2024-27980" }, { "category": "external", "summary": "SUSE Bug 1222665 for CVE-2024-27980", "url": "https://bugzilla.suse.com/1222665" }, { "category": "external", "summary": "SUSE Bug 1227560 for CVE-2024-27980", "url": "https://bugzilla.suse.com/1227560" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-docs-20.15.1-150500.11.12.2.noarch", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:nodejs20-docs-20.15.1-150500.11.12.2.noarch", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-07-17T07:51:52Z", "details": "important" } ], "title": "CVE-2024-27980" }, { "cve": "CVE-2024-36137", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-36137" } ], "notes": [ { "category": "general", "text": "A vulnerability has been identified in Node.js, affecting users of the experimental permission model when the --allow-fs-write flag is used.\r\n\r\nNode.js Permission Model do not operate on file descriptors, however, operations such as fs.fchown or fs.fchmod can use a \"read-only\" file descriptor to change the owner and permissions of a file.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-docs-20.15.1-150500.11.12.2.noarch", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:nodejs20-docs-20.15.1-150500.11.12.2.noarch", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-36137", "url": "https://www.suse.com/security/cve/CVE-2024-36137" }, { "category": "external", "summary": "SUSE Bug 1227561 for CVE-2024-36137", "url": "https://bugzilla.suse.com/1227561" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-docs-20.15.1-150500.11.12.2.noarch", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:nodejs20-docs-20.15.1-150500.11.12.2.noarch", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.9, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-docs-20.15.1-150500.11.12.2.noarch", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:nodejs20-docs-20.15.1-150500.11.12.2.noarch", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-07-17T07:51:52Z", "details": "low" } ], "title": "CVE-2024-36137" }, { "cve": "CVE-2024-36138", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-36138" } ], "notes": [ { "category": "general", "text": "Bypass incomplete fix of CVE-2024-27980, that arises from improper handling of batch files with all possible extensions on Windows via child_process.spawn / child_process.spawnSync. A malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-docs-20.15.1-150500.11.12.2.noarch", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:nodejs20-docs-20.15.1-150500.11.12.2.noarch", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-36138", "url": "https://www.suse.com/security/cve/CVE-2024-36138" }, { "category": "external", "summary": "SUSE Bug 1227560 for CVE-2024-36138", "url": "https://bugzilla.suse.com/1227560" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-docs-20.15.1-150500.11.12.2.noarch", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:nodejs20-docs-20.15.1-150500.11.12.2.noarch", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-07-17T07:51:52Z", "details": "important" } ], "title": "CVE-2024-36138" }, { "cve": "CVE-2024-37372", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-37372" } ], "notes": [ { "category": "general", "text": "The Permission Model assumes that any path starting with two backslashes \\ has a four-character prefix that can be ignored, which is not always true. This subtle bug leads to vulnerable edge cases.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-docs-20.15.1-150500.11.12.2.noarch", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:nodejs20-docs-20.15.1-150500.11.12.2.noarch", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-37372", "url": "https://www.suse.com/security/cve/CVE-2024-37372" }, { "category": "external", "summary": "SUSE Bug 1227563 for CVE-2024-37372", "url": "https://bugzilla.suse.com/1227563" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.15.1-150500.11.12.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.15.1-150500.11.12.2.x86_64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-docs-20.15.1-150500.11.12.2.noarch", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.aarch64", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.ppc64le", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.s390x", "SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:corepack20-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:nodejs20-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:nodejs20-devel-20.15.1-150500.11.12.2.x86_64", "openSUSE Leap 15.5:nodejs20-docs-20.15.1-150500.11.12.2.noarch", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.aarch64", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.ppc64le", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.s390x", "openSUSE Leap 15.5:npm20-20.15.1-150500.11.12.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-07-17T07:51:52Z", "details": "low" } ], "title": "CVE-2024-37372" } ] }
opensuse-su-2024:14435-1
Vulnerability from csaf_opensuse
Notes
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "corepack22-22.10.0-1.1 on GA media", "title": "Title of the patch" }, { "category": "description", "text": "These are all security issues fixed in the corepack22-22.10.0-1.1 package on the GA media of openSUSE Tumbleweed.", "title": "Description of the patch" }, { "category": "details", "text": "openSUSE-Tumbleweed-2024-14435", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_14435-1.json" }, { "category": "self", "summary": "URL for openSUSE-SU-2024:14435-1", "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OWCPL7VTEVIGUDVKLEV2D2ITNTWKC4AZ/" }, { "category": "self", "summary": "E-Mail link for openSUSE-SU-2024:14435-1", "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OWCPL7VTEVIGUDVKLEV2D2ITNTWKC4AZ/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-22018 page", "url": "https://www.suse.com/security/cve/CVE-2024-22018/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-22020 page", "url": "https://www.suse.com/security/cve/CVE-2024-22020/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-36137 page", "url": "https://www.suse.com/security/cve/CVE-2024-36137/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-36138 page", "url": "https://www.suse.com/security/cve/CVE-2024-36138/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-37372 page", "url": "https://www.suse.com/security/cve/CVE-2024-37372/" } ], "title": "corepack22-22.10.0-1.1 on GA media", "tracking": { "current_release_date": "2024-10-29T00:00:00Z", "generator": { "date": "2024-10-29T00:00:00Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "openSUSE-SU-2024:14435-1", "initial_release_date": "2024-10-29T00:00:00Z", "revision_history": [ { "date": "2024-10-29T00:00:00Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "corepack22-22.10.0-1.1.aarch64", "product": { "name": "corepack22-22.10.0-1.1.aarch64", "product_id": "corepack22-22.10.0-1.1.aarch64" } }, { "category": "product_version", "name": "nodejs22-22.10.0-1.1.aarch64", "product": { "name": "nodejs22-22.10.0-1.1.aarch64", "product_id": "nodejs22-22.10.0-1.1.aarch64" } }, { "category": "product_version", "name": "nodejs22-devel-22.10.0-1.1.aarch64", "product": { "name": "nodejs22-devel-22.10.0-1.1.aarch64", "product_id": "nodejs22-devel-22.10.0-1.1.aarch64" } }, { "category": "product_version", "name": "nodejs22-docs-22.10.0-1.1.aarch64", "product": { "name": "nodejs22-docs-22.10.0-1.1.aarch64", "product_id": "nodejs22-docs-22.10.0-1.1.aarch64" } }, { "category": "product_version", "name": "npm22-22.10.0-1.1.aarch64", "product": { "name": "npm22-22.10.0-1.1.aarch64", "product_id": "npm22-22.10.0-1.1.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "corepack22-22.10.0-1.1.ppc64le", "product": { "name": "corepack22-22.10.0-1.1.ppc64le", "product_id": "corepack22-22.10.0-1.1.ppc64le" } }, { "category": "product_version", "name": "nodejs22-22.10.0-1.1.ppc64le", "product": { "name": "nodejs22-22.10.0-1.1.ppc64le", "product_id": "nodejs22-22.10.0-1.1.ppc64le" } }, { "category": "product_version", "name": "nodejs22-devel-22.10.0-1.1.ppc64le", "product": { "name": "nodejs22-devel-22.10.0-1.1.ppc64le", "product_id": "nodejs22-devel-22.10.0-1.1.ppc64le" } }, { "category": "product_version", "name": "nodejs22-docs-22.10.0-1.1.ppc64le", "product": { "name": "nodejs22-docs-22.10.0-1.1.ppc64le", "product_id": "nodejs22-docs-22.10.0-1.1.ppc64le" } }, { "category": "product_version", "name": "npm22-22.10.0-1.1.ppc64le", "product": { "name": "npm22-22.10.0-1.1.ppc64le", "product_id": "npm22-22.10.0-1.1.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "corepack22-22.10.0-1.1.s390x", "product": { "name": "corepack22-22.10.0-1.1.s390x", "product_id": "corepack22-22.10.0-1.1.s390x" } }, { "category": "product_version", "name": "nodejs22-22.10.0-1.1.s390x", "product": { "name": "nodejs22-22.10.0-1.1.s390x", "product_id": "nodejs22-22.10.0-1.1.s390x" } }, { "category": "product_version", "name": "nodejs22-devel-22.10.0-1.1.s390x", "product": { "name": "nodejs22-devel-22.10.0-1.1.s390x", "product_id": "nodejs22-devel-22.10.0-1.1.s390x" } }, { "category": "product_version", "name": "nodejs22-docs-22.10.0-1.1.s390x", "product": { "name": "nodejs22-docs-22.10.0-1.1.s390x", "product_id": "nodejs22-docs-22.10.0-1.1.s390x" } }, { "category": "product_version", "name": "npm22-22.10.0-1.1.s390x", "product": { "name": "npm22-22.10.0-1.1.s390x", "product_id": "npm22-22.10.0-1.1.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "corepack22-22.10.0-1.1.x86_64", "product": { "name": "corepack22-22.10.0-1.1.x86_64", "product_id": "corepack22-22.10.0-1.1.x86_64" } }, { "category": "product_version", "name": "nodejs22-22.10.0-1.1.x86_64", "product": { "name": "nodejs22-22.10.0-1.1.x86_64", "product_id": "nodejs22-22.10.0-1.1.x86_64" } }, { "category": "product_version", "name": "nodejs22-devel-22.10.0-1.1.x86_64", "product": { "name": "nodejs22-devel-22.10.0-1.1.x86_64", "product_id": "nodejs22-devel-22.10.0-1.1.x86_64" } }, { "category": "product_version", "name": "nodejs22-docs-22.10.0-1.1.x86_64", "product": { "name": "nodejs22-docs-22.10.0-1.1.x86_64", "product_id": "nodejs22-docs-22.10.0-1.1.x86_64" } }, { "category": "product_version", "name": "npm22-22.10.0-1.1.x86_64", "product": { "name": "npm22-22.10.0-1.1.x86_64", "product_id": "npm22-22.10.0-1.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "openSUSE Tumbleweed", "product": { "name": "openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed", "product_identification_helper": { "cpe": "cpe:/o:opensuse:tumbleweed" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "corepack22-22.10.0-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:corepack22-22.10.0-1.1.aarch64" }, "product_reference": "corepack22-22.10.0-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "corepack22-22.10.0-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:corepack22-22.10.0-1.1.ppc64le" }, "product_reference": "corepack22-22.10.0-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "corepack22-22.10.0-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:corepack22-22.10.0-1.1.s390x" }, "product_reference": "corepack22-22.10.0-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "corepack22-22.10.0-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:corepack22-22.10.0-1.1.x86_64" }, "product_reference": "corepack22-22.10.0-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs22-22.10.0-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.aarch64" }, "product_reference": "nodejs22-22.10.0-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs22-22.10.0-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.ppc64le" }, "product_reference": "nodejs22-22.10.0-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs22-22.10.0-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.s390x" }, "product_reference": "nodejs22-22.10.0-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs22-22.10.0-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.x86_64" }, "product_reference": "nodejs22-22.10.0-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs22-devel-22.10.0-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.aarch64" }, "product_reference": "nodejs22-devel-22.10.0-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs22-devel-22.10.0-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.ppc64le" }, "product_reference": "nodejs22-devel-22.10.0-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs22-devel-22.10.0-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.s390x" }, "product_reference": "nodejs22-devel-22.10.0-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs22-devel-22.10.0-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.x86_64" }, "product_reference": "nodejs22-devel-22.10.0-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs22-docs-22.10.0-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.aarch64" }, "product_reference": "nodejs22-docs-22.10.0-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs22-docs-22.10.0-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.ppc64le" }, "product_reference": "nodejs22-docs-22.10.0-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs22-docs-22.10.0-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.s390x" }, "product_reference": "nodejs22-docs-22.10.0-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs22-docs-22.10.0-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.x86_64" }, "product_reference": "nodejs22-docs-22.10.0-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "npm22-22.10.0-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:npm22-22.10.0-1.1.aarch64" }, "product_reference": "npm22-22.10.0-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "npm22-22.10.0-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:npm22-22.10.0-1.1.ppc64le" }, "product_reference": "npm22-22.10.0-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "npm22-22.10.0-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:npm22-22.10.0-1.1.s390x" }, "product_reference": "npm22-22.10.0-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "npm22-22.10.0-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:npm22-22.10.0-1.1.x86_64" }, "product_reference": "npm22-22.10.0-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-22018", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-22018" } ], "notes": [ { "category": "general", "text": "A vulnerability has been identified in Node.js, affecting users of the experimental permission model when the --allow-fs-read flag is used.\nThis flaw arises from an inadequate permission model that fails to restrict file stats through the fs.lstat API. As a result, malicious actors can retrieve stats from files that they do not have explicit read access to.\nThis vulnerability affects all users using the experimental permission model in Node.js 20 and Node.js 21.\nPlease note that at the time this CVE was issued, the permission model is an experimental feature of Node.js.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:corepack22-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:corepack22-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:corepack22-22.10.0-1.1.s390x", "openSUSE Tumbleweed:corepack22-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.s390x", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.s390x", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.s390x", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:npm22-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:npm22-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:npm22-22.10.0-1.1.s390x", "openSUSE Tumbleweed:npm22-22.10.0-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-22018", "url": "https://www.suse.com/security/cve/CVE-2024-22018" }, { "category": "external", "summary": "SUSE Bug 1227562 for CVE-2024-22018", "url": "https://bugzilla.suse.com/1227562" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:corepack22-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:corepack22-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:corepack22-22.10.0-1.1.s390x", "openSUSE Tumbleweed:corepack22-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.s390x", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.s390x", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.s390x", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:npm22-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:npm22-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:npm22-22.10.0-1.1.s390x", "openSUSE Tumbleweed:npm22-22.10.0-1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 2.8, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:corepack22-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:corepack22-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:corepack22-22.10.0-1.1.s390x", "openSUSE Tumbleweed:corepack22-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.s390x", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.s390x", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.s390x", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:npm22-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:npm22-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:npm22-22.10.0-1.1.s390x", "openSUSE Tumbleweed:npm22-22.10.0-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-10-29T00:00:00Z", "details": "low" } ], "title": "CVE-2024-22018" }, { "cve": "CVE-2024-22020", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-22020" } ], "notes": [ { "category": "general", "text": "A security flaw in Node.js allows a bypass of network import restrictions.\nBy embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security.\nVerified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports.\nExploiting this flaw can violate network import security, posing a risk to developers and servers.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:corepack22-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:corepack22-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:corepack22-22.10.0-1.1.s390x", "openSUSE Tumbleweed:corepack22-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.s390x", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.s390x", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.s390x", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:npm22-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:npm22-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:npm22-22.10.0-1.1.s390x", "openSUSE Tumbleweed:npm22-22.10.0-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-22020", "url": "https://www.suse.com/security/cve/CVE-2024-22020" }, { "category": "external", "summary": "SUSE Bug 1227554 for CVE-2024-22020", "url": "https://bugzilla.suse.com/1227554" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:corepack22-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:corepack22-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:corepack22-22.10.0-1.1.s390x", "openSUSE Tumbleweed:corepack22-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.s390x", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.s390x", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.s390x", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:npm22-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:npm22-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:npm22-22.10.0-1.1.s390x", "openSUSE Tumbleweed:npm22-22.10.0-1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:corepack22-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:corepack22-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:corepack22-22.10.0-1.1.s390x", "openSUSE Tumbleweed:corepack22-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.s390x", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.s390x", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.s390x", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:npm22-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:npm22-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:npm22-22.10.0-1.1.s390x", "openSUSE Tumbleweed:npm22-22.10.0-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-10-29T00:00:00Z", "details": "moderate" } ], "title": "CVE-2024-22020" }, { "cve": "CVE-2024-36137", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-36137" } ], "notes": [ { "category": "general", "text": "A vulnerability has been identified in Node.js, affecting users of the experimental permission model when the --allow-fs-write flag is used.\r\n\r\nNode.js Permission Model do not operate on file descriptors, however, operations such as fs.fchown or fs.fchmod can use a \"read-only\" file descriptor to change the owner and permissions of a file.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:corepack22-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:corepack22-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:corepack22-22.10.0-1.1.s390x", "openSUSE Tumbleweed:corepack22-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.s390x", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.s390x", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.s390x", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:npm22-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:npm22-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:npm22-22.10.0-1.1.s390x", "openSUSE Tumbleweed:npm22-22.10.0-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-36137", "url": "https://www.suse.com/security/cve/CVE-2024-36137" }, { "category": "external", "summary": "SUSE Bug 1227561 for CVE-2024-36137", "url": "https://bugzilla.suse.com/1227561" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:corepack22-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:corepack22-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:corepack22-22.10.0-1.1.s390x", "openSUSE Tumbleweed:corepack22-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.s390x", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.s390x", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.s390x", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:npm22-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:npm22-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:npm22-22.10.0-1.1.s390x", "openSUSE Tumbleweed:npm22-22.10.0-1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.9, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:corepack22-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:corepack22-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:corepack22-22.10.0-1.1.s390x", "openSUSE Tumbleweed:corepack22-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.s390x", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.s390x", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.s390x", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:npm22-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:npm22-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:npm22-22.10.0-1.1.s390x", "openSUSE Tumbleweed:npm22-22.10.0-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-10-29T00:00:00Z", "details": "low" } ], "title": "CVE-2024-36137" }, { "cve": "CVE-2024-36138", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-36138" } ], "notes": [ { "category": "general", "text": "Bypass incomplete fix of CVE-2024-27980, that arises from improper handling of batch files with all possible extensions on Windows via child_process.spawn / child_process.spawnSync. A malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:corepack22-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:corepack22-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:corepack22-22.10.0-1.1.s390x", "openSUSE Tumbleweed:corepack22-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.s390x", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.s390x", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.s390x", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:npm22-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:npm22-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:npm22-22.10.0-1.1.s390x", "openSUSE Tumbleweed:npm22-22.10.0-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-36138", "url": "https://www.suse.com/security/cve/CVE-2024-36138" }, { "category": "external", "summary": "SUSE Bug 1227560 for CVE-2024-36138", "url": "https://bugzilla.suse.com/1227560" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:corepack22-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:corepack22-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:corepack22-22.10.0-1.1.s390x", "openSUSE Tumbleweed:corepack22-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.s390x", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.s390x", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.s390x", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:npm22-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:npm22-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:npm22-22.10.0-1.1.s390x", "openSUSE Tumbleweed:npm22-22.10.0-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-10-29T00:00:00Z", "details": "moderate" } ], "title": "CVE-2024-36138" }, { "cve": "CVE-2024-37372", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-37372" } ], "notes": [ { "category": "general", "text": "The Permission Model assumes that any path starting with two backslashes \\ has a four-character prefix that can be ignored, which is not always true. This subtle bug leads to vulnerable edge cases.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:corepack22-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:corepack22-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:corepack22-22.10.0-1.1.s390x", "openSUSE Tumbleweed:corepack22-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.s390x", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.s390x", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.s390x", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:npm22-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:npm22-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:npm22-22.10.0-1.1.s390x", "openSUSE Tumbleweed:npm22-22.10.0-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-37372", "url": "https://www.suse.com/security/cve/CVE-2024-37372" }, { "category": "external", "summary": "SUSE Bug 1227563 for CVE-2024-37372", "url": "https://bugzilla.suse.com/1227563" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:corepack22-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:corepack22-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:corepack22-22.10.0-1.1.s390x", "openSUSE Tumbleweed:corepack22-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.s390x", "openSUSE Tumbleweed:nodejs22-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.s390x", "openSUSE Tumbleweed:nodejs22-devel-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.s390x", "openSUSE Tumbleweed:nodejs22-docs-22.10.0-1.1.x86_64", "openSUSE Tumbleweed:npm22-22.10.0-1.1.aarch64", "openSUSE Tumbleweed:npm22-22.10.0-1.1.ppc64le", "openSUSE Tumbleweed:npm22-22.10.0-1.1.s390x", "openSUSE Tumbleweed:npm22-22.10.0-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-10-29T00:00:00Z", "details": "low" } ], "title": "CVE-2024-37372" } ] }
opensuse-su-2024:14214-1
Vulnerability from csaf_opensuse
Notes
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "corepack20-20.15.1-1.1 on GA media", "title": "Title of the patch" }, { "category": "description", "text": "These are all security issues fixed in the corepack20-20.15.1-1.1 package on the GA media of openSUSE Tumbleweed.", "title": "Description of the patch" }, { "category": "details", "text": "openSUSE-Tumbleweed-2024-14214", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_14214-1.json" }, { "category": "self", "summary": "SUSE CVE CVE-2024-22018 page", "url": "https://www.suse.com/security/cve/CVE-2024-22018/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-22020 page", "url": "https://www.suse.com/security/cve/CVE-2024-22020/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-27980 page", "url": "https://www.suse.com/security/cve/CVE-2024-27980/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-36137 page", "url": "https://www.suse.com/security/cve/CVE-2024-36137/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-37372 page", "url": "https://www.suse.com/security/cve/CVE-2024-37372/" } ], "title": "corepack20-20.15.1-1.1 on GA media", "tracking": { "current_release_date": "2024-07-22T00:00:00Z", "generator": { "date": "2024-07-22T00:00:00Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "openSUSE-SU-2024:14214-1", "initial_release_date": "2024-07-22T00:00:00Z", "revision_history": [ { "date": "2024-07-22T00:00:00Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "corepack20-20.15.1-1.1.aarch64", "product": { "name": "corepack20-20.15.1-1.1.aarch64", "product_id": "corepack20-20.15.1-1.1.aarch64" } }, { "category": "product_version", "name": "nodejs20-20.15.1-1.1.aarch64", "product": { "name": "nodejs20-20.15.1-1.1.aarch64", "product_id": "nodejs20-20.15.1-1.1.aarch64" } }, { "category": "product_version", "name": "nodejs20-devel-20.15.1-1.1.aarch64", "product": { "name": "nodejs20-devel-20.15.1-1.1.aarch64", "product_id": "nodejs20-devel-20.15.1-1.1.aarch64" } }, { "category": "product_version", "name": "nodejs20-docs-20.15.1-1.1.aarch64", "product": { "name": "nodejs20-docs-20.15.1-1.1.aarch64", "product_id": "nodejs20-docs-20.15.1-1.1.aarch64" } }, { "category": "product_version", "name": "npm20-20.15.1-1.1.aarch64", "product": { "name": "npm20-20.15.1-1.1.aarch64", "product_id": "npm20-20.15.1-1.1.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "corepack20-20.15.1-1.1.ppc64le", "product": { "name": "corepack20-20.15.1-1.1.ppc64le", "product_id": "corepack20-20.15.1-1.1.ppc64le" } }, { "category": "product_version", "name": "nodejs20-20.15.1-1.1.ppc64le", "product": { "name": "nodejs20-20.15.1-1.1.ppc64le", "product_id": "nodejs20-20.15.1-1.1.ppc64le" } }, { "category": "product_version", "name": "nodejs20-devel-20.15.1-1.1.ppc64le", "product": { "name": "nodejs20-devel-20.15.1-1.1.ppc64le", "product_id": "nodejs20-devel-20.15.1-1.1.ppc64le" } }, { "category": "product_version", "name": "nodejs20-docs-20.15.1-1.1.ppc64le", "product": { "name": "nodejs20-docs-20.15.1-1.1.ppc64le", "product_id": "nodejs20-docs-20.15.1-1.1.ppc64le" } }, { "category": "product_version", "name": "npm20-20.15.1-1.1.ppc64le", "product": { "name": "npm20-20.15.1-1.1.ppc64le", "product_id": "npm20-20.15.1-1.1.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "corepack20-20.15.1-1.1.s390x", "product": { "name": "corepack20-20.15.1-1.1.s390x", "product_id": "corepack20-20.15.1-1.1.s390x" } }, { "category": "product_version", "name": "nodejs20-20.15.1-1.1.s390x", "product": { "name": "nodejs20-20.15.1-1.1.s390x", "product_id": "nodejs20-20.15.1-1.1.s390x" } }, { "category": "product_version", "name": "nodejs20-devel-20.15.1-1.1.s390x", "product": { "name": "nodejs20-devel-20.15.1-1.1.s390x", "product_id": "nodejs20-devel-20.15.1-1.1.s390x" } }, { "category": "product_version", "name": "nodejs20-docs-20.15.1-1.1.s390x", "product": { "name": "nodejs20-docs-20.15.1-1.1.s390x", "product_id": "nodejs20-docs-20.15.1-1.1.s390x" } }, { "category": "product_version", "name": "npm20-20.15.1-1.1.s390x", "product": { "name": "npm20-20.15.1-1.1.s390x", "product_id": "npm20-20.15.1-1.1.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "corepack20-20.15.1-1.1.x86_64", "product": { "name": "corepack20-20.15.1-1.1.x86_64", "product_id": "corepack20-20.15.1-1.1.x86_64" } }, { "category": "product_version", "name": "nodejs20-20.15.1-1.1.x86_64", "product": { "name": "nodejs20-20.15.1-1.1.x86_64", "product_id": "nodejs20-20.15.1-1.1.x86_64" } }, { "category": "product_version", "name": "nodejs20-devel-20.15.1-1.1.x86_64", "product": { "name": "nodejs20-devel-20.15.1-1.1.x86_64", "product_id": "nodejs20-devel-20.15.1-1.1.x86_64" } }, { "category": "product_version", "name": "nodejs20-docs-20.15.1-1.1.x86_64", "product": { "name": "nodejs20-docs-20.15.1-1.1.x86_64", "product_id": "nodejs20-docs-20.15.1-1.1.x86_64" } }, { "category": "product_version", "name": "npm20-20.15.1-1.1.x86_64", "product": { "name": "npm20-20.15.1-1.1.x86_64", "product_id": "npm20-20.15.1-1.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "openSUSE Tumbleweed", "product": { "name": "openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed", "product_identification_helper": { "cpe": "cpe:/o:opensuse:tumbleweed" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "corepack20-20.15.1-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:corepack20-20.15.1-1.1.aarch64" }, "product_reference": "corepack20-20.15.1-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "corepack20-20.15.1-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:corepack20-20.15.1-1.1.ppc64le" }, "product_reference": "corepack20-20.15.1-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "corepack20-20.15.1-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:corepack20-20.15.1-1.1.s390x" }, "product_reference": "corepack20-20.15.1-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "corepack20-20.15.1-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:corepack20-20.15.1-1.1.x86_64" }, "product_reference": "corepack20-20.15.1-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs20-20.15.1-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.aarch64" }, "product_reference": "nodejs20-20.15.1-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs20-20.15.1-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.ppc64le" }, "product_reference": "nodejs20-20.15.1-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs20-20.15.1-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.s390x" }, "product_reference": "nodejs20-20.15.1-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs20-20.15.1-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.x86_64" }, "product_reference": "nodejs20-20.15.1-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs20-devel-20.15.1-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.aarch64" }, "product_reference": "nodejs20-devel-20.15.1-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs20-devel-20.15.1-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.ppc64le" }, "product_reference": "nodejs20-devel-20.15.1-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs20-devel-20.15.1-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.s390x" }, "product_reference": "nodejs20-devel-20.15.1-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs20-devel-20.15.1-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.x86_64" }, "product_reference": "nodejs20-devel-20.15.1-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs20-docs-20.15.1-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.aarch64" }, "product_reference": "nodejs20-docs-20.15.1-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs20-docs-20.15.1-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.ppc64le" }, "product_reference": "nodejs20-docs-20.15.1-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs20-docs-20.15.1-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.s390x" }, "product_reference": "nodejs20-docs-20.15.1-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs20-docs-20.15.1-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.x86_64" }, "product_reference": "nodejs20-docs-20.15.1-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "npm20-20.15.1-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:npm20-20.15.1-1.1.aarch64" }, "product_reference": "npm20-20.15.1-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "npm20-20.15.1-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:npm20-20.15.1-1.1.ppc64le" }, "product_reference": "npm20-20.15.1-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "npm20-20.15.1-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:npm20-20.15.1-1.1.s390x" }, "product_reference": "npm20-20.15.1-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "npm20-20.15.1-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:npm20-20.15.1-1.1.x86_64" }, "product_reference": "npm20-20.15.1-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-22018", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-22018" } ], "notes": [ { "category": "general", "text": "A vulnerability has been identified in Node.js, affecting users of the experimental permission model when the --allow-fs-read flag is used.\nThis flaw arises from an inadequate permission model that fails to restrict file stats through the fs.lstat API. As a result, malicious actors can retrieve stats from files that they do not have explicit read access to.\nThis vulnerability affects all users using the experimental permission model in Node.js 20 and Node.js 21.\nPlease note that at the time this CVE was issued, the permission model is an experimental feature of Node.js.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:corepack20-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:corepack20-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:corepack20-20.15.1-1.1.s390x", "openSUSE Tumbleweed:corepack20-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.s390x", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.s390x", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.s390x", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:npm20-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:npm20-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:npm20-20.15.1-1.1.s390x", "openSUSE Tumbleweed:npm20-20.15.1-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-22018", "url": "https://www.suse.com/security/cve/CVE-2024-22018" }, { "category": "external", "summary": "SUSE Bug 1227562 for CVE-2024-22018", "url": "https://bugzilla.suse.com/1227562" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:corepack20-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:corepack20-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:corepack20-20.15.1-1.1.s390x", "openSUSE Tumbleweed:corepack20-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.s390x", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.s390x", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.s390x", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:npm20-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:npm20-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:npm20-20.15.1-1.1.s390x", "openSUSE Tumbleweed:npm20-20.15.1-1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 2.8, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:corepack20-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:corepack20-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:corepack20-20.15.1-1.1.s390x", "openSUSE Tumbleweed:corepack20-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.s390x", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.s390x", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.s390x", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:npm20-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:npm20-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:npm20-20.15.1-1.1.s390x", "openSUSE Tumbleweed:npm20-20.15.1-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-07-22T00:00:00Z", "details": "low" } ], "title": "CVE-2024-22018" }, { "cve": "CVE-2024-22020", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-22020" } ], "notes": [ { "category": "general", "text": "A security flaw in Node.js allows a bypass of network import restrictions.\nBy embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security.\nVerified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports.\nExploiting this flaw can violate network import security, posing a risk to developers and servers.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:corepack20-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:corepack20-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:corepack20-20.15.1-1.1.s390x", "openSUSE Tumbleweed:corepack20-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.s390x", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.s390x", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.s390x", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:npm20-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:npm20-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:npm20-20.15.1-1.1.s390x", "openSUSE Tumbleweed:npm20-20.15.1-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-22020", "url": "https://www.suse.com/security/cve/CVE-2024-22020" }, { "category": "external", "summary": "SUSE Bug 1227554 for CVE-2024-22020", "url": "https://bugzilla.suse.com/1227554" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:corepack20-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:corepack20-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:corepack20-20.15.1-1.1.s390x", "openSUSE Tumbleweed:corepack20-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.s390x", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.s390x", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.s390x", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:npm20-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:npm20-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:npm20-20.15.1-1.1.s390x", "openSUSE Tumbleweed:npm20-20.15.1-1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:corepack20-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:corepack20-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:corepack20-20.15.1-1.1.s390x", "openSUSE Tumbleweed:corepack20-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.s390x", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.s390x", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.s390x", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:npm20-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:npm20-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:npm20-20.15.1-1.1.s390x", "openSUSE Tumbleweed:npm20-20.15.1-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-07-22T00:00:00Z", "details": "moderate" } ], "title": "CVE-2024-22020" }, { "cve": "CVE-2024-27980", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-27980" } ], "notes": [ { "category": "general", "text": "Due to the improper handling of batch files in child_process.spawn / child_process.spawnSync, a malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:corepack20-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:corepack20-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:corepack20-20.15.1-1.1.s390x", "openSUSE Tumbleweed:corepack20-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.s390x", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.s390x", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.s390x", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:npm20-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:npm20-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:npm20-20.15.1-1.1.s390x", "openSUSE Tumbleweed:npm20-20.15.1-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-27980", "url": "https://www.suse.com/security/cve/CVE-2024-27980" }, { "category": "external", "summary": "SUSE Bug 1222665 for CVE-2024-27980", "url": "https://bugzilla.suse.com/1222665" }, { "category": "external", "summary": "SUSE Bug 1227560 for CVE-2024-27980", "url": "https://bugzilla.suse.com/1227560" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:corepack20-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:corepack20-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:corepack20-20.15.1-1.1.s390x", "openSUSE Tumbleweed:corepack20-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.s390x", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.s390x", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.s390x", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:npm20-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:npm20-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:npm20-20.15.1-1.1.s390x", "openSUSE Tumbleweed:npm20-20.15.1-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-07-22T00:00:00Z", "details": "moderate" } ], "title": "CVE-2024-27980" }, { "cve": "CVE-2024-36137", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-36137" } ], "notes": [ { "category": "general", "text": "A vulnerability has been identified in Node.js, affecting users of the experimental permission model when the --allow-fs-write flag is used.\r\n\r\nNode.js Permission Model do not operate on file descriptors, however, operations such as fs.fchown or fs.fchmod can use a \"read-only\" file descriptor to change the owner and permissions of a file.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:corepack20-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:corepack20-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:corepack20-20.15.1-1.1.s390x", "openSUSE Tumbleweed:corepack20-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.s390x", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.s390x", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.s390x", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:npm20-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:npm20-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:npm20-20.15.1-1.1.s390x", "openSUSE Tumbleweed:npm20-20.15.1-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-36137", "url": "https://www.suse.com/security/cve/CVE-2024-36137" }, { "category": "external", "summary": "SUSE Bug 1227561 for CVE-2024-36137", "url": "https://bugzilla.suse.com/1227561" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:corepack20-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:corepack20-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:corepack20-20.15.1-1.1.s390x", "openSUSE Tumbleweed:corepack20-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.s390x", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.s390x", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.s390x", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:npm20-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:npm20-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:npm20-20.15.1-1.1.s390x", "openSUSE Tumbleweed:npm20-20.15.1-1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.9, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:corepack20-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:corepack20-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:corepack20-20.15.1-1.1.s390x", "openSUSE Tumbleweed:corepack20-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.s390x", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.s390x", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.s390x", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:npm20-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:npm20-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:npm20-20.15.1-1.1.s390x", "openSUSE Tumbleweed:npm20-20.15.1-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-07-22T00:00:00Z", "details": "low" } ], "title": "CVE-2024-36137" }, { "cve": "CVE-2024-37372", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-37372" } ], "notes": [ { "category": "general", "text": "The Permission Model assumes that any path starting with two backslashes \\ has a four-character prefix that can be ignored, which is not always true. This subtle bug leads to vulnerable edge cases.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:corepack20-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:corepack20-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:corepack20-20.15.1-1.1.s390x", "openSUSE Tumbleweed:corepack20-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.s390x", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.s390x", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.s390x", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:npm20-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:npm20-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:npm20-20.15.1-1.1.s390x", "openSUSE Tumbleweed:npm20-20.15.1-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-37372", "url": "https://www.suse.com/security/cve/CVE-2024-37372" }, { "category": "external", "summary": "SUSE Bug 1227563 for CVE-2024-37372", "url": "https://bugzilla.suse.com/1227563" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:corepack20-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:corepack20-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:corepack20-20.15.1-1.1.s390x", "openSUSE Tumbleweed:corepack20-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.s390x", "openSUSE Tumbleweed:nodejs20-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.s390x", "openSUSE Tumbleweed:nodejs20-devel-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.s390x", "openSUSE Tumbleweed:nodejs20-docs-20.15.1-1.1.x86_64", "openSUSE Tumbleweed:npm20-20.15.1-1.1.aarch64", "openSUSE Tumbleweed:npm20-20.15.1-1.1.ppc64le", "openSUSE Tumbleweed:npm20-20.15.1-1.1.s390x", "openSUSE Tumbleweed:npm20-20.15.1-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-07-22T00:00:00Z", "details": "low" } ], "title": "CVE-2024-37372" } ] }
NCSC-2024-0414
Vulnerability from csaf_ncscnl
Notes
{ "document": { "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "nl", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." }, { "category": "description", "text": "Oracle heeft kwetsbaarheden verholpen in diverse Communications producten en systemen.", "title": "Feiten" }, { "category": "description", "text": "Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorie\u00ebn schade:\n\n- Denial-of-Service (DoS)\n- Manipuleren van gegevens\n- Uitvoer van willekeurige code (Gebruikersrechten)\n- Uitvoer van willekeurige code (Administratorrechten)\n- Toegang tot gevoelige gegevens", "title": "Interpretaties" }, { "category": "description", "text": "Oracle heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.", "title": "Oplossingen" }, { "category": "general", "text": "medium", "title": "Kans" }, { "category": "general", "text": "high", "title": "Schade" }, { "category": "general", "text": "Heap-based Buffer Overflow", "title": "CWE-122" }, { "category": "general", "text": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)", "title": "CWE-835" }, { "category": "general", "text": "Improper Input Validation", "title": "CWE-20" }, { "category": "general", "text": "Return of Pointer Value Outside of Expected Range", "title": "CWE-466" }, { "category": "general", "text": "Unchecked Input for Loop Condition", "title": "CWE-606" }, { "category": "general", "text": "Detection of Error Condition Without Action", "title": "CWE-390" }, { "category": "general", "text": "Asymmetric Resource Consumption (Amplification)", "title": "CWE-405" }, { "category": "general", "text": "Truncation of Security-relevant Information", "title": "CWE-222" }, { "category": "general", "text": "Signal Handler Race Condition", "title": "CWE-364" }, { "category": "general", "text": "Multiple Interpretations of UI Input", "title": "CWE-450" }, { "category": "general", "text": "Improper Handling of Length Parameter Inconsistency", "title": "CWE-130" }, { "category": "general", "text": "Missing Release of Resource after Effective Lifetime", "title": "CWE-772" }, { "category": "general", "text": "Incorrect Resource Transfer Between Spheres", "title": "CWE-669" }, { "category": "general", "text": "Buffer Over-read", "title": "CWE-126" }, { "category": "general", "text": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)", "title": "CWE-88" }, { "category": "general", "text": "Acceptance of Extraneous Untrusted Data With Trusted Data", "title": "CWE-349" }, { "category": "general", "text": "Improper Handling of Exceptional Conditions", "title": "CWE-755" }, { "category": "general", "text": "Excessive Iteration", "title": "CWE-834" }, { "category": "general", "text": "Inefficient Algorithmic Complexity", "title": "CWE-407" }, { "category": "general", "text": "Improper Check for Unusual or Exceptional Conditions", "title": "CWE-754" }, { "category": "general", "text": "Improper Check or Handling of Exceptional Conditions", "title": "CWE-703" }, { "category": "general", "text": "Uncontrolled Search Path Element", "title": "CWE-427" }, { "category": "general", "text": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)", "title": "CWE-601" }, { "category": "general", "text": "Signed to Unsigned Conversion Error", "title": "CWE-195" }, { "category": "general", "text": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)", "title": "CWE-444" }, { "category": "general", "text": "Improper Encoding or Escaping of Output", "title": "CWE-116" }, { "category": "general", "text": "Insufficient Verification of Data Authenticity", "title": "CWE-345" }, { "category": "general", "text": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)", "title": "CWE-77" }, { "category": "general", "text": "Integer Overflow or Wraparound", "title": "CWE-190" }, { "category": "general", "text": "UNIX Symbolic Link (Symlink) Following", "title": "CWE-61" }, { "category": "general", "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)", "title": "CWE-362" }, { "category": "general", "text": "Out-of-bounds Read", "title": "CWE-125" }, { "category": "general", "text": "Improper Resource Shutdown or Release", "title": "CWE-404" }, { "category": "general", "text": "Improper Access Control", "title": "CWE-284" }, { "category": "general", "text": "Improper Restriction of Operations within the Bounds of a Memory Buffer", "title": "CWE-119" }, { "category": "general", "text": "Use After Free", "title": "CWE-416" }, { "category": "general", "text": "Missing Release of Memory after Effective Lifetime", "title": "CWE-401" }, { "category": "general", "text": "NULL Pointer Dereference", "title": "CWE-476" }, { "category": "general", "text": "Incomplete Cleanup", "title": "CWE-459" }, { "category": "general", "text": "Improper Control of Generation of Code (\u0027Code Injection\u0027)", "title": "CWE-94" }, { "category": "general", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" }, { "category": "general", "text": "Allocation of Resources Without Limits or Throttling", "title": "CWE-770" }, { "category": "general", "text": "Uncaught Exception", "title": "CWE-248" }, { "category": "general", "text": "Uncontrolled Recursion", "title": "CWE-674" }, { "category": "general", "text": "Server-Side Request Forgery (SSRF)", "title": "CWE-918" }, { "category": "general", "text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)", "title": "CWE-22" }, { "category": "general", "text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)", "title": "CWE-78" }, { "category": "general", "text": "Out-of-bounds Write", "title": "CWE-787" }, { "category": "general", "text": "Exposure of Sensitive Information to an Unauthorized Actor", "title": "CWE-200" } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "Nationaal Cyber Security Centrum", "namespace": "https://www.ncsc.nl/" }, "references": [ { "category": "external", "summary": "Reference - cveprojectv5; hkcert; nvd; oracle; redhat", "url": "https://www.oracle.com/security-alerts/cpuoct2024.html" } ], "title": "Kwetsbaarheden verholpen in Oracle Communications", "tracking": { "current_release_date": "2024-10-17T13:17:52.103171Z", "id": "NCSC-2024-0414", "initial_release_date": "2024-10-17T13:17:52.103171Z", "revision_history": [ { "date": "2024-10-17T13:17:52.103171Z", "number": "0", "summary": "Initiele versie" } ], "status": "final", "version": "1.0.0" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1635313", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:10.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1635305", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:12.11.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1635311", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:12.11.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1635312", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:12.11.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1635323", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:12.6.1.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1670430", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:14.0.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1674632", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:14.0.0.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1674630", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:14.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1635320", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:15.0.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1674633", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:17.0.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1670439", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:22.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1635322", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:23.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1670429", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:23.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1670435", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:23.2.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1670431", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:23.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1670436", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:23.3.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1670432", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:23.3.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1635321", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:23.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1635310", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:23.4.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1635318", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:23.4.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1674640", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:23.4.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1674642", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:23.4.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1670434", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:24.1.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1635316", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:24.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1674639", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:24.1.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1635314", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:24.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1674638", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:24.2.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1674637", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:24.2.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1635306", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:4.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1635307", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:4.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1635317", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:46.6.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1635319", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:46.6.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1670438", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:5.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1635324", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:5.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1635315", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:5.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1670433", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:9.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1674641", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:9.0.1.10.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1674635", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:9.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1674636", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:9.1.1.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1670437", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:9.1.1.7.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1674631", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:9.1.1.9.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1674634", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:9.1.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1635308", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:9.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1635309", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:9.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications__10.4.0.4", "product": { "name": "communications__10.4.0.4", "product_id": "CSAFPID-1674629", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications__10.4.0.4:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications___23.4.2", "product": { "name": "communications___23.4.2", "product_id": "CSAFPID-1670442", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications___23.4.2:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications___23.4.3", "product": { "name": "communications___23.4.3", "product_id": "CSAFPID-1635325", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications___23.4.3:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications___23.4.4", "product": { "name": "communications___23.4.4", "product_id": "CSAFPID-1635326", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications___23.4.4:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications___23.4.5", "product": { "name": "communications___23.4.5", "product_id": "CSAFPID-1674645", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications___23.4.5:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications___23.4.6", "product": { "name": "communications___23.4.6", "product_id": "CSAFPID-1674646", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications___23.4.6:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications___24.2.0", "product": { "name": "communications___24.2.0", "product_id": "CSAFPID-1674644", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications___24.2.0:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications___7.2.1.0.0", "product": { "name": "communications___7.2.1.0.0", "product_id": "CSAFPID-1670441", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications___7.2.1.0.0:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications___8.6.0.6", "product": { "name": "communications___8.6.0.6", "product_id": "CSAFPID-1635327", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications___8.6.0.6:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications___8.6.0.8", "product": { "name": "communications___8.6.0.8", "product_id": "CSAFPID-1635328", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications___8.6.0.8:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications___9.0.2", "product": { "name": "communications___9.0.2", "product_id": "CSAFPID-1670440", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications___9.0.2:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications___9.0.3", "product": { "name": "communications___9.0.3", "product_id": "CSAFPID-1635329", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications___9.0.3:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications___9.1.1.8.0", "product": { "name": "communications___9.1.1.8.0", "product_id": "CSAFPID-1674643", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications___9.1.1.8.0:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_applications", "product": { "name": "communications_applications", "product_id": "CSAFPID-1674621", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_applications:15.0.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_applications", "product": { "name": "communications_applications", "product_id": "CSAFPID-1674618", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_applications:6.0.1.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_applications", "product": { "name": "communications_applications", "product_id": "CSAFPID-1674619", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_applications:7.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_applications", "product": { "name": "communications_applications", "product_id": "CSAFPID-1674622", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_applications:7.4.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_applications", "product": { "name": "communications_applications", "product_id": "CSAFPID-1674617", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_applications:7.4.3.0.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_applications", "product": { "name": "communications_applications", "product_id": "CSAFPID-1674623", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_applications:7.5.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_applications", "product": { "name": "communications_applications", "product_id": "CSAFPID-1674620", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_applications:8.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_applications___12.0.6.0.0", "product": { "name": "communications_applications___12.0.6.0.0", "product_id": "CSAFPID-1674627", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_applications___12.0.6.0.0:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_applications___5.5.22", "product": { "name": "communications_applications___5.5.22", "product_id": "CSAFPID-1674626", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_applications___5.5.22:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_applications___6.0.3", "product": { "name": "communications_applications___6.0.3", "product_id": "CSAFPID-1674628", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_applications___6.0.3:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_applications___6.0.4", "product": { "name": "communications_applications___6.0.4", "product_id": "CSAFPID-1674624", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_applications___6.0.4:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_applications___6.0.5", "product": { "name": "communications_applications___6.0.5", "product_id": "CSAFPID-1674625", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_applications___6.0.5:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_asap", "product": { "name": "communications_asap", "product_id": "CSAFPID-204629", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_asap:7.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_asap", "product": { "name": "communications_asap", "product_id": "CSAFPID-1673475", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_asap:7.4.3.0.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_asap", "product": { "name": "communications_asap", "product_id": "CSAFPID-816792", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_asap:7.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_billing_and_revenue_management", "product": { "name": "communications_billing_and_revenue_management", "product_id": "CSAFPID-764735", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_billing_and_revenue_management:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_billing_and_revenue_management", "product": { "name": "communications_billing_and_revenue_management", "product_id": "CSAFPID-1650734", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.4.0-12.0.0.8.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_billing_and_revenue_management", "product": { "name": "communications_billing_and_revenue_management", "product_id": "CSAFPID-204639", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_billing_and_revenue_management", "product": { "name": "communications_billing_and_revenue_management", "product_id": "CSAFPID-204627", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_billing_and_revenue_management", "product": { "name": "communications_billing_and_revenue_management", "product_id": "CSAFPID-816793", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_billing_and_revenue_management:15.0.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_billing_and_revenue_management", "product": { "name": "communications_billing_and_revenue_management", "product_id": "CSAFPID-912557", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_billing_and_revenue_management:15.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_billing_and_revenue_management__-_elastic_charging_engine", "product": { "name": "communications_billing_and_revenue_management__-_elastic_charging_engine", "product_id": "CSAFPID-219835", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_billing_and_revenue_management__-_elastic_charging_engine:12.0.0.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_brm_-_elastic_charging_engine", "product": { "name": "communications_brm_-_elastic_charging_engine", "product_id": "CSAFPID-764247", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_brm_-_elastic_charging_engine:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_brm_-_elastic_charging_engine", "product": { "name": "communications_brm_-_elastic_charging_engine", "product_id": "CSAFPID-209548", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_brm_-_elastic_charging_engine:11.3.0.9.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_brm_-_elastic_charging_engine", "product": { "name": "communications_brm_-_elastic_charging_engine", "product_id": "CSAFPID-209549", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_brm_-_elastic_charging_engine:11.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_brm_-_elastic_charging_engine", "product": { "name": "communications_brm_-_elastic_charging_engine", "product_id": "CSAFPID-41194", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_brm_-_elastic_charging_engine:12.0.0.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_brm_-_elastic_charging_engine", "product": { "name": "communications_brm_-_elastic_charging_engine", "product_id": "CSAFPID-1650820", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_brm_-_elastic_charging_engine:12.0.0.4-12.0.0.8:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_brm_-_elastic_charging_engine", "product": { "name": "communications_brm_-_elastic_charging_engine", "product_id": "CSAFPID-765241", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_brm_-_elastic_charging_engine:12.0.0.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_brm_-_elastic_charging_engine", "product": { "name": "communications_brm_-_elastic_charging_engine", "product_id": "CSAFPID-209546", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_brm_-_elastic_charging_engine:12.0.0.5.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_brm_-_elastic_charging_engine", "product": { "name": "communications_brm_-_elastic_charging_engine", "product_id": "CSAFPID-209550", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_brm_-_elastic_charging_engine:12.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_brm_-_elastic_charging_engine", "product": { "name": "communications_brm_-_elastic_charging_engine", "product_id": "CSAFPID-498607", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_brm_-_elastic_charging_engine:12:0.0.5.0:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_brm_-_elastic_charging_engine", "product": { "name": "communications_brm_-_elastic_charging_engine", "product_id": "CSAFPID-912556", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_brm_-_elastic_charging_engine:15.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_calendar_server", "product": { "name": "communications_calendar_server", "product_id": "CSAFPID-764736", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_calendar_server:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_calendar_server", "product": { "name": "communications_calendar_server", "product_id": "CSAFPID-220190", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_calendar_server:8.0.0.6.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_configuration_console", "product": { "name": "communications_cloud_native_configuration_console", "product_id": "CSAFPID-391501", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_configuration_console:22.4.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_configuration_console", "product": { "name": "communications_cloud_native_configuration_console", "product_id": "CSAFPID-440102", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_configuration_console:23.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_automated_test_suite", "product": { "name": "communications_cloud_native_core_automated_test_suite", "product_id": "CSAFPID-89545", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_automated_test_suite:1.8.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_automated_test_suite", "product": { "name": "communications_cloud_native_core_automated_test_suite", "product_id": "CSAFPID-180215", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_automated_test_suite:1.9.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_automated_test_suite", "product": { "name": "communications_cloud_native_core_automated_test_suite", "product_id": "CSAFPID-180197", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_automated_test_suite:22.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_automated_test_suite", "product": { "name": "communications_cloud_native_core_automated_test_suite", "product_id": "CSAFPID-220548", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_automated_test_suite:22.2.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_automated_test_suite", "product": { "name": "communications_cloud_native_core_automated_test_suite", "product_id": "CSAFPID-41516", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_automated_test_suite:22.3.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_automated_test_suite", "product": { "name": "communications_cloud_native_core_automated_test_suite", "product_id": "CSAFPID-41515", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_automated_test_suite:22.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_automated_test_suite", "product": { "name": "communications_cloud_native_core_automated_test_suite", "product_id": "CSAFPID-220057", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_automated_test_suite:22.4.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_automated_test_suite", "product": { "name": "communications_cloud_native_core_automated_test_suite", "product_id": "CSAFPID-220055", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_automated_test_suite:23.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_automated_test_suite", "product": { "name": "communications_cloud_native_core_automated_test_suite", "product_id": "CSAFPID-220909", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_automated_test_suite:23.1.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_automated_test_suite", "product": { "name": "communications_cloud_native_core_automated_test_suite", "product_id": "CSAFPID-816765", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_automated_test_suite:23.1.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_automated_test_suite", "product": { "name": "communications_cloud_native_core_automated_test_suite", "product_id": "CSAFPID-816766", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_automated_test_suite:23.2.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_automated_test_suite", "product": { "name": "communications_cloud_native_core_automated_test_suite", "product_id": "CSAFPID-816767", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_automated_test_suite:23.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_automated_test_suite", "product": { "name": "communications_cloud_native_core_automated_test_suite", "product_id": "CSAFPID-1503577", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_automated_test_suite:23.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_automated_test_suite", "product": { "name": "communications_cloud_native_core_automated_test_suite", "product_id": "CSAFPID-1673416", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_automated_test_suite:23.4.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_automated_test_suite", "product": { "name": "communications_cloud_native_core_automated_test_suite", "product_id": "CSAFPID-1673516", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_automated_test_suite:23.4.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_automated_test_suite", "product": { "name": "communications_cloud_native_core_automated_test_suite", "product_id": "CSAFPID-1673412", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_automated_test_suite:24.1.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_automated_test_suite", "product": { "name": "communications_cloud_native_core_automated_test_suite", "product_id": "CSAFPID-1673411", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_automated_test_suite:24.2.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_binding_support_function", "product": { "name": "communications_cloud_native_core_binding_support_function", "product_id": "CSAFPID-764237", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_binding_support_function", "product": { "name": "communications_cloud_native_core_binding_support_function", "product_id": "CSAFPID-2045", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:1.10.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_binding_support_function", "product": { "name": "communications_cloud_native_core_binding_support_function", "product_id": "CSAFPID-40612", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:1.11.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_binding_support_function", "product": { "name": "communications_cloud_native_core_binding_support_function", "product_id": "CSAFPID-608629", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:22.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_binding_support_function", "product": { "name": "communications_cloud_native_core_binding_support_function", "product_id": "CSAFPID-93784", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:22.1.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_binding_support_function", "product": { "name": "communications_cloud_native_core_binding_support_function", "product_id": "CSAFPID-1899", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:22.1.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_binding_support_function", "product": { "name": "communications_cloud_native_core_binding_support_function", "product_id": "CSAFPID-41111", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:22.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_binding_support_function", "product": { "name": "communications_cloud_native_core_binding_support_function", "product_id": "CSAFPID-1685", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:22.2.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_binding_support_function", "product": { "name": "communications_cloud_native_core_binding_support_function", "product_id": "CSAFPID-493445", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:22.2.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_binding_support_function", "product": { "name": "communications_cloud_native_core_binding_support_function", "product_id": "CSAFPID-294401", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:22.2.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_binding_support_function", "product": { "name": "communications_cloud_native_core_binding_support_function", "product_id": "CSAFPID-220547", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:22.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_binding_support_function", "product": { "name": "communications_cloud_native_core_binding_support_function", "product_id": "CSAFPID-764824", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:22.3.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_binding_support_function", "product": { "name": "communications_cloud_native_core_binding_support_function", "product_id": "CSAFPID-220459", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:22.3.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_binding_support_function", "product": { "name": "communications_cloud_native_core_binding_support_function", "product_id": "CSAFPID-45184", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:22.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_binding_support_function", "product": { "name": "communications_cloud_native_core_binding_support_function", "product_id": "CSAFPID-45182", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:23.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_binding_support_function", "product": { "name": "communications_cloud_native_core_binding_support_function", "product_id": "CSAFPID-45181", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:23.1.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_binding_support_function", "product": { "name": "communications_cloud_native_core_binding_support_function", "product_id": "CSAFPID-611405", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:23.1.7:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_binding_support_function", "product": { "name": "communications_cloud_native_core_binding_support_function", "product_id": "CSAFPID-611403", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:23.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_binding_support_function", "product": { "name": "communications_cloud_native_core_binding_support_function", "product_id": "CSAFPID-611404", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:23.2.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_binding_support_function", "product": { "name": "communications_cloud_native_core_binding_support_function", "product_id": "CSAFPID-1650752", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:23.4.0-23.4.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_binding_support_function", "product": { "name": "communications_cloud_native_core_binding_support_function", "product_id": "CSAFPID-1673396", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:23.4.0-23.4.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_binding_support_function", "product": { "name": "communications_cloud_native_core_binding_support_function", "product_id": "CSAFPID-912066", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:23.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_binding_support_function", "product": { "name": "communications_cloud_native_core_binding_support_function", "product_id": "CSAFPID-1503323", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:23.4.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_certificate_management", "product": { "name": "communications_cloud_native_core_certificate_management", "product_id": "CSAFPID-1673526", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_certificate_management:23.4.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_certificate_management", "product": { "name": "communications_cloud_native_core_certificate_management", "product_id": "CSAFPID-1673391", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_certificate_management:23.4.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_certificate_management", "product": { "name": "communications_cloud_native_core_certificate_management", "product_id": "CSAFPID-1673394", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_certificate_management:24.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_console", "product": { "name": "communications_cloud_native_core_console", "product_id": "CSAFPID-165550", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_console:1.7.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_console", "product": { "name": "communications_cloud_native_core_console", "product_id": "CSAFPID-93546", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_console:1.9.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_console", "product": { "name": "communications_cloud_native_core_console", "product_id": "CSAFPID-180195", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_console:22.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_console", "product": { "name": "communications_cloud_native_core_console", "product_id": "CSAFPID-40299", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_console:22.1.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_console", "product": { "name": "communications_cloud_native_core_console", "product_id": "CSAFPID-187447", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_console:22.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_console", "product": { "name": "communications_cloud_native_core_console", "product_id": "CSAFPID-45186", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_console:22.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_console", "product": { "name": "communications_cloud_native_core_console", "product_id": "CSAFPID-45185", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_console:22.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_console", "product": { "name": "communications_cloud_native_core_console", "product_id": "CSAFPID-220559", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_console:22.4.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_console", "product": { "name": "communications_cloud_native_core_console", "product_id": "CSAFPID-220558", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_console:23.1.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_console", "product": { "name": "communications_cloud_native_core_console", "product_id": "CSAFPID-764238", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_console:23.1.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_console", "product": { "name": "communications_cloud_native_core_console", "product_id": "CSAFPID-764239", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_console:23.2.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_console", "product": { "name": "communications_cloud_native_core_console", "product_id": "CSAFPID-816768", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_console:23.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_console", "product": { "name": "communications_cloud_native_core_console", "product_id": "CSAFPID-816769", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_console:23.3.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_console", "product": { "name": "communications_cloud_native_core_console", "product_id": "CSAFPID-912085", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_console:23.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_console", "product": { "name": "communications_cloud_native_core_console", "product_id": "CSAFPID-1503578", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_console:23.4.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_console", "product": { "name": "communications_cloud_native_core_console", "product_id": "CSAFPID-1673389", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_console:23.4.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_console", "product": { "name": "communications_cloud_native_core_console", "product_id": "CSAFPID-1673390", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_console:24.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_dbtier", "product": { "name": "communications_cloud_native_core_dbtier", "product_id": "CSAFPID-1673421", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_dbtier:24.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_dbtier", "product": { "name": "communications_cloud_native_core_dbtier", "product_id": "CSAFPID-1673420", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_dbtier:24.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_data_analytics_function", "product": { "name": "communications_cloud_native_core_network_data_analytics_function", "product_id": "CSAFPID-764825", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_data_analytics_function:22.0.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_data_analytics_function", "product": { "name": "communications_cloud_native_core_network_data_analytics_function", "product_id": "CSAFPID-816770", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_data_analytics_function:23.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_data_analytics_function", "product": { "name": "communications_cloud_native_core_network_data_analytics_function", "product_id": "CSAFPID-816771", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_data_analytics_function:23.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_data_analytics_function", "product": { "name": "communications_cloud_native_core_network_data_analytics_function", "product_id": "CSAFPID-912068", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_data_analytics_function:24.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_data_analytics_function", "product": { "name": "communications_cloud_native_core_network_data_analytics_function", "product_id": "CSAFPID-1503579", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_data_analytics_function:24.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_exposure_function", "product": { "name": "communications_cloud_native_core_network_exposure_function", "product_id": "CSAFPID-180201", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_exposure_function:22.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_exposure_function", "product": { "name": "communications_cloud_native_core_network_exposure_function", "product_id": "CSAFPID-1900", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_exposure_function:22.1.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_exposure_function", "product": { "name": "communications_cloud_native_core_network_exposure_function", "product_id": "CSAFPID-760687", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_exposure_function:22.2.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_exposure_function", "product": { "name": "communications_cloud_native_core_network_exposure_function", "product_id": "CSAFPID-40947", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_exposure_function:22.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_exposure_function", "product": { "name": "communications_cloud_native_core_network_exposure_function", "product_id": "CSAFPID-93635", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_exposure_function:22.3.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_exposure_function", "product": { "name": "communications_cloud_native_core_network_exposure_function", "product_id": "CSAFPID-503534", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_exposure_function:22.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_exposure_function", "product": { "name": "communications_cloud_native_core_network_exposure_function", "product_id": "CSAFPID-90018", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_exposure_function:22.4.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_exposure_function", "product": { "name": "communications_cloud_native_core_network_exposure_function", "product_id": "CSAFPID-220327", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_exposure_function:22.4.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_exposure_function", "product": { "name": "communications_cloud_native_core_network_exposure_function", "product_id": "CSAFPID-94290", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_exposure_function:23.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_exposure_function", "product": { "name": "communications_cloud_native_core_network_exposure_function", "product_id": "CSAFPID-220325", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_exposure_function:23.1.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_exposure_function", "product": { "name": "communications_cloud_native_core_network_exposure_function", "product_id": "CSAFPID-614513", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_exposure_function:23.1.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_exposure_function", "product": { "name": "communications_cloud_native_core_network_exposure_function", "product_id": "CSAFPID-643776", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_exposure_function:23.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_exposure_function", "product": { "name": "communications_cloud_native_core_network_exposure_function", "product_id": "CSAFPID-816772", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_exposure_function:23.3.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_exposure_function", "product": { "name": "communications_cloud_native_core_network_exposure_function", "product_id": "CSAFPID-912076", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_exposure_function:23.4.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_exposure_function", "product": { "name": "communications_cloud_native_core_network_exposure_function", "product_id": "CSAFPID-1503580", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_exposure_function:23.4.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product": { "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product_id": "CSAFPID-40613", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:1.10.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product": { "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product_id": "CSAFPID-2044", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:1.9.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product": { "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product_id": "CSAFPID-40301", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:22.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product": { "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product_id": "CSAFPID-180194", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:22.1.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product": { "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product_id": "CSAFPID-449747", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:22.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product": { "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product_id": "CSAFPID-40298", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:22.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product": { "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product_id": "CSAFPID-223527", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:22.2.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product": { "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product_id": "CSAFPID-449746", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:22.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product": { "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product_id": "CSAFPID-503493", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:22.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product": { "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product_id": "CSAFPID-260394", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:22.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product": { "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product_id": "CSAFPID-219838", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:23.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product": { "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product_id": "CSAFPID-611387", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:23.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product": { "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product_id": "CSAFPID-618156", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:23.2.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product": { "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product_id": "CSAFPID-816773", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:23.3.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product": { "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product_id": "CSAFPID-912101", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:23.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product": { "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product_id": "CSAFPID-1673473", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:24.1.0-24.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product": { "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product_id": "CSAFPID-1503581", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:24.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product": { "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product_id": "CSAFPID-912539", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:_install_upgrade___23.3.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product": { "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product_id": "CSAFPID-912540", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:_install_upgrade___23.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product": { "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product_id": "CSAFPID-912541", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:_installation___23.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product": { "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product_id": "CSAFPID-912542", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:_obserability_services_overlay___23.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product": { "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product_id": "CSAFPID-912543", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:_observability_services_overlay___23.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_repository_function", "product": { "name": "communications_cloud_native_core_network_repository_function", "product_id": "CSAFPID-40611", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:1.15.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_repository_function", "product": { "name": "communications_cloud_native_core_network_repository_function", "product_id": "CSAFPID-40609", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:1.15.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_repository_function", "product": { "name": "communications_cloud_native_core_network_repository_function", "product_id": "CSAFPID-180198", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:22.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_repository_function", "product": { "name": "communications_cloud_native_core_network_repository_function", "product_id": "CSAFPID-41112", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:22.1.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_repository_function", "product": { "name": "communications_cloud_native_core_network_repository_function", "product_id": "CSAFPID-41110", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:22.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_repository_function", "product": { "name": "communications_cloud_native_core_network_repository_function", "product_id": "CSAFPID-760688", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:22.2.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_repository_function", "product": { "name": "communications_cloud_native_core_network_repository_function", "product_id": "CSAFPID-493444", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:22.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_repository_function", "product": { "name": "communications_cloud_native_core_network_repository_function", "product_id": "CSAFPID-93633", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:22.3.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_repository_function", "product": { "name": "communications_cloud_native_core_network_repository_function", "product_id": "CSAFPID-220056", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:22.4.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_repository_function", "product": { "name": "communications_cloud_native_core_network_repository_function", "product_id": "CSAFPID-223511", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:22.4.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_repository_function", "product": { "name": "communications_cloud_native_core_network_repository_function", "product_id": "CSAFPID-216017", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:23.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_repository_function", "product": { "name": "communications_cloud_native_core_network_repository_function", "product_id": "CSAFPID-220889", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:23.1.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_repository_function", "product": { "name": "communications_cloud_native_core_network_repository_function", "product_id": "CSAFPID-614516", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:23.1.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_repository_function", "product": { "name": "communications_cloud_native_core_network_repository_function", "product_id": "CSAFPID-816774", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:23.1.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_repository_function", "product": { "name": "communications_cloud_native_core_network_repository_function", "product_id": "CSAFPID-220918", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:23.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_repository_function", "product": { "name": "communications_cloud_native_core_network_repository_function", "product_id": "CSAFPID-614515", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:23.2.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_repository_function", "product": { "name": "communications_cloud_native_core_network_repository_function", "product_id": "CSAFPID-614514", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:23.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_repository_function", "product": { "name": "communications_cloud_native_core_network_repository_function", "product_id": "CSAFPID-816346", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:23.3.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_repository_function", "product": { "name": "communications_cloud_native_core_network_repository_function", "product_id": "CSAFPID-912077", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:23.4.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_repository_function", "product": { "name": "communications_cloud_native_core_network_repository_function", "product_id": "CSAFPID-1503322", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:23.4.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_repository_function", "product": { "name": "communications_cloud_native_core_network_repository_function", "product_id": "CSAFPID-1673413", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:23.4.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_repository_function", "product": { "name": "communications_cloud_native_core_network_repository_function", "product_id": "CSAFPID-1673415", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:24.2.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_repository_function", "product": { "name": "communications_cloud_native_core_network_repository_function", "product_id": "CSAFPID-816775", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:_install_upgrade___23.3.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_repository_function", "product": { "name": "communications_cloud_native_core_network_repository_function", "product_id": "CSAFPID-912544", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:_install_upgrade___23.4.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_slice_selection_function", "product": { "name": "communications_cloud_native_core_network_slice_selection_function", "product_id": "CSAFPID-40608", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:1.8.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_slice_selection_function", "product": { "name": "communications_cloud_native_core_network_slice_selection_function", "product_id": "CSAFPID-180199", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:22.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_slice_selection_function", "product": { "name": "communications_cloud_native_core_network_slice_selection_function", "product_id": "CSAFPID-41113", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:22.1.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_slice_selection_function", "product": { "name": "communications_cloud_native_core_network_slice_selection_function", "product_id": "CSAFPID-260395", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:22.3.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_slice_selection_function", "product": { "name": "communications_cloud_native_core_network_slice_selection_function", "product_id": "CSAFPID-260393", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:22.4.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_slice_selection_function", "product": { "name": "communications_cloud_native_core_network_slice_selection_function", "product_id": "CSAFPID-816348", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:23.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_slice_selection_function", "product": { "name": "communications_cloud_native_core_network_slice_selection_function", "product_id": "CSAFPID-912545", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:23.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_slice_selection_function", "product": { "name": "communications_cloud_native_core_network_slice_selection_function", "product_id": "CSAFPID-816347", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:23.3.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_slice_selection_function", "product": { "name": "communications_cloud_native_core_network_slice_selection_function", "product_id": "CSAFPID-1673494", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:24.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_slice_selection_function", "product": { "name": "communications_cloud_native_core_network_slice_selection_function", "product_id": "CSAFPID-1673501", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:24.2.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_slice_selection_function", "product": { "name": "communications_cloud_native_core_network_slice_selection_function", "product_id": "CSAFPID-816776", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:_install_upgrade___23.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_slice_selection_function", "product": { "name": "communications_cloud_native_core_network_slice_selection_function", "product_id": "CSAFPID-816777", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:_install_upgrade___23.3.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_policy", "product": { "name": "communications_cloud_native_core_policy", "product_id": "CSAFPID-764240", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_policy:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_policy", "product": { "name": "communications_cloud_native_core_policy", "product_id": "CSAFPID-220468", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.11.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_policy", "product": { "name": "communications_cloud_native_core_policy", "product_id": "CSAFPID-2310", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.14.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_policy", "product": { "name": "communications_cloud_native_core_policy", "product_id": "CSAFPID-93547", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.15.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_policy", "product": { "name": "communications_cloud_native_core_policy", "product_id": "CSAFPID-180200", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_policy:22.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_policy", "product": { "name": "communications_cloud_native_core_policy", "product_id": "CSAFPID-180193", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_policy:22.1.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_policy", "product": { "name": "communications_cloud_native_core_policy", "product_id": "CSAFPID-1898", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_policy:22.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_policy", "product": { "name": "communications_cloud_native_core_policy", "product_id": "CSAFPID-93636", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_policy:22.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_policy", "product": { "name": "communications_cloud_native_core_policy", "product_id": "CSAFPID-90020", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_policy:22.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_policy", "product": { "name": "communications_cloud_native_core_policy", "product_id": "CSAFPID-90015", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_policy:23.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_policy", "product": { "name": "communications_cloud_native_core_policy", "product_id": "CSAFPID-220133", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_policy:23.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_policy", "product": { "name": "communications_cloud_native_core_policy", "product_id": "CSAFPID-1650751", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_policy:23.4.0-23.4.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_policy", "product": { "name": "communications_cloud_native_core_policy", "product_id": "CSAFPID-1673517", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_policy:23.4.0-23.4.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_policy", "product": { "name": "communications_cloud_native_core_policy", "product_id": "CSAFPID-1673395", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_policy:23.4.0-23.4.6:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_policy", "product": { "name": "communications_cloud_native_core_policy", "product_id": "CSAFPID-912069", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_policy:23.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_policy", "product": { "name": "communications_cloud_native_core_policy", "product_id": "CSAFPID-765371", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_policy:all_supported_s:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_security_edge_protection_proxy", "product": { "name": "communications_cloud_native_core_security_edge_protection_proxy", "product_id": "CSAFPID-180216", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:1.7.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_security_edge_protection_proxy", "product": { "name": "communications_cloud_native_core_security_edge_protection_proxy", "product_id": "CSAFPID-180202", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:22.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_security_edge_protection_proxy", "product": { "name": "communications_cloud_native_core_security_edge_protection_proxy", "product_id": "CSAFPID-40300", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:22.1.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_security_edge_protection_proxy", "product": { "name": "communications_cloud_native_core_security_edge_protection_proxy", "product_id": "CSAFPID-93653", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:22.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_security_edge_protection_proxy", "product": { "name": "communications_cloud_native_core_security_edge_protection_proxy", "product_id": "CSAFPID-40949", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:22.2.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_security_edge_protection_proxy", "product": { "name": "communications_cloud_native_core_security_edge_protection_proxy", "product_id": "CSAFPID-642000", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:22.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_security_edge_protection_proxy", "product": { "name": "communications_cloud_native_core_security_edge_protection_proxy", "product_id": "CSAFPID-93634", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:22.3.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_security_edge_protection_proxy", "product": { "name": "communications_cloud_native_core_security_edge_protection_proxy", "product_id": "CSAFPID-220561", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:22.3.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_security_edge_protection_proxy", "product": { "name": "communications_cloud_native_core_security_edge_protection_proxy", "product_id": "CSAFPID-90021", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:22.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_security_edge_protection_proxy", "product": { "name": "communications_cloud_native_core_security_edge_protection_proxy", "product_id": "CSAFPID-94292", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:22.4.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_security_edge_protection_proxy", "product": { "name": "communications_cloud_native_core_security_edge_protection_proxy", "product_id": "CSAFPID-218028", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:22.4.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_security_edge_protection_proxy", "product": { "name": "communications_cloud_native_core_security_edge_protection_proxy", "product_id": "CSAFPID-220881", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:22.4.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_security_edge_protection_proxy", "product": { "name": "communications_cloud_native_core_security_edge_protection_proxy", "product_id": "CSAFPID-94291", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:23.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_security_edge_protection_proxy", "product": { "name": "communications_cloud_native_core_security_edge_protection_proxy", "product_id": "CSAFPID-220910", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:23.1.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_security_edge_protection_proxy", "product": { "name": "communications_cloud_native_core_security_edge_protection_proxy", "product_id": "CSAFPID-220324", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:23.1.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_security_edge_protection_proxy", "product": { "name": "communications_cloud_native_core_security_edge_protection_proxy", "product_id": "CSAFPID-611401", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:23.1.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_security_edge_protection_proxy", "product": { "name": "communications_cloud_native_core_security_edge_protection_proxy", "product_id": "CSAFPID-816778", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:23.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_security_edge_protection_proxy", "product": { "name": "communications_cloud_native_core_security_edge_protection_proxy", "product_id": "CSAFPID-614517", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:23.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_security_edge_protection_proxy", "product": { "name": "communications_cloud_native_core_security_edge_protection_proxy", "product_id": "CSAFPID-912547", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:23.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_security_edge_protection_proxy", "product": { "name": "communications_cloud_native_core_security_edge_protection_proxy", "product_id": "CSAFPID-1673392", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:23.4.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_security_edge_protection_proxy", "product": { "name": "communications_cloud_native_core_security_edge_protection_proxy", "product_id": "CSAFPID-1503582", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:24.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_security_edge_protection_proxy", "product": { "name": "communications_cloud_native_core_security_edge_protection_proxy", "product_id": "CSAFPID-1673393", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:24.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_security_edge_protection_proxy", "product": { "name": "communications_cloud_native_core_security_edge_protection_proxy", "product_id": "CSAFPID-912546", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:_automated_test_suite___23.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_service_communication_proxy", "product": { "name": "communications_cloud_native_core_service_communication_proxy", "product_id": "CSAFPID-40610", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_service_communication_proxy:1.15.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_service_communication_proxy", "product": { "name": "communications_cloud_native_core_service_communication_proxy", "product_id": "CSAFPID-611587", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_service_communication_proxy:22.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_service_communication_proxy", "product": { "name": "communications_cloud_native_core_service_communication_proxy", "product_id": "CSAFPID-642002", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_service_communication_proxy:22.2.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_service_communication_proxy", "product": { "name": "communications_cloud_native_core_service_communication_proxy", "product_id": "CSAFPID-493443", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_service_communication_proxy:22.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_service_communication_proxy", "product": { "name": "communications_cloud_native_core_service_communication_proxy", "product_id": "CSAFPID-642001", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_service_communication_proxy:22.3.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_service_communication_proxy", "product": { "name": "communications_cloud_native_core_service_communication_proxy", "product_id": "CSAFPID-224796", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_service_communication_proxy:22.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_service_communication_proxy", "product": { "name": "communications_cloud_native_core_service_communication_proxy", "product_id": "CSAFPID-224795", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_service_communication_proxy:23.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_service_communication_proxy", "product": { "name": "communications_cloud_native_core_service_communication_proxy", "product_id": "CSAFPID-912548", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_service_communication_proxy:23.2.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_service_communication_proxy", "product": { "name": "communications_cloud_native_core_service_communication_proxy", "product_id": "CSAFPID-912102", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_service_communication_proxy:23.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_service_communication_proxy", "product": { "name": "communications_cloud_native_core_service_communication_proxy", "product_id": "CSAFPID-912549", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_service_communication_proxy:23.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_service_communication_proxy", "product": { "name": "communications_cloud_native_core_service_communication_proxy", "product_id": "CSAFPID-1503583", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_service_communication_proxy:23.4.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_service_communication_proxy", "product": { "name": "communications_cloud_native_core_service_communication_proxy", "product_id": "CSAFPID-1503584", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_service_communication_proxy:23.4.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_service_communication_proxy", "product": { "name": "communications_cloud_native_core_service_communication_proxy", "product_id": "CSAFPID-1503585", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_service_communication_proxy:24.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_service_communication_proxy", "product": { "name": "communications_cloud_native_core_service_communication_proxy", "product_id": "CSAFPID-1672767", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_service_communication_proxy:24.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_unified_data_repository", "product": { "name": "communications_cloud_native_core_unified_data_repository", "product_id": "CSAFPID-180217", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:1.15.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_unified_data_repository", "product": { "name": "communications_cloud_native_core_unified_data_repository", "product_id": "CSAFPID-180196", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:22.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_unified_data_repository", "product": { "name": "communications_cloud_native_core_unified_data_repository", "product_id": "CSAFPID-165576", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:22.1.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_unified_data_repository", "product": { "name": "communications_cloud_native_core_unified_data_repository", "product_id": "CSAFPID-40297", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:22.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_unified_data_repository", "product": { "name": "communications_cloud_native_core_unified_data_repository", "product_id": "CSAFPID-764899", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:22.2.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_unified_data_repository", "product": { "name": "communications_cloud_native_core_unified_data_repository", "product_id": "CSAFPID-589926", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:22.2.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_unified_data_repository", "product": { "name": "communications_cloud_native_core_unified_data_repository", "product_id": "CSAFPID-179780", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:22.2.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_unified_data_repository", "product": { "name": "communications_cloud_native_core_unified_data_repository", "product_id": "CSAFPID-40948", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:22.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_unified_data_repository", "product": { "name": "communications_cloud_native_core_unified_data_repository", "product_id": "CSAFPID-589925", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:22.3.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_unified_data_repository", "product": { "name": "communications_cloud_native_core_unified_data_repository", "product_id": "CSAFPID-179779", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:22.3.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_unified_data_repository", "product": { "name": "communications_cloud_native_core_unified_data_repository", "product_id": "CSAFPID-764826", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:22.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_unified_data_repository", "product": { "name": "communications_cloud_native_core_unified_data_repository", "product_id": "CSAFPID-90019", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:22.4.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_unified_data_repository", "product": { "name": "communications_cloud_native_core_unified_data_repository", "product_id": "CSAFPID-90016", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:23.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_unified_data_repository", "product": { "name": "communications_cloud_native_core_unified_data_repository", "product_id": "CSAFPID-220326", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:23.1.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_unified_data_repository", "product": { "name": "communications_cloud_native_core_unified_data_repository", "product_id": "CSAFPID-764241", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:23.1.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_unified_data_repository", "product": { "name": "communications_cloud_native_core_unified_data_repository", "product_id": "CSAFPID-912078", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:23.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_unified_data_repository", "product": { "name": "communications_cloud_native_core_unified_data_repository", "product_id": "CSAFPID-816349", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:23.3.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_unified_data_repository", "product": { "name": "communications_cloud_native_core_unified_data_repository", "product_id": "CSAFPID-912550", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:23.3.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_unified_data_repository", "product": { "name": "communications_cloud_native_core_unified_data_repository", "product_id": "CSAFPID-1503586", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:23.4.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_unified_data_repository", "product": { "name": "communications_cloud_native_core_unified_data_repository", "product_id": "CSAFPID-1503587", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:23.4.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_unified_data_repository", "product": { "name": "communications_cloud_native_core_unified_data_repository", "product_id": "CSAFPID-1673399", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:24.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_unified_data_repository", "product": { "name": "communications_cloud_native_core_unified_data_repository", "product_id": "CSAFPID-816779", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:_signaling___23.3.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_contacts_server", "product": { "name": "communications_contacts_server", "product_id": "CSAFPID-764737", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_contacts_server:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_contacts_server", "product": { "name": "communications_contacts_server", "product_id": "CSAFPID-224787", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_contacts_server:8.0.0.6.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_contacts_server", "product": { "name": "communications_contacts_server", "product_id": "CSAFPID-220189", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_contacts_server:8.0.0.7.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_converged_application_server", "product": { "name": "communications_converged_application_server", "product_id": "CSAFPID-764827", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_converged_application_server:7.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_converged_application_server", "product": { "name": "communications_converged_application_server", "product_id": "CSAFPID-764828", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_converged_application_server:8.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_converged_application_server_-_service_controller", "product": { "name": "communications_converged_application_server_-_service_controller", "product_id": "CSAFPID-764734", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_converged_application_server_-_service_controller:6.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_converged_application_server_-_service_controller", "product": { "name": "communications_converged_application_server_-_service_controller", "product_id": "CSAFPID-426842", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_converged_application_server_-_service_controller:6.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_converged_charging_system", "product": { "name": "communications_converged_charging_system", "product_id": "CSAFPID-1503599", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_converged_charging_system:2.0.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_converged_charging_system", "product": { "name": "communications_converged_charging_system", "product_id": "CSAFPID-1503600", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_converged_charging_system:2.0.0.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_convergence", "product": { "name": "communications_convergence", "product_id": "CSAFPID-345031", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_convergence:3.0.2.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_convergence", "product": { "name": "communications_convergence", "product_id": "CSAFPID-204635", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_convergence:3.0.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_convergence", "product": { "name": "communications_convergence", "product_id": "CSAFPID-764833", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_convergence:3.0.3.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_convergence", "product": { "name": "communications_convergence", "product_id": "CSAFPID-224793", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_convergence:3.0.3.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_convergence", "product": { "name": "communications_convergence", "product_id": "CSAFPID-816794", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_convergence:3.0.3.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_convergent_charging_controller", "product": { "name": "communications_convergent_charging_controller", "product_id": "CSAFPID-342793", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_convergent_charging_controller:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_convergent_charging_controller", "product": { "name": "communications_convergent_charging_controller", "product_id": "CSAFPID-1650777", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_convergent_charging_controller:12.0.1.0.0-12.0.6.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_convergent_charging_controller", "product": { "name": "communications_convergent_charging_controller", "product_id": "CSAFPID-1265", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_convergent_charging_controller:12.0.6.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_convergent_charging_controller", "product": { "name": "communications_convergent_charging_controller", "product_id": "CSAFPID-764248", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_convergent_charging_controller:12.0.6.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_convergent_charging_controller", "product": { "name": "communications_convergent_charging_controller", "product_id": "CSAFPID-816350", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_convergent_charging_controller:15.0.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_convergent_charging_controller", "product": { "name": "communications_convergent_charging_controller", "product_id": "CSAFPID-1261", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_convergent_charging_controller:6.0.1.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_core_session_manager", "product": { "name": "communications_core_session_manager", "product_id": "CSAFPID-110244", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_core_session_manager:8.2.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_core_session_manager", "product": { "name": "communications_core_session_manager", "product_id": "CSAFPID-110242", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_core_session_manager:8.4.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_core_session_manager", "product": { "name": "communications_core_session_manager", "product_id": "CSAFPID-93777", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_core_session_manager:8.45:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_core_session_manager", "product": { "name": "communications_core_session_manager", "product_id": "CSAFPID-1672764", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_core_session_manager:9.1.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_core_session_manager", "product": { "name": "communications_core_session_manager", "product_id": "CSAFPID-93772", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_core_session_manager:9.15:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_data_model", "product": { "name": "communications_data_model", "product_id": "CSAFPID-764902", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_data_model:12.2.0.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_design_studio", "product": { "name": "communications_design_studio", "product_id": "CSAFPID-765372", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_design_studio:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_design_studio", "product": { "name": "communications_design_studio", "product_id": "CSAFPID-342799", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_design_studio:7.3.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_design_studio", "product": { "name": "communications_design_studio", "product_id": "CSAFPID-704412", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_design_studio:7.4.0.7.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_design_studio", "product": { "name": "communications_design_studio", "product_id": "CSAFPID-704411", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_design_studio:7.4.1.5.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_design_studio", "product": { "name": "communications_design_studio", "product_id": "CSAFPID-165544", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_design_studio:7.4.2.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_design_studio", "product": { "name": "communications_design_studio", "product_id": "CSAFPID-704410", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_design_studio:7.4.2.8.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_design_studio", "product": { "name": "communications_design_studio", "product_id": "CSAFPID-41183", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_design_studio:7.4.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_diameter_intelligence_hub", "product": { "name": "communications_diameter_intelligence_hub", "product_id": "CSAFPID-342802", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_diameter_intelligence_hub:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_diameter_intelligence_hub", "product": { "name": "communications_diameter_intelligence_hub", "product_id": "CSAFPID-764829", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_diameter_intelligence_hub:8.2.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_diameter_signaling_router", "product": { "name": "communications_diameter_signaling_router", "product_id": "CSAFPID-1503588", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_diameter_signaling_router:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_diameter_signaling_router", "product": { "name": "communications_diameter_signaling_router", "product_id": "CSAFPID-1892", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_diameter_signaling_router:8.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_diameter_signaling_router", "product": { "name": "communications_diameter_signaling_router", "product_id": "CSAFPID-1891", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_diameter_signaling_router:8.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_diameter_signaling_router", "product": { "name": "communications_diameter_signaling_router", "product_id": "CSAFPID-1888", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_diameter_signaling_router", "product": { "name": "communications_diameter_signaling_router", "product_id": "CSAFPID-1887", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_diameter_signaling_router", "product": { "name": "communications_diameter_signaling_router", "product_id": "CSAFPID-1889", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_diameter_signaling_router", "product": { "name": "communications_diameter_signaling_router", "product_id": "CSAFPID-1884", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_diameter_signaling_router:8.3.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_diameter_signaling_router", "product": { "name": "communications_diameter_signaling_router", "product_id": "CSAFPID-1885", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_diameter_signaling_router:8.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_diameter_signaling_router", "product": { "name": "communications_diameter_signaling_router", "product_id": "CSAFPID-1882", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_diameter_signaling_router:8.4.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_diameter_signaling_router", "product": { "name": "communications_diameter_signaling_router", "product_id": "CSAFPID-1881", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_diameter_signaling_router:8.4.0.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_diameter_signaling_router", "product": { "name": "communications_diameter_signaling_router", "product_id": "CSAFPID-1883", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_diameter_signaling_router:8.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_diameter_signaling_router", "product": { "name": "communications_diameter_signaling_router", "product_id": "CSAFPID-1879", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_diameter_signaling_router:8.5.0.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_diameter_signaling_router", "product": { "name": "communications_diameter_signaling_router", "product_id": "CSAFPID-1880", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_diameter_signaling_router:8.5.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_diameter_signaling_router", "product": { "name": "communications_diameter_signaling_router", "product_id": "CSAFPID-40293", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_diameter_signaling_router:8.6.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_diameter_signaling_router", "product": { "name": "communications_diameter_signaling_router", "product_id": "CSAFPID-1650826", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_diameter_signaling_router:8.6.0.4-8.6.0.6:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_diameter_signaling_router", "product": { "name": "communications_diameter_signaling_router", "product_id": "CSAFPID-1650830", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_diameter_signaling_router:8.6.0.4-8.6.0.8:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_diameter_signaling_router", "product": { "name": "communications_diameter_signaling_router", "product_id": "CSAFPID-611413", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_diameter_signaling_router:9.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_diameter_signaling_router", "product": { "name": "communications_diameter_signaling_router", "product_id": "CSAFPID-912551", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_diameter_signaling_router:_patches___9.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_diameter_signaling_router", "product": { "name": "communications_diameter_signaling_router", "product_id": "CSAFPID-912552", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_diameter_signaling_router:_platform___9.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_eagle_application_processor", "product": { "name": "communications_eagle_application_processor", "product_id": "CSAFPID-1673417", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_eagle_application_processor:17.0.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_eagle_application_processor", "product": { "name": "communications_eagle_application_processor", "product_id": "CSAFPID-765369", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_eagle_application_processor:all_supported_s:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_eagle_element_management_system", "product": { "name": "communications_eagle_element_management_system", "product_id": "CSAFPID-1503316", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_eagle_element_management_system:46.6.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_eagle_element_management_system", "product": { "name": "communications_eagle_element_management_system", "product_id": "CSAFPID-1503317", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_eagle_element_management_system:46.6.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_eagle_element_management_system", "product": { "name": "communications_eagle_element_management_system", "product_id": "CSAFPID-204528", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_eagle_element_management_system:46.6:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_eagle_ftp_table_base_retrieval", "product": { "name": "communications_eagle_ftp_table_base_retrieval", "product_id": "CSAFPID-204623", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_eagle_ftp_table_base_retrieval:4.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_eagle_lnp_application_processor", "product": { "name": "communications_eagle_lnp_application_processor", "product_id": "CSAFPID-352633", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_eagle_lnp_application_processor:10.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_eagle_lnp_application_processor", "product": { "name": "communications_eagle_lnp_application_processor", "product_id": "CSAFPID-352632", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_eagle_lnp_application_processor:10.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_eagle_software", "product": { "name": "communications_eagle_software", "product_id": "CSAFPID-765366", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_eagle_software:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_eagle_software", "product": { "name": "communications_eagle_software", "product_id": "CSAFPID-765365", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_eagle_software:46.7.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_elastic_charging_engine", "product": { "name": "communications_elastic_charging_engine", "product_id": "CSAFPID-764834", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_elastic_charging_engine:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_element_manager", "product": { "name": "communications_element_manager", "product_id": "CSAFPID-764242", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_element_manager:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_element_manager", "product": { "name": "communications_element_manager", "product_id": "CSAFPID-204597", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_element_manager:8.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_element_manager", "product": { "name": "communications_element_manager", "product_id": "CSAFPID-204580", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_element_manager:8.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_element_manager", "product": { "name": "communications_element_manager", "product_id": "CSAFPID-9226", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_element_manager:8.1.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_element_manager", "product": { "name": "communications_element_manager", "product_id": "CSAFPID-204589", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_element_manager:8.2.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_element_manager", "product": { "name": "communications_element_manager", "product_id": "CSAFPID-9070", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_element_manager:8.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_element_manager", "product": { "name": "communications_element_manager", "product_id": "CSAFPID-8845", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_element_manager:8.2.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_element_manager", "product": { "name": "communications_element_manager", "product_id": "CSAFPID-204624", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_element_manager:8.2.2.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_element_manager", "product": { "name": "communications_element_manager", "product_id": "CSAFPID-2286", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_element_manager:8.2.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_element_manager", "product": { "name": "communications_element_manager", "product_id": "CSAFPID-204464", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_element_manager:8.2.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_element_manager", "product": { "name": "communications_element_manager", "product_id": "CSAFPID-345038", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_element_manager:9.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_element_manager", "product": { "name": "communications_element_manager", "product_id": "CSAFPID-93629", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_element_manager:9.0.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_element_manager", "product": { "name": "communications_element_manager", "product_id": "CSAFPID-611422", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_element_manager:9.0.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_element_manager", "product": { "name": "communications_element_manager", "product_id": "CSAFPID-93630", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_element_manager:9.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_element_manager", "product": { "name": "communications_element_manager", "product_id": "CSAFPID-816780", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_element_manager:9.4.53:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_evolved_communications_application_server", "product": { "name": "communications_evolved_communications_application_server", "product_id": "CSAFPID-204645", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_evolved_communications_application_server:7.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_fraud_monitor", "product": { "name": "communications_fraud_monitor", "product_id": "CSAFPID-816781", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_fraud_monitor:5.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_fraud_monitor", "product": { "name": "communications_fraud_monitor", "product_id": "CSAFPID-816782", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_fraud_monitor:5.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_fraud_monitor", "product": { "name": "communications_fraud_monitor", "product_id": "CSAFPID-912553", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_fraud_monitor:5.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_instant_messaging_server", "product": { "name": "communications_instant_messaging_server", "product_id": "CSAFPID-207586", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_instant_messaging_server:10.0.1.5.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_instant_messaging_server", "product": { "name": "communications_instant_messaging_server", "product_id": "CSAFPID-234306", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_instant_messaging_server:10.0.1.6.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_instant_messaging_server", "product": { "name": "communications_instant_messaging_server", "product_id": "CSAFPID-219803", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_instant_messaging_server:10.0.1.7.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_instant_messaging_server", "product": { "name": "communications_instant_messaging_server", "product_id": "CSAFPID-387664", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_instant_messaging_server:8.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_interactive_session_recorder", "product": { "name": "communications_interactive_session_recorder", "product_id": "CSAFPID-1893", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_interactive_session_recorder:6.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_ip_service_activator", "product": { "name": "communications_ip_service_activator", "product_id": "CSAFPID-204622", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_ip_service_activator:7.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_ip_service_activator", "product": { "name": "communications_ip_service_activator", "product_id": "CSAFPID-219909", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_ip_service_activator:7.5.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_lsms", "product": { "name": "communications_lsms", "product_id": "CSAFPID-1673065", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_lsms:14.0.0.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_messaging_server", "product": { "name": "communications_messaging_server", "product_id": "CSAFPID-764835", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_messaging_server:8.1.0.20.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_messaging_server", "product": { "name": "communications_messaging_server", "product_id": "CSAFPID-375182", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_messaging_server:8.1.0.21.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_messaging_server", "product": { "name": "communications_messaging_server", "product_id": "CSAFPID-816351", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_messaging_server:8.1.0.24.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_messaging_server", "product": { "name": "communications_messaging_server", "product_id": "CSAFPID-41182", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_messaging_server:8.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_metasolv_solution", "product": { "name": "communications_metasolv_solution", "product_id": "CSAFPID-611595", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_metasolv_solution:6.3.1.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_metasolv_solution", "product": { "name": "communications_metasolv_solution", "product_id": "CSAFPID-226017", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_metasolv_solution:6.3.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_network_analytics_data_director", "product": { "name": "communications_network_analytics_data_director", "product_id": "CSAFPID-220167", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_network_analytics_data_director:23.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_network_analytics_data_director", "product": { "name": "communications_network_analytics_data_director", "product_id": "CSAFPID-816353", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_network_analytics_data_director:23.2.0.0.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_network_analytics_data_director", "product": { "name": "communications_network_analytics_data_director", "product_id": "CSAFPID-764243", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_network_analytics_data_director:23.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_network_analytics_data_director", "product": { "name": "communications_network_analytics_data_director", "product_id": "CSAFPID-816352", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_network_analytics_data_director:23.3.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_network_analytics_data_director", "product": { "name": "communications_network_analytics_data_director", "product_id": "CSAFPID-1503589", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_network_analytics_data_director:23.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_network_analytics_data_director", "product": { "name": "communications_network_analytics_data_director", "product_id": "CSAFPID-1503590", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_network_analytics_data_director:24.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_network_analytics_data_director", "product": { "name": "communications_network_analytics_data_director", "product_id": "CSAFPID-1673414", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_network_analytics_data_director:24.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_network_analytics_data_director", "product": { "name": "communications_network_analytics_data_director", "product_id": "CSAFPID-816783", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_network_analytics_data_director:_general___23.2.0.0.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_network_analytics_data_director", "product": { "name": "communications_network_analytics_data_director", "product_id": "CSAFPID-816786", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_network_analytics_data_director:_general___23.3.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_network_analytics_data_director", "product": { "name": "communications_network_analytics_data_director", "product_id": "CSAFPID-816784", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_network_analytics_data_director:_install_upgrade___23.2.0.0.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_network_analytics_data_director", "product": { "name": "communications_network_analytics_data_director", "product_id": "CSAFPID-816787", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_network_analytics_data_director:_install_upgrade___23.3.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_network_analytics_data_director", "product": { "name": "communications_network_analytics_data_director", "product_id": "CSAFPID-816785", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_network_analytics_data_director:_third_party___23.2.0.0.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_network_analytics_data_director", "product": { "name": "communications_network_analytics_data_director", "product_id": "CSAFPID-816788", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_network_analytics_data_director:_third_party___23.3.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_network_charging_and_control", "product": { "name": "communications_network_charging_and_control", "product_id": "CSAFPID-342803", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_network_charging_and_control:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_network_charging_and_control", "product": { "name": "communications_network_charging_and_control", "product_id": "CSAFPID-1650778", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_network_charging_and_control:12.0.1.0.0-12.0.6.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_network_charging_and_control", "product": { "name": "communications_network_charging_and_control", "product_id": "CSAFPID-1266", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_network_charging_and_control:12.0.6.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_network_charging_and_control", "product": { "name": "communications_network_charging_and_control", "product_id": "CSAFPID-764249", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_network_charging_and_control:12.0.6.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_network_charging_and_control", "product": { "name": "communications_network_charging_and_control", "product_id": "CSAFPID-816354", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_network_charging_and_control:15.0.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_network_charging_and_control", "product": { "name": "communications_network_charging_and_control", "product_id": "CSAFPID-204563", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_network_charging_and_control:6.0.1.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_network_integrity", "product": { "name": "communications_network_integrity", "product_id": "CSAFPID-220125", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_network_integrity:7.3.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_network_integrity", "product": { "name": "communications_network_integrity", "product_id": "CSAFPID-245244", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_network_integrity:7.3.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_network_integrity", "product": { "name": "communications_network_integrity", "product_id": "CSAFPID-219776", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_network_integrity:7.3.6.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_network_integrity", "product": { "name": "communications_network_integrity", "product_id": "CSAFPID-204554", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_network_integrity:7.3.6:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_offline_mediation_controller", "product": { "name": "communications_offline_mediation_controller", "product_id": "CSAFPID-765242", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_offline_mediation_controller:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_operations_monitor", "product": { "name": "communications_operations_monitor", "product_id": "CSAFPID-9489", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_operations_monitor:4.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_operations_monitor", "product": { "name": "communications_operations_monitor", "product_id": "CSAFPID-110249", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_operations_monitor:4.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_operations_monitor", "product": { "name": "communications_operations_monitor", "product_id": "CSAFPID-93781", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_operations_monitor:5.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_operations_monitor", "product": { "name": "communications_operations_monitor", "product_id": "CSAFPID-220132", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_operations_monitor:5.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_operations_monitor", "product": { "name": "communications_operations_monitor", "product_id": "CSAFPID-912079", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_operations_monitor:5.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_order_and_service_management", "product": { "name": "communications_order_and_service_management", "product_id": "CSAFPID-224791", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_order_and_service_management:7.3.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_order_and_service_management", "product": { "name": "communications_order_and_service_management", "product_id": "CSAFPID-219898", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_order_and_service_management:7.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_order_and_service_management", "product": { "name": "communications_order_and_service_management", "product_id": "CSAFPID-224790", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_order_and_service_management:7.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_order_and_service_management", "product": { "name": "communications_order_and_service_management", "product_id": "CSAFPID-221118", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_order_and_service_management:7.4.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_order_and_service_management", "product": { "name": "communications_order_and_service_management", "product_id": "CSAFPID-179774", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_order_and_service_management:7.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_order_and_service_management", "product": { "name": "communications_order_and_service_management", "product_id": "CSAFPID-1673496", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_order_and_service_management:7.5.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_performance_intelligence", "product": { "name": "communications_performance_intelligence", "product_id": "CSAFPID-1503591", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_performance_intelligence:10.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_performance_intelligence_center", "product": { "name": "communications_performance_intelligence_center", "product_id": "CSAFPID-1673485", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_performance_intelligence_center:prior_to_10.4.0.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_performance_intelligence_center__pic__software", "product": { "name": "communications_performance_intelligence_center__pic__software", "product_id": "CSAFPID-765367", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_performance_intelligence_center__pic__software:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_performance_intelligence_center__pic__software", "product": { "name": "communications_performance_intelligence_center__pic__software", "product_id": "CSAFPID-765368", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_performance_intelligence_center__pic__software:10.4.0.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_performance_intelligence_center__pic__software", "product": { "name": "communications_performance_intelligence_center__pic__software", "product_id": "CSAFPID-764830", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_performance_intelligence_center__pic__software:10.4.0.4.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_policy_management", "product": { "name": "communications_policy_management", "product_id": "CSAFPID-573035", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_policy_management:12.5.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_policy_management", "product": { "name": "communications_policy_management", "product_id": "CSAFPID-45192", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_policy_management:12.6.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_policy_management", "product": { "name": "communications_policy_management", "product_id": "CSAFPID-611406", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_policy_management:12.6.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_policy_management", "product": { "name": "communications_policy_management", "product_id": "CSAFPID-816789", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_policy_management:12.6.1.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_policy_management", "product": { "name": "communications_policy_management", "product_id": "CSAFPID-816790", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_policy_management:15.0.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_pricing_design_center", "product": { "name": "communications_pricing_design_center", "product_id": "CSAFPID-764738", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_pricing_design_center:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_pricing_design_center", "product": { "name": "communications_pricing_design_center", "product_id": "CSAFPID-204595", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_pricing_design_center:12.0.0.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_pricing_design_center", "product": { "name": "communications_pricing_design_center", "product_id": "CSAFPID-204590", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_pricing_design_center:12.0.0.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_pricing_design_center", "product": { "name": "communications_pricing_design_center", "product_id": "CSAFPID-816355", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_pricing_design_center:15.0.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_service_catalog_and_design", "product": { "name": "communications_service_catalog_and_design", "product_id": "CSAFPID-1503601", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_service_catalog_and_design:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_service_catalog_and_design", "product": { "name": "communications_service_catalog_and_design", "product_id": "CSAFPID-816359", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_service_catalog_and_design:7.4.0.7.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_service_catalog_and_design", "product": { "name": "communications_service_catalog_and_design", "product_id": "CSAFPID-816358", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_service_catalog_and_design:7.4.1.5.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_service_catalog_and_design", "product": { "name": "communications_service_catalog_and_design", "product_id": "CSAFPID-816357", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_service_catalog_and_design:7.4.2.8.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_service_catalog_and_design", "product": { "name": "communications_service_catalog_and_design", "product_id": "CSAFPID-912558", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_service_catalog_and_design:8.0.0.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_service_catalog_and_design", "product": { "name": "communications_service_catalog_and_design", "product_id": "CSAFPID-1503602", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_service_catalog_and_design:8.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_service_catalog_and_design", "product": { "name": "communications_service_catalog_and_design", "product_id": "CSAFPID-816795", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_service_catalog_and_design:_psr_designer___7.4.0.7.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_service_catalog_and_design", "product": { "name": "communications_service_catalog_and_design", "product_id": "CSAFPID-816796", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_service_catalog_and_design:_psr_designer___7.4.1.5.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_service_catalog_and_design", "product": { "name": "communications_service_catalog_and_design", "product_id": "CSAFPID-816797", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_service_catalog_and_design:_psr_designer___7.4.2.8.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_services_gatekeeper", "product": { "name": "communications_services_gatekeeper", "product_id": "CSAFPID-608630", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_services_gatekeeper:7.0.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_border_controller", "product": { "name": "communications_session_border_controller", "product_id": "CSAFPID-1503592", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_border_controller:4.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_border_controller", "product": { "name": "communications_session_border_controller", "product_id": "CSAFPID-1503593", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_border_controller:4.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_border_controller", "product": { "name": "communications_session_border_controller", "product_id": "CSAFPID-40294", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_border_controller:8.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_border_controller", "product": { "name": "communications_session_border_controller", "product_id": "CSAFPID-40292", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_border_controller:9.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_border_controller", "product": { "name": "communications_session_border_controller", "product_id": "CSAFPID-1672762", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_border_controller:9.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_border_controller", "product": { "name": "communications_session_border_controller", "product_id": "CSAFPID-40291", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_border_controller:9.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_border_controller", "product": { "name": "communications_session_border_controller", "product_id": "CSAFPID-1503594", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_border_controller:9.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_border_controller", "product": { "name": "communications_session_border_controller", "product_id": "CSAFPID-1503595", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_border_controller:9.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_report_manager", "product": { "name": "communications_session_report_manager", "product_id": "CSAFPID-342804", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_report_manager:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_report_manager", "product": { "name": "communications_session_report_manager", "product_id": "CSAFPID-704413", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_report_manager:-:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_report_manager", "product": { "name": "communications_session_report_manager", "product_id": "CSAFPID-2296", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_report_manager:8.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_report_manager", "product": { "name": "communications_session_report_manager", "product_id": "CSAFPID-166028", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_report_manager:8.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_report_manager", "product": { "name": "communications_session_report_manager", "product_id": "CSAFPID-2294", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_report_manager:8.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_report_manager", "product": { "name": "communications_session_report_manager", "product_id": "CSAFPID-2292", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_report_manager:8.1.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_report_manager", "product": { "name": "communications_session_report_manager", "product_id": "CSAFPID-2290", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_report_manager:8.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_report_manager", "product": { "name": "communications_session_report_manager", "product_id": "CSAFPID-2288", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_report_manager:8.2.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_report_manager", "product": { "name": "communications_session_report_manager", "product_id": "CSAFPID-2282", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_report_manager:8.2.2.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_report_manager", "product": { "name": "communications_session_report_manager", "product_id": "CSAFPID-2285", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_report_manager:8.2.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_report_manager", "product": { "name": "communications_session_report_manager", "product_id": "CSAFPID-2279", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_report_manager:8.2.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_report_manager", "product": { "name": "communications_session_report_manager", "product_id": "CSAFPID-204634", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_report_manager:8.2.5.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_report_manager", "product": { "name": "communications_session_report_manager", "product_id": "CSAFPID-345039", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_report_manager:9.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_report_manager", "product": { "name": "communications_session_report_manager", "product_id": "CSAFPID-93628", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_report_manager:9.0.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_report_manager", "product": { "name": "communications_session_report_manager", "product_id": "CSAFPID-611423", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_report_manager:9.0.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_report_manager", "product": { "name": "communications_session_report_manager", "product_id": "CSAFPID-93631", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_report_manager:9.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_report_manager", "product": { "name": "communications_session_report_manager", "product_id": "CSAFPID-816791", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_report_manager:9.4.53:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_route_manager", "product": { "name": "communications_session_route_manager", "product_id": "CSAFPID-342805", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_route_manager:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_route_manager", "product": { "name": "communications_session_route_manager", "product_id": "CSAFPID-704414", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_route_manager:-:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_route_manager", "product": { "name": "communications_session_route_manager", "product_id": "CSAFPID-166027", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_route_manager:8.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_route_manager", "product": { "name": "communications_session_route_manager", "product_id": "CSAFPID-2295", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_route_manager:8.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_route_manager", "product": { "name": "communications_session_route_manager", "product_id": "CSAFPID-2293", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_route_manager:8.1.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_route_manager", "product": { "name": "communications_session_route_manager", "product_id": "CSAFPID-2289", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_route_manager:8.2.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_route_manager", "product": { "name": "communications_session_route_manager", "product_id": "CSAFPID-2291", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_route_manager:8.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_route_manager", "product": { "name": "communications_session_route_manager", "product_id": "CSAFPID-2287", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_route_manager:8.2.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_route_manager", "product": { "name": "communications_session_route_manager", "product_id": "CSAFPID-2283", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_route_manager:8.2.2.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_route_manager", "product": { "name": "communications_session_route_manager", "product_id": "CSAFPID-2284", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_route_manager:8.2.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_route_manager", "product": { "name": "communications_session_route_manager", "product_id": "CSAFPID-2280", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_route_manager:8.2.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_route_manager", "product": { "name": "communications_session_route_manager", "product_id": "CSAFPID-2281", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_route_manager:8.2.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_route_manager", "product": { "name": "communications_session_route_manager", "product_id": "CSAFPID-220414", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_route_manager:8.2.5.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_route_manager", "product": { "name": "communications_session_route_manager", "product_id": "CSAFPID-204607", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_route_manager:8.2.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_router", "product": { "name": "communications_session_router", "product_id": "CSAFPID-764780", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_router:9.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_router", "product": { "name": "communications_session_router", "product_id": "CSAFPID-764781", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_router:9.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_subscriber-aware_load_balancer", "product": { "name": "communications_subscriber-aware_load_balancer", "product_id": "CSAFPID-93775", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_subscriber-aware_load_balancer:9.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_subscriber-aware_load_balancer", "product": { "name": "communications_subscriber-aware_load_balancer", "product_id": "CSAFPID-93774", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_subscriber-aware_load_balancer:9.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_unified_assurance", "product": { "name": "communications_unified_assurance", "product_id": "CSAFPID-240600", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_unified_assurance:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_unified_assurance", "product": { "name": "communications_unified_assurance", "product_id": "CSAFPID-1673382", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_unified_assurance:5.5.0-5.5.22:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_unified_assurance", "product": { "name": "communications_unified_assurance", "product_id": "CSAFPID-78764", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_unified_assurance:5.5.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_unified_assurance", "product": { "name": "communications_unified_assurance", "product_id": "CSAFPID-78763", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_unified_assurance:5.5.10:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_unified_assurance", "product": { "name": "communications_unified_assurance", "product_id": "CSAFPID-1673070", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_unified_assurance:5.5.22:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_unified_assurance", "product": { "name": "communications_unified_assurance", "product_id": "CSAFPID-1673381", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_unified_assurance:6.0.0-6.0.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_unified_assurance", "product": { "name": "communications_unified_assurance", "product_id": "CSAFPID-1650731", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_unified_assurance:6.0.0-6.0.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_unified_assurance", "product": { "name": "communications_unified_assurance", "product_id": "CSAFPID-1673530", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_unified_assurance:6.0.0-6.0.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_unified_assurance", "product": { "name": "communications_unified_assurance", "product_id": "CSAFPID-764901", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_unified_assurance:6.0.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_unified_assurance", "product": { "name": "communications_unified_assurance", "product_id": "CSAFPID-78762", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_unified_assurance:6.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_unified_assurance", "product": { "name": "communications_unified_assurance", "product_id": "CSAFPID-78761", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_unified_assurance:6.0.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_unified_assurance", "product": { "name": "communications_unified_assurance", "product_id": "CSAFPID-614089", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_unified_assurance:6.0.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_unified_assurance", "product": { "name": "communications_unified_assurance", "product_id": "CSAFPID-1673068", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_unified_assurance:6.0.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_unified_inventory_management", "product": { "name": "communications_unified_inventory_management", "product_id": "CSAFPID-764739", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_unified_inventory_management:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_unified_inventory_management", "product": { "name": "communications_unified_inventory_management", "product_id": "CSAFPID-204614", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_unified_inventory_management", "product": { "name": "communications_unified_inventory_management", "product_id": "CSAFPID-8984", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_unified_inventory_management", "product": { "name": "communications_unified_inventory_management", "product_id": "CSAFPID-204510", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_unified_inventory_management", "product": { "name": "communications_unified_inventory_management", "product_id": "CSAFPID-204569", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_unified_inventory_management", "product": { "name": "communications_unified_inventory_management", "product_id": "CSAFPID-219826", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_unified_inventory_management:7.5.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_unified_inventory_management", "product": { "name": "communications_unified_inventory_management", "product_id": "CSAFPID-912073", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_unified_inventory_management:7.5.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_unified_session_manager", "product": { "name": "communications_unified_session_manager", "product_id": "CSAFPID-110243", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_unified_session_manager:8.2.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_unified_session_manager", "product": { "name": "communications_unified_session_manager", "product_id": "CSAFPID-205759", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_unified_session_manager:8.4.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_user_data_repository", "product": { "name": "communications_user_data_repository", "product_id": "CSAFPID-1503596", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_user_data_repository:12.11.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_user_data_repository", "product": { "name": "communications_user_data_repository", "product_id": "CSAFPID-1503597", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_user_data_repository:12.11.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_user_data_repository", "product": { "name": "communications_user_data_repository", "product_id": "CSAFPID-1503598", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_user_data_repository:12.11.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_user_data_repository", "product": { "name": "communications_user_data_repository", "product_id": "CSAFPID-764900", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_user_data_repository:12.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_user_data_repository", "product": { "name": "communications_user_data_repository", "product_id": "CSAFPID-76994", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_user_data_repository:12.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_user_data_repository", "product": { "name": "communications_user_data_repository", "product_id": "CSAFPID-568240", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_user_data_repository:12.6.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_user_data_repository", "product": { "name": "communications_user_data_repository", "product_id": "CSAFPID-764782", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_user_data_repository:12.6.1.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_user_data_repository", "product": { "name": "communications_user_data_repository", "product_id": "CSAFPID-355340", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_user_data_repository:12.6.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_user_data_repository", "product": { "name": "communications_user_data_repository", "product_id": "CSAFPID-912080", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_user_data_repository:14.0.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_user_data_repository", "product": { "name": "communications_user_data_repository", "product_id": "CSAFPID-1673481", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_user_data_repository:14.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_webrtc_session_controller", "product": { "name": "communications_webrtc_session_controller", "product_id": "CSAFPID-912554", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_webrtc_session_controller:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_webrtc_session_controller", "product": { "name": "communications_webrtc_session_controller", "product_id": "CSAFPID-611408", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_webrtc_session_controller:7.2.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_webrtc_session_controller", "product": { "name": "communications_webrtc_session_controller", "product_id": "CSAFPID-703515", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_webrtc_session_controller:7.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_webrtc_session_controller", "product": { "name": "communications_webrtc_session_controller", "product_id": "CSAFPID-611407", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_webrtc_session_controller:7.2.1.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_webrtc_session_controller", "product": { "name": "communications_webrtc_session_controller", "product_id": "CSAFPID-204456", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_webrtc_session_controller:7.2.1:*:*:*:*:*:*:*" } } } ], "category": "vendor", "name": "oracle" } ] }, "vulnerabilities": [ { "cve": "CVE-2021-37137", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" } ], "product_status": { "known_affected": [ "CSAFPID-41182", "CSAFPID-209546", "CSAFPID-40608", "CSAFPID-180216", "CSAFPID-93547", "CSAFPID-180217", "CSAFPID-2310", "CSAFPID-40612", "CSAFPID-391501", "CSAFPID-440102", "CSAFPID-41516", "CSAFPID-41515", "CSAFPID-764237", "CSAFPID-45182", "CSAFPID-45181", "CSAFPID-45186", "CSAFPID-45185", "CSAFPID-90018", "CSAFPID-94290", "CSAFPID-260394", "CSAFPID-216017", "CSAFPID-764240", "CSAFPID-90021", "CSAFPID-94292", "CSAFPID-218028", "CSAFPID-94291", "CSAFPID-493443", "CSAFPID-224796", "CSAFPID-90019", "CSAFPID-90016", "CSAFPID-93777", "CSAFPID-93772", "CSAFPID-40293", "CSAFPID-345038", "CSAFPID-93629", "CSAFPID-93781", "CSAFPID-45192", "CSAFPID-608630", "CSAFPID-40292", "CSAFPID-40291", "CSAFPID-345039", "CSAFPID-93628", "CSAFPID-764780", "CSAFPID-764781", "CSAFPID-93775", "CSAFPID-93774", "CSAFPID-764782", "CSAFPID-342793", "CSAFPID-1261", "CSAFPID-204622", "CSAFPID-219909", "CSAFPID-342803", "CSAFPID-204563", "CSAFPID-221118", "CSAFPID-240600", "CSAFPID-8984", "CSAFPID-204510", "CSAFPID-204569", "CSAFPID-219826", "CSAFPID-1899", "CSAFPID-41111", "CSAFPID-40299", "CSAFPID-187447", "CSAFPID-1900", "CSAFPID-40301", "CSAFPID-180194", "CSAFPID-40298", "CSAFPID-41112", "CSAFPID-41110", "CSAFPID-41113", "CSAFPID-180193", "CSAFPID-1898", "CSAFPID-40300", "CSAFPID-611587", "CSAFPID-40297", "CSAFPID-110244", "CSAFPID-110242", "CSAFPID-9489", "CSAFPID-110249", "CSAFPID-40294", "CSAFPID-110243", "CSAFPID-204629", "CSAFPID-765241", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-41183", "CSAFPID-207586", "CSAFPID-765242", "CSAFPID-205759", "CSAFPID-1893", "CSAFPID-765365", "CSAFPID-765366", "CSAFPID-342804", "CSAFPID-342805", "CSAFPID-204456", "CSAFPID-1882", "CSAFPID-573035", "CSAFPID-204645", "CSAFPID-765367", "CSAFPID-765368", "CSAFPID-764242", "CSAFPID-76994", "CSAFPID-204623", "CSAFPID-352633", "CSAFPID-352632", "CSAFPID-765369", "CSAFPID-204528", "CSAFPID-342802", "CSAFPID-40610", "CSAFPID-40611", "CSAFPID-40609", "CSAFPID-180198", "CSAFPID-180196", "CSAFPID-180201", "CSAFPID-180202", "CSAFPID-40613", "CSAFPID-180199", "CSAFPID-93546", "CSAFPID-180195", "CSAFPID-180200", "CSAFPID-765371", "CSAFPID-89545", "CSAFPID-180215", "CSAFPID-180197", "CSAFPID-204639", "CSAFPID-204627", "CSAFPID-226017", "CSAFPID-219898", "CSAFPID-179774", "CSAFPID-342799", "CSAFPID-765372", "CSAFPID-220125", "CSAFPID-245244", "CSAFPID-204554", "CSAFPID-764739", "CSAFPID-204614", "CSAFPID-345031", "CSAFPID-204635", "CSAFPID-204595", "CSAFPID-204590", "CSAFPID-224787", "CSAFPID-1673381", "CSAFPID-1673382", "CSAFPID-1674617", "CSAFPID-1674618", "CSAFPID-1674619", "CSAFPID-1674620", "CSAFPID-1674621", "CSAFPID-1674622", "CSAFPID-1674623", "CSAFPID-1674624", "CSAFPID-1674625", "CSAFPID-1674626", "CSAFPID-1674627", "CSAFPID-1674628" ] }, "references": [ { "category": "self", "summary": "CVE-2021-37137", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2021/CVE-2021-37137.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-41182", "CSAFPID-209546", "CSAFPID-40608", "CSAFPID-180216", "CSAFPID-93547", "CSAFPID-180217", "CSAFPID-2310", "CSAFPID-40612", "CSAFPID-391501", "CSAFPID-440102", "CSAFPID-41516", "CSAFPID-41515", "CSAFPID-764237", "CSAFPID-45182", "CSAFPID-45181", "CSAFPID-45186", "CSAFPID-45185", "CSAFPID-90018", "CSAFPID-94290", "CSAFPID-260394", "CSAFPID-216017", "CSAFPID-764240", "CSAFPID-90021", "CSAFPID-94292", "CSAFPID-218028", "CSAFPID-94291", "CSAFPID-493443", "CSAFPID-224796", "CSAFPID-90019", "CSAFPID-90016", "CSAFPID-93777", "CSAFPID-93772", "CSAFPID-40293", "CSAFPID-345038", "CSAFPID-93629", "CSAFPID-93781", "CSAFPID-45192", "CSAFPID-608630", "CSAFPID-40292", "CSAFPID-40291", "CSAFPID-345039", "CSAFPID-93628", "CSAFPID-764780", "CSAFPID-764781", "CSAFPID-93775", "CSAFPID-93774", "CSAFPID-764782", "CSAFPID-342793", "CSAFPID-1261", "CSAFPID-204622", "CSAFPID-219909", "CSAFPID-342803", "CSAFPID-204563", "CSAFPID-221118", "CSAFPID-240600", "CSAFPID-8984", "CSAFPID-204510", "CSAFPID-204569", "CSAFPID-219826", "CSAFPID-1899", "CSAFPID-41111", "CSAFPID-40299", "CSAFPID-187447", "CSAFPID-1900", "CSAFPID-40301", "CSAFPID-180194", "CSAFPID-40298", "CSAFPID-41112", "CSAFPID-41110", "CSAFPID-41113", "CSAFPID-180193", "CSAFPID-1898", "CSAFPID-40300", "CSAFPID-611587", "CSAFPID-40297", "CSAFPID-110244", "CSAFPID-110242", "CSAFPID-9489", "CSAFPID-110249", "CSAFPID-40294", "CSAFPID-110243", "CSAFPID-204629", "CSAFPID-765241", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-41183", "CSAFPID-207586", "CSAFPID-765242", "CSAFPID-205759", "CSAFPID-1893", "CSAFPID-765365", "CSAFPID-765366", "CSAFPID-342804", "CSAFPID-342805", "CSAFPID-204456", "CSAFPID-1882", "CSAFPID-573035", "CSAFPID-204645", "CSAFPID-765367", "CSAFPID-765368", "CSAFPID-764242", "CSAFPID-76994", "CSAFPID-204623", "CSAFPID-352633", "CSAFPID-352632", "CSAFPID-765369", "CSAFPID-204528", "CSAFPID-342802", "CSAFPID-40610", "CSAFPID-40611", "CSAFPID-40609", "CSAFPID-180198", "CSAFPID-180196", "CSAFPID-180201", "CSAFPID-180202", "CSAFPID-40613", "CSAFPID-180199", "CSAFPID-93546", "CSAFPID-180195", "CSAFPID-180200", "CSAFPID-765371", "CSAFPID-89545", "CSAFPID-180215", "CSAFPID-180197", "CSAFPID-204639", "CSAFPID-204627", "CSAFPID-226017", "CSAFPID-219898", "CSAFPID-179774", "CSAFPID-342799", "CSAFPID-765372", "CSAFPID-220125", "CSAFPID-245244", "CSAFPID-204554", "CSAFPID-764739", "CSAFPID-204614", "CSAFPID-345031", "CSAFPID-204635", "CSAFPID-204595", "CSAFPID-204590", "CSAFPID-224787", "CSAFPID-1673381", "CSAFPID-1673382", "CSAFPID-1674617", "CSAFPID-1674618", "CSAFPID-1674619", "CSAFPID-1674620", "CSAFPID-1674621", "CSAFPID-1674622", "CSAFPID-1674623", "CSAFPID-1674624", "CSAFPID-1674625", "CSAFPID-1674626", "CSAFPID-1674627", "CSAFPID-1674628" ] } ], "title": "CVE-2021-37137" }, { "cve": "CVE-2022-2068", "cwe": { "id": "CWE-78", "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)" }, "notes": [ { "category": "other", "text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)", "title": "CWE-78" }, { "category": "other", "text": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)", "title": "CWE-77" } ], "product_status": { "known_affected": [ "CSAFPID-40949", "CSAFPID-391501", "CSAFPID-440102", "CSAFPID-41516", "CSAFPID-41515", "CSAFPID-764237", "CSAFPID-45182", "CSAFPID-45181", "CSAFPID-45186", "CSAFPID-45185", "CSAFPID-90018", "CSAFPID-94290", "CSAFPID-260394", "CSAFPID-216017", "CSAFPID-764240", "CSAFPID-90021", "CSAFPID-94292", "CSAFPID-218028", "CSAFPID-94291", "CSAFPID-493443", "CSAFPID-224796", "CSAFPID-90019", "CSAFPID-90016", "CSAFPID-93777", "CSAFPID-93772", "CSAFPID-40293", "CSAFPID-345038", "CSAFPID-93629", "CSAFPID-93781", "CSAFPID-45192", "CSAFPID-608630", "CSAFPID-40292", "CSAFPID-40291", "CSAFPID-345039", "CSAFPID-93628", "CSAFPID-764780", "CSAFPID-764781", "CSAFPID-93775", "CSAFPID-93774", "CSAFPID-764782", "CSAFPID-342793", "CSAFPID-1261", "CSAFPID-204622", "CSAFPID-219909", "CSAFPID-342803", "CSAFPID-204563", "CSAFPID-221118", "CSAFPID-240600", "CSAFPID-8984", "CSAFPID-204510", "CSAFPID-204569", "CSAFPID-219826", "CSAFPID-40294", "CSAFPID-93631", "CSAFPID-764900", "CSAFPID-568240", "CSAFPID-355340", "CSAFPID-703515", "CSAFPID-204456", "CSAFPID-764735", "CSAFPID-204635", "CSAFPID-41183", "CSAFPID-234306", "CSAFPID-41182", "CSAFPID-226017", "CSAFPID-219898", "CSAFPID-179774", "CSAFPID-764738", "CSAFPID-764901", "CSAFPID-764902", "CSAFPID-220547", "CSAFPID-187447", "CSAFPID-760687", "CSAFPID-40947", "CSAFPID-2044", "CSAFPID-449747", "CSAFPID-40301", "CSAFPID-449746", "CSAFPID-40298", "CSAFPID-223527", "CSAFPID-760688", "CSAFPID-93636", "CSAFPID-40300", "CSAFPID-93653", "CSAFPID-642000", "CSAFPID-642002", "CSAFPID-642001", "CSAFPID-165576", "CSAFPID-764899", "CSAFPID-40948", "CSAFPID-426842", "CSAFPID-93630", "CSAFPID-204645", "CSAFPID-1893", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2022-2068", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-2068.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C", "version": "3.1" }, "products": [ "CSAFPID-40949", "CSAFPID-391501", "CSAFPID-440102", "CSAFPID-41516", "CSAFPID-41515", "CSAFPID-764237", "CSAFPID-45182", "CSAFPID-45181", "CSAFPID-45186", "CSAFPID-45185", "CSAFPID-90018", "CSAFPID-94290", "CSAFPID-260394", "CSAFPID-216017", "CSAFPID-764240", "CSAFPID-90021", "CSAFPID-94292", "CSAFPID-218028", "CSAFPID-94291", "CSAFPID-493443", "CSAFPID-224796", "CSAFPID-90019", "CSAFPID-90016", "CSAFPID-93777", "CSAFPID-93772", "CSAFPID-40293", "CSAFPID-345038", "CSAFPID-93629", "CSAFPID-93781", "CSAFPID-45192", "CSAFPID-608630", "CSAFPID-40292", "CSAFPID-40291", "CSAFPID-345039", "CSAFPID-93628", "CSAFPID-764780", "CSAFPID-764781", "CSAFPID-93775", "CSAFPID-93774", "CSAFPID-764782", "CSAFPID-342793", "CSAFPID-1261", "CSAFPID-204622", "CSAFPID-219909", "CSAFPID-342803", "CSAFPID-204563", "CSAFPID-221118", "CSAFPID-240600", "CSAFPID-8984", "CSAFPID-204510", "CSAFPID-204569", "CSAFPID-219826", "CSAFPID-40294", "CSAFPID-93631", "CSAFPID-764900", "CSAFPID-568240", "CSAFPID-355340", "CSAFPID-703515", "CSAFPID-204456", "CSAFPID-764735", "CSAFPID-204635", "CSAFPID-41183", "CSAFPID-234306", "CSAFPID-41182", "CSAFPID-226017", "CSAFPID-219898", "CSAFPID-179774", "CSAFPID-764738", "CSAFPID-764901", "CSAFPID-764902", "CSAFPID-220547", "CSAFPID-187447", "CSAFPID-760687", "CSAFPID-40947", "CSAFPID-2044", "CSAFPID-449747", "CSAFPID-40301", "CSAFPID-449746", "CSAFPID-40298", "CSAFPID-223527", "CSAFPID-760688", "CSAFPID-93636", "CSAFPID-40300", "CSAFPID-93653", "CSAFPID-642000", "CSAFPID-642002", "CSAFPID-642001", "CSAFPID-165576", "CSAFPID-764899", "CSAFPID-40948", "CSAFPID-426842", "CSAFPID-93630", "CSAFPID-204645", "CSAFPID-1893", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] } ], "title": "CVE-2022-2068" }, { "cve": "CVE-2022-2601", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "other", "text": "Out-of-bounds Write", "title": "CWE-787" }, { "category": "other", "text": "Heap-based Buffer Overflow", "title": "CWE-122" } ], "product_status": { "known_affected": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2022-2601", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-2601.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.6, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] } ], "title": "CVE-2022-2601" }, { "cve": "CVE-2022-23437", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)" }, "notes": [ { "category": "other", "text": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)", "title": "CWE-835" } ], "product_status": { "known_affected": [ "CSAFPID-204629", "CSAFPID-704410", "CSAFPID-704411", "CSAFPID-704412", "CSAFPID-226017", "CSAFPID-179774", "CSAFPID-219898", "CSAFPID-219826", "CSAFPID-204569", "CSAFPID-204510", "CSAFPID-220057", "CSAFPID-220055", "CSAFPID-220909", "CSAFPID-45184", "CSAFPID-45182", "CSAFPID-220559", "CSAFPID-220558", "CSAFPID-220327", "CSAFPID-220325", "CSAFPID-219838", "CSAFPID-220056", "CSAFPID-223511", "CSAFPID-216017", "CSAFPID-220889", "CSAFPID-220918", "CSAFPID-90020", "CSAFPID-90015", "CSAFPID-220133", "CSAFPID-220561", "CSAFPID-90021", "CSAFPID-220881", "CSAFPID-94291", "CSAFPID-220910", "CSAFPID-220324", "CSAFPID-224796", "CSAFPID-224795", "CSAFPID-220326", "CSAFPID-764734", "CSAFPID-40293", "CSAFPID-220167", "CSAFPID-93781", "CSAFPID-220132", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-764736", "CSAFPID-764737", "CSAFPID-224793", "CSAFPID-342793", "CSAFPID-1265", "CSAFPID-219803", "CSAFPID-375182", "CSAFPID-342803", "CSAFPID-1266", "CSAFPID-219776", "CSAFPID-224791", "CSAFPID-224790", "CSAFPID-221118", "CSAFPID-764738", "CSAFPID-240600", "CSAFPID-764739", "CSAFPID-391501", "CSAFPID-440102", "CSAFPID-41516", "CSAFPID-41515", "CSAFPID-764237", "CSAFPID-45181", "CSAFPID-45186", "CSAFPID-45185", "CSAFPID-90018", "CSAFPID-94290", "CSAFPID-260394", "CSAFPID-764240", "CSAFPID-94292", "CSAFPID-218028", "CSAFPID-493443", "CSAFPID-90019", "CSAFPID-90016", "CSAFPID-93777", "CSAFPID-93772", "CSAFPID-345038", "CSAFPID-93629", "CSAFPID-45192", "CSAFPID-608630", "CSAFPID-40292", "CSAFPID-40291", "CSAFPID-345039", "CSAFPID-93628", "CSAFPID-764780", "CSAFPID-764781", "CSAFPID-93775", "CSAFPID-93774", "CSAFPID-764782", "CSAFPID-1261", "CSAFPID-204622", "CSAFPID-219909", "CSAFPID-204563", "CSAFPID-8984", "CSAFPID-220548", "CSAFPID-608629", "CSAFPID-93784", "CSAFPID-41111", "CSAFPID-1685", "CSAFPID-493445", "CSAFPID-294401", "CSAFPID-220547", "CSAFPID-764824", "CSAFPID-220459", "CSAFPID-764825", "CSAFPID-93635", "CSAFPID-503534", "CSAFPID-503493", "CSAFPID-493444", "CSAFPID-93633", "CSAFPID-260395", "CSAFPID-260393", "CSAFPID-220468", "CSAFPID-93636", "CSAFPID-93634", "CSAFPID-589926", "CSAFPID-179780", "CSAFPID-589925", "CSAFPID-179779", "CSAFPID-764826", "CSAFPID-764827", "CSAFPID-764828", "CSAFPID-764829", "CSAFPID-764830", "CSAFPID-220190", "CSAFPID-220189", "CSAFPID-764833", "CSAFPID-41183", "CSAFPID-764834", "CSAFPID-234306", "CSAFPID-764835", "CSAFPID-187447", "CSAFPID-760687", "CSAFPID-40947", "CSAFPID-2044", "CSAFPID-449747", "CSAFPID-40301", "CSAFPID-449746", "CSAFPID-40298", "CSAFPID-223527", "CSAFPID-760688", "CSAFPID-40300", "CSAFPID-93653", "CSAFPID-40949", "CSAFPID-642000", "CSAFPID-642002", "CSAFPID-642001", "CSAFPID-165576", "CSAFPID-764899", "CSAFPID-40948", "CSAFPID-426842", "CSAFPID-93630", "CSAFPID-204645", "CSAFPID-1893", "CSAFPID-40294", "CSAFPID-93631", "CSAFPID-764900", "CSAFPID-568240", "CSAFPID-355340", "CSAFPID-703515", "CSAFPID-204456", "CSAFPID-204635", "CSAFPID-41182", "CSAFPID-764901", "CSAFPID-764902", "CSAFPID-1899", "CSAFPID-40299", "CSAFPID-1900", "CSAFPID-180194", "CSAFPID-41112", "CSAFPID-41110", "CSAFPID-41113", "CSAFPID-180193", "CSAFPID-1898", "CSAFPID-611587", "CSAFPID-40297", "CSAFPID-110244", "CSAFPID-110242", "CSAFPID-9489", "CSAFPID-110249", "CSAFPID-110243", "CSAFPID-765241", "CSAFPID-209546", "CSAFPID-207586", "CSAFPID-765242", "CSAFPID-205759", "CSAFPID-765365", "CSAFPID-765366", "CSAFPID-342804", "CSAFPID-342805", "CSAFPID-1882", "CSAFPID-573035", "CSAFPID-765367", "CSAFPID-765368", "CSAFPID-764242", "CSAFPID-76994", "CSAFPID-204623", "CSAFPID-352633", "CSAFPID-352632", "CSAFPID-765369", "CSAFPID-204528", "CSAFPID-342802", "CSAFPID-40610", "CSAFPID-40611", "CSAFPID-40609", "CSAFPID-180198", "CSAFPID-180217", "CSAFPID-180196", "CSAFPID-40612", "CSAFPID-180201", "CSAFPID-180216", "CSAFPID-180202", "CSAFPID-40613", "CSAFPID-40608", "CSAFPID-180199", "CSAFPID-93546", "CSAFPID-180195", "CSAFPID-2310", "CSAFPID-93547", "CSAFPID-180200", "CSAFPID-765371", "CSAFPID-89545", "CSAFPID-180215", "CSAFPID-180197", "CSAFPID-204639", "CSAFPID-204627", "CSAFPID-342799", "CSAFPID-765372", "CSAFPID-220125", "CSAFPID-245244", "CSAFPID-204554", "CSAFPID-204614", "CSAFPID-345031", "CSAFPID-204595", "CSAFPID-204590", "CSAFPID-224787", "CSAFPID-1673065", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2022-23437", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-23437.json" } ], "title": "CVE-2022-23437" }, { "cve": "CVE-2022-36760", "cwe": { "id": "CWE-444", "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)" }, "notes": [ { "category": "other", "text": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)", "title": "CWE-444" } ], "product_status": { "known_affected": [ "CSAFPID-220057", "CSAFPID-220055", "CSAFPID-220909", "CSAFPID-45184", "CSAFPID-45182", "CSAFPID-220559", "CSAFPID-220558", "CSAFPID-220327", "CSAFPID-220325", "CSAFPID-219838", "CSAFPID-220056", "CSAFPID-223511", "CSAFPID-216017", "CSAFPID-220889", "CSAFPID-220918", "CSAFPID-90020", "CSAFPID-90015", "CSAFPID-220133", "CSAFPID-220561", "CSAFPID-90021", "CSAFPID-220881", "CSAFPID-94291", "CSAFPID-220910", "CSAFPID-220324", "CSAFPID-224796", "CSAFPID-224795", "CSAFPID-220326", "CSAFPID-764734", "CSAFPID-40293", "CSAFPID-220167", "CSAFPID-93781", "CSAFPID-220132", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-764736", "CSAFPID-764737", "CSAFPID-224793", "CSAFPID-342793", "CSAFPID-1265", "CSAFPID-704412", "CSAFPID-704411", "CSAFPID-704410", "CSAFPID-219803", "CSAFPID-375182", "CSAFPID-342803", "CSAFPID-1266", "CSAFPID-219776", "CSAFPID-224791", "CSAFPID-224790", "CSAFPID-221118", "CSAFPID-764738", "CSAFPID-240600", "CSAFPID-764739", "CSAFPID-204510", "CSAFPID-204569", "CSAFPID-219826", "CSAFPID-391501", "CSAFPID-440102", "CSAFPID-41516", "CSAFPID-41515", "CSAFPID-764237", "CSAFPID-45181", "CSAFPID-45186", "CSAFPID-45185", "CSAFPID-90018", "CSAFPID-94290", "CSAFPID-260394", "CSAFPID-764240", "CSAFPID-94292", "CSAFPID-218028", "CSAFPID-493443", "CSAFPID-90019", "CSAFPID-90016", "CSAFPID-93777", "CSAFPID-93772", "CSAFPID-345038", "CSAFPID-93629", "CSAFPID-45192", "CSAFPID-608630", "CSAFPID-40292", "CSAFPID-40291", "CSAFPID-345039", "CSAFPID-93628", "CSAFPID-764780", "CSAFPID-764781", "CSAFPID-93775", "CSAFPID-93774", "CSAFPID-764782", "CSAFPID-1261", "CSAFPID-204622", "CSAFPID-219909", "CSAFPID-204563", "CSAFPID-8984", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2022-36760", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-36760.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-220057", "CSAFPID-220055", "CSAFPID-220909", "CSAFPID-45184", "CSAFPID-45182", "CSAFPID-220559", "CSAFPID-220558", "CSAFPID-220327", "CSAFPID-220325", "CSAFPID-219838", "CSAFPID-220056", "CSAFPID-223511", "CSAFPID-216017", "CSAFPID-220889", "CSAFPID-220918", "CSAFPID-90020", "CSAFPID-90015", "CSAFPID-220133", "CSAFPID-220561", "CSAFPID-90021", "CSAFPID-220881", "CSAFPID-94291", "CSAFPID-220910", "CSAFPID-220324", "CSAFPID-224796", "CSAFPID-224795", "CSAFPID-220326", "CSAFPID-764734", "CSAFPID-40293", "CSAFPID-220167", "CSAFPID-93781", "CSAFPID-220132", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-764736", "CSAFPID-764737", "CSAFPID-224793", "CSAFPID-342793", "CSAFPID-1265", "CSAFPID-704412", "CSAFPID-704411", "CSAFPID-704410", "CSAFPID-219803", "CSAFPID-375182", "CSAFPID-342803", "CSAFPID-1266", "CSAFPID-219776", "CSAFPID-224791", "CSAFPID-224790", "CSAFPID-221118", "CSAFPID-764738", "CSAFPID-240600", "CSAFPID-764739", "CSAFPID-204510", "CSAFPID-204569", "CSAFPID-219826", "CSAFPID-391501", "CSAFPID-440102", "CSAFPID-41516", "CSAFPID-41515", "CSAFPID-764237", "CSAFPID-45181", "CSAFPID-45186", "CSAFPID-45185", "CSAFPID-90018", "CSAFPID-94290", "CSAFPID-260394", "CSAFPID-764240", "CSAFPID-94292", "CSAFPID-218028", "CSAFPID-493443", "CSAFPID-90019", "CSAFPID-90016", "CSAFPID-93777", "CSAFPID-93772", "CSAFPID-345038", "CSAFPID-93629", "CSAFPID-45192", "CSAFPID-608630", "CSAFPID-40292", "CSAFPID-40291", "CSAFPID-345039", "CSAFPID-93628", "CSAFPID-764780", "CSAFPID-764781", "CSAFPID-93775", "CSAFPID-93774", "CSAFPID-764782", "CSAFPID-1261", "CSAFPID-204622", "CSAFPID-219909", "CSAFPID-204563", "CSAFPID-8984", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] } ], "title": "CVE-2022-36760" }, { "cve": "CVE-2023-2953", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "other", "text": "Improper Restriction of Operations within the Bounds of a Memory Buffer", "title": "CWE-119" }, { "category": "other", "text": "NULL Pointer Dereference", "title": "CWE-476" } ], "product_status": { "known_affected": [ "CSAFPID-1673389", "CSAFPID-1673390", "CSAFPID-1673391", "CSAFPID-1673392", "CSAFPID-1673393", "CSAFPID-1673394", "CSAFPID-1673395", "CSAFPID-1673396", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2023-2953", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-2953.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673389", "CSAFPID-1673390", "CSAFPID-1673391", "CSAFPID-1673392", "CSAFPID-1673393", "CSAFPID-1673394", "CSAFPID-1673395", "CSAFPID-1673396", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] } ], "title": "CVE-2023-2953" }, { "cve": "CVE-2023-3635", "cwe": { "id": "CWE-195", "name": "Signed to Unsigned Conversion Error" }, "notes": [ { "category": "other", "text": "Signed to Unsigned Conversion Error", "title": "CWE-195" }, { "category": "other", "text": "Uncaught Exception", "title": "CWE-248" } ], "product_status": { "known_affected": [ "CSAFPID-94291", "CSAFPID-40293", "CSAFPID-204622", "CSAFPID-1265", "CSAFPID-1261", "CSAFPID-1266", "CSAFPID-8984", "CSAFPID-1673399", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-912085", "CSAFPID-912068", "CSAFPID-912076", "CSAFPID-912539", "CSAFPID-912540", "CSAFPID-912541", "CSAFPID-912542", "CSAFPID-912543", "CSAFPID-912101", "CSAFPID-912544", "CSAFPID-912077", "CSAFPID-912545", "CSAFPID-912546", "CSAFPID-912547", "CSAFPID-219909", "CSAFPID-220558", "CSAFPID-221118", "CSAFPID-224790", "CSAFPID-240600", "CSAFPID-342804", "CSAFPID-611387", "CSAFPID-611401", "CSAFPID-611406", "CSAFPID-611407", "CSAFPID-611408", "CSAFPID-611413", "CSAFPID-611595", "CSAFPID-204510", "CSAFPID-204563", "CSAFPID-204569", "CSAFPID-219803", "CSAFPID-219838", "CSAFPID-224793", "CSAFPID-342793", "CSAFPID-342803", "CSAFPID-614513", "CSAFPID-614514", "CSAFPID-614515", "CSAFPID-614516", "CSAFPID-614517", "CSAFPID-618156", "CSAFPID-643776", "CSAFPID-764237", "CSAFPID-764238", "CSAFPID-764239", "CSAFPID-764240", "CSAFPID-764241", "CSAFPID-764242", "CSAFPID-764243", "CSAFPID-764247", "CSAFPID-764248", "CSAFPID-764249", "CSAFPID-816346", "CSAFPID-816347", "CSAFPID-816348", "CSAFPID-816349", "CSAFPID-816350", "CSAFPID-816351", "CSAFPID-816352", "CSAFPID-816353", "CSAFPID-816354", "CSAFPID-816355", "CSAFPID-816357", "CSAFPID-816358", "CSAFPID-816359", "CSAFPID-816765", "CSAFPID-816766", "CSAFPID-816767", "CSAFPID-816768", "CSAFPID-816769", "CSAFPID-816770", "CSAFPID-816771", "CSAFPID-816772", "CSAFPID-816773", "CSAFPID-816774", "CSAFPID-816775", "CSAFPID-816776", "CSAFPID-816777", "CSAFPID-816778", "CSAFPID-816779", "CSAFPID-816780", "CSAFPID-816781", "CSAFPID-816782", "CSAFPID-816783", "CSAFPID-816784", "CSAFPID-816785", "CSAFPID-816786", "CSAFPID-816787", "CSAFPID-816788", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-816791", "CSAFPID-816792", "CSAFPID-816793", "CSAFPID-816794", "CSAFPID-816795", "CSAFPID-816796", "CSAFPID-816797", "CSAFPID-764735", "CSAFPID-764738", "CSAFPID-912073", "CSAFPID-912078", "CSAFPID-912079", "CSAFPID-912080", "CSAFPID-90016", "CSAFPID-93781", "CSAFPID-219776", "CSAFPID-219826", "CSAFPID-220132", "CSAFPID-224795", "CSAFPID-912102", "CSAFPID-912548", "CSAFPID-912549", "CSAFPID-912550", "CSAFPID-912551", "CSAFPID-912552", "CSAFPID-912553", "CSAFPID-912554", "CSAFPID-912556", "CSAFPID-912557", "CSAFPID-912558", "CSAFPID-764739", "CSAFPID-764826", "CSAFPID-765242" ] }, "references": [ { "category": "self", "summary": "CVE-2023-3635", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-3635.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-94291", "CSAFPID-40293", "CSAFPID-204622", "CSAFPID-1265", "CSAFPID-1261", "CSAFPID-1266", "CSAFPID-8984", "CSAFPID-1673399", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-912085", "CSAFPID-912068", "CSAFPID-912076", "CSAFPID-912539", "CSAFPID-912540", "CSAFPID-912541", "CSAFPID-912542", "CSAFPID-912543", "CSAFPID-912101", "CSAFPID-912544", "CSAFPID-912077", "CSAFPID-912545", "CSAFPID-912546", "CSAFPID-912547", "CSAFPID-219909", "CSAFPID-220558", "CSAFPID-221118", "CSAFPID-224790", "CSAFPID-240600", "CSAFPID-342804", "CSAFPID-611387", "CSAFPID-611401", "CSAFPID-611406", "CSAFPID-611407", "CSAFPID-611408", "CSAFPID-611413", "CSAFPID-611595", "CSAFPID-204510", "CSAFPID-204563", "CSAFPID-204569", "CSAFPID-219803", "CSAFPID-219838", "CSAFPID-224793", "CSAFPID-342793", "CSAFPID-342803", "CSAFPID-614513", "CSAFPID-614514", "CSAFPID-614515", "CSAFPID-614516", "CSAFPID-614517", "CSAFPID-618156", "CSAFPID-643776", "CSAFPID-764237", "CSAFPID-764238", "CSAFPID-764239", "CSAFPID-764240", "CSAFPID-764241", "CSAFPID-764242", "CSAFPID-764243", "CSAFPID-764247", "CSAFPID-764248", "CSAFPID-764249", "CSAFPID-816346", "CSAFPID-816347", "CSAFPID-816348", "CSAFPID-816349", "CSAFPID-816350", "CSAFPID-816351", "CSAFPID-816352", "CSAFPID-816353", "CSAFPID-816354", "CSAFPID-816355", "CSAFPID-816357", "CSAFPID-816358", "CSAFPID-816359", "CSAFPID-816765", "CSAFPID-816766", "CSAFPID-816767", "CSAFPID-816768", "CSAFPID-816769", "CSAFPID-816770", "CSAFPID-816771", "CSAFPID-816772", "CSAFPID-816773", "CSAFPID-816774", "CSAFPID-816775", "CSAFPID-816776", "CSAFPID-816777", "CSAFPID-816778", "CSAFPID-816779", "CSAFPID-816780", "CSAFPID-816781", "CSAFPID-816782", "CSAFPID-816783", "CSAFPID-816784", "CSAFPID-816785", "CSAFPID-816786", "CSAFPID-816787", "CSAFPID-816788", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-816791", "CSAFPID-816792", "CSAFPID-816793", "CSAFPID-816794", "CSAFPID-816795", "CSAFPID-816796", "CSAFPID-816797", "CSAFPID-764735", "CSAFPID-764738", "CSAFPID-912073", "CSAFPID-912078", "CSAFPID-912079", "CSAFPID-912080", "CSAFPID-90016", "CSAFPID-93781", "CSAFPID-219776", "CSAFPID-219826", "CSAFPID-220132", "CSAFPID-224795", "CSAFPID-912102", "CSAFPID-912548", "CSAFPID-912549", "CSAFPID-912550", "CSAFPID-912551", "CSAFPID-912552", "CSAFPID-912553", "CSAFPID-912554", "CSAFPID-912556", "CSAFPID-912557", "CSAFPID-912558", "CSAFPID-764739", "CSAFPID-764826", "CSAFPID-765242" ] } ], "title": "CVE-2023-3635" }, { "cve": "CVE-2023-4043", "cwe": { "id": "CWE-834", "name": "Excessive Iteration" }, "notes": [ { "category": "other", "text": "Excessive Iteration", "title": "CWE-834" }, { "category": "other", "text": "Improper Input Validation", "title": "CWE-20" } ], "product_status": { "known_affected": [ "CSAFPID-816765", "CSAFPID-816766", "CSAFPID-816767", "CSAFPID-816768", "CSAFPID-816769", "CSAFPID-816770", "CSAFPID-816771", "CSAFPID-816772", "CSAFPID-219838", "CSAFPID-611387", "CSAFPID-816773", "CSAFPID-816774", "CSAFPID-816775", "CSAFPID-816346", "CSAFPID-816776", "CSAFPID-816348", "CSAFPID-816777", "CSAFPID-816347", "CSAFPID-94291", "CSAFPID-816778", "CSAFPID-614517", "CSAFPID-816779", "CSAFPID-816349", "CSAFPID-40293", "CSAFPID-611413", "CSAFPID-764242", "CSAFPID-816780", "CSAFPID-816781", "CSAFPID-816782", "CSAFPID-816783", "CSAFPID-816784", "CSAFPID-816785", "CSAFPID-816353", "CSAFPID-816786", "CSAFPID-816787", "CSAFPID-816788", "CSAFPID-816352", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-342804", "CSAFPID-816791", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-224793", "CSAFPID-816794", "CSAFPID-342793", "CSAFPID-1265", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-204622", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-912068", "CSAFPID-912076", "CSAFPID-912539", "CSAFPID-912540", "CSAFPID-912541", "CSAFPID-912542", "CSAFPID-912543", "CSAFPID-912101", "CSAFPID-912544", "CSAFPID-912077", "CSAFPID-912545", "CSAFPID-764240", "CSAFPID-912546", "CSAFPID-912547", "CSAFPID-224795", "CSAFPID-912548", "CSAFPID-912102", "CSAFPID-912549", "CSAFPID-764826", "CSAFPID-90016", "CSAFPID-912078", "CSAFPID-912550", "CSAFPID-912551", "CSAFPID-912552", "CSAFPID-912553", "CSAFPID-93781", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-912080", "CSAFPID-912554", "CSAFPID-912556", "CSAFPID-912557", "CSAFPID-219776", "CSAFPID-765242", "CSAFPID-1266", "CSAFPID-8984", "CSAFPID-204510", "CSAFPID-204563", "CSAFPID-204569", "CSAFPID-219803", "CSAFPID-219909", "CSAFPID-221118", "CSAFPID-224790", "CSAFPID-240600", "CSAFPID-342803", "CSAFPID-611595", "CSAFPID-764738", "CSAFPID-816351", "CSAFPID-816354", "CSAFPID-816355", "CSAFPID-816357", "CSAFPID-816358", "CSAFPID-816359", "CSAFPID-816795", "CSAFPID-816796", "CSAFPID-816797", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-1503582", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-1503591", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-219826", "CSAFPID-764739", "CSAFPID-912073", "CSAFPID-912558" ] }, "references": [ { "category": "self", "summary": "CVE-2023-4043", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-4043.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-816765", "CSAFPID-816766", "CSAFPID-816767", "CSAFPID-816768", "CSAFPID-816769", "CSAFPID-816770", "CSAFPID-816771", "CSAFPID-816772", "CSAFPID-219838", "CSAFPID-611387", "CSAFPID-816773", "CSAFPID-816774", "CSAFPID-816775", "CSAFPID-816346", "CSAFPID-816776", "CSAFPID-816348", "CSAFPID-816777", "CSAFPID-816347", "CSAFPID-94291", "CSAFPID-816778", "CSAFPID-614517", "CSAFPID-816779", "CSAFPID-816349", "CSAFPID-40293", "CSAFPID-611413", "CSAFPID-764242", "CSAFPID-816780", "CSAFPID-816781", "CSAFPID-816782", "CSAFPID-816783", "CSAFPID-816784", "CSAFPID-816785", "CSAFPID-816353", "CSAFPID-816786", "CSAFPID-816787", "CSAFPID-816788", "CSAFPID-816352", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-342804", "CSAFPID-816791", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-224793", "CSAFPID-816794", "CSAFPID-342793", "CSAFPID-1265", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-204622", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-912068", "CSAFPID-912076", "CSAFPID-912539", "CSAFPID-912540", "CSAFPID-912541", "CSAFPID-912542", "CSAFPID-912543", "CSAFPID-912101", "CSAFPID-912544", "CSAFPID-912077", "CSAFPID-912545", "CSAFPID-764240", "CSAFPID-912546", "CSAFPID-912547", "CSAFPID-224795", "CSAFPID-912548", "CSAFPID-912102", "CSAFPID-912549", "CSAFPID-764826", "CSAFPID-90016", "CSAFPID-912078", "CSAFPID-912550", "CSAFPID-912551", "CSAFPID-912552", "CSAFPID-912553", "CSAFPID-93781", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-912080", "CSAFPID-912554", "CSAFPID-912556", "CSAFPID-912557", "CSAFPID-219776", "CSAFPID-765242", "CSAFPID-1266", "CSAFPID-8984", "CSAFPID-204510", "CSAFPID-204563", "CSAFPID-204569", "CSAFPID-219803", "CSAFPID-219909", "CSAFPID-221118", "CSAFPID-224790", "CSAFPID-240600", "CSAFPID-342803", "CSAFPID-611595", "CSAFPID-764738", "CSAFPID-816351", "CSAFPID-816354", "CSAFPID-816355", "CSAFPID-816357", "CSAFPID-816358", "CSAFPID-816359", "CSAFPID-816795", "CSAFPID-816796", "CSAFPID-816797", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-1503582", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-1503591", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-219826", "CSAFPID-764739", "CSAFPID-912073", "CSAFPID-912558" ] } ], "title": "CVE-2023-4043" }, { "cve": "CVE-2023-5685", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" } ], "product_status": { "known_affected": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1650752", "CSAFPID-1650751", "CSAFPID-1673389", "CSAFPID-1673390", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-912101", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-764240", "CSAFPID-912547", "CSAFPID-1503582", "CSAFPID-912549", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-764242", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-342804", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-912556", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600", "CSAFPID-204510", "CSAFPID-204569" ] }, "references": [ { "category": "self", "summary": "CVE-2023-5685", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-5685.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1650752", "CSAFPID-1650751", "CSAFPID-1673389", "CSAFPID-1673390", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-912101", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-764240", "CSAFPID-912547", "CSAFPID-1503582", "CSAFPID-912549", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-764242", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-342804", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-912556", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600", "CSAFPID-204510", "CSAFPID-204569" ] } ], "title": "CVE-2023-5685" }, { "cve": "CVE-2023-6597", "cwe": { "id": "CWE-61", "name": "UNIX Symbolic Link (Symlink) Following" }, "notes": [ { "category": "other", "text": "UNIX Symbolic Link (Symlink) Following", "title": "CWE-61" } ], "product_status": { "known_affected": [ "CSAFPID-1673395", "CSAFPID-1673420", "CSAFPID-1673421", "CSAFPID-1673396", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-912101", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-764240", "CSAFPID-912547", "CSAFPID-1503582", "CSAFPID-912549", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-764242", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-342804", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-912556", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600", "CSAFPID-204510", "CSAFPID-204569" ] }, "references": [ { "category": "self", "summary": "CVE-2023-6597", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-6597.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N", "version": "3.1" }, "products": [ "CSAFPID-1673395", "CSAFPID-1673420", "CSAFPID-1673421", "CSAFPID-1673396", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-912101", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-764240", "CSAFPID-912547", "CSAFPID-1503582", "CSAFPID-912549", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-764242", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-342804", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-912556", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600", "CSAFPID-204510", "CSAFPID-204569" ] } ], "title": "CVE-2023-6597" }, { "cve": "CVE-2023-6816", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "other", "text": "Improper Restriction of Operations within the Bounds of a Memory Buffer", "title": "CWE-119" }, { "category": "other", "text": "Out-of-bounds Write", "title": "CWE-787" } ], "product_status": { "known_affected": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2023-6816", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-6816.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] } ], "title": "CVE-2023-6816" }, { "cve": "CVE-2023-38408", "cwe": { "id": "CWE-94", "name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)" }, "notes": [ { "category": "other", "text": "Improper Control of Generation of Code (\u0027Code Injection\u0027)", "title": "CWE-94" }, { "category": "other", "text": "Improper Input Validation", "title": "CWE-20" } ], "product_status": { "known_affected": [ "CSAFPID-45182", "CSAFPID-40293", "CSAFPID-611406", "CSAFPID-764237", "CSAFPID-220558", "CSAFPID-764238", "CSAFPID-764239", "CSAFPID-614513", "CSAFPID-643776", "CSAFPID-611387", "CSAFPID-618156", "CSAFPID-614516", "CSAFPID-614515", "CSAFPID-614514", "CSAFPID-764240", "CSAFPID-94291", "CSAFPID-611401", "CSAFPID-614517", "CSAFPID-764241", "CSAFPID-611413", "CSAFPID-764242", "CSAFPID-764243", "CSAFPID-342804", "CSAFPID-611408", "CSAFPID-611407", "CSAFPID-764247", "CSAFPID-764248", "CSAFPID-204622", "CSAFPID-219909", "CSAFPID-611595", "CSAFPID-764249", "CSAFPID-224790", "CSAFPID-221118", "CSAFPID-240600", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2023-38408", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-38408.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-45182", "CSAFPID-40293", "CSAFPID-611406", "CSAFPID-764237", "CSAFPID-220558", "CSAFPID-764238", "CSAFPID-764239", "CSAFPID-614513", "CSAFPID-643776", "CSAFPID-611387", "CSAFPID-618156", "CSAFPID-614516", "CSAFPID-614515", "CSAFPID-614514", "CSAFPID-764240", "CSAFPID-94291", "CSAFPID-611401", "CSAFPID-614517", "CSAFPID-764241", "CSAFPID-611413", "CSAFPID-764242", "CSAFPID-764243", "CSAFPID-342804", "CSAFPID-611408", "CSAFPID-611407", "CSAFPID-764247", "CSAFPID-764248", "CSAFPID-204622", "CSAFPID-219909", "CSAFPID-611595", "CSAFPID-764249", "CSAFPID-224790", "CSAFPID-221118", "CSAFPID-240600", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] } ], "title": "CVE-2023-38408" }, { "cve": "CVE-2023-43642", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "other", "text": "Allocation of Resources Without Limits or Throttling", "title": "CWE-770" } ], "product_status": { "known_affected": [ "CSAFPID-40293", "CSAFPID-1265", "CSAFPID-1261", "CSAFPID-1266", "CSAFPID-8984", "CSAFPID-1673395", "CSAFPID-94291", "CSAFPID-204510", "CSAFPID-204563", "CSAFPID-204569", "CSAFPID-204622", "CSAFPID-219803", "CSAFPID-219838", "CSAFPID-219909", "CSAFPID-221118", "CSAFPID-224790", "CSAFPID-224793", "CSAFPID-240600", "CSAFPID-342793", "CSAFPID-342803", "CSAFPID-342804", "CSAFPID-611387", "CSAFPID-611413", "CSAFPID-611595", "CSAFPID-614517", "CSAFPID-764242", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-764738", "CSAFPID-816346", "CSAFPID-816347", "CSAFPID-816348", "CSAFPID-816349", "CSAFPID-816350", "CSAFPID-816351", "CSAFPID-816352", "CSAFPID-816353", "CSAFPID-816354", "CSAFPID-816355", "CSAFPID-816357", "CSAFPID-816358", "CSAFPID-816359", "CSAFPID-816765", "CSAFPID-816766", "CSAFPID-816767", "CSAFPID-816768", "CSAFPID-816769", "CSAFPID-816770", "CSAFPID-816771", "CSAFPID-816772", "CSAFPID-816773", "CSAFPID-816774", "CSAFPID-816775", "CSAFPID-816776", "CSAFPID-816777", "CSAFPID-816778", "CSAFPID-816779", "CSAFPID-816780", "CSAFPID-816781", "CSAFPID-816782", "CSAFPID-816783", "CSAFPID-816784", "CSAFPID-816785", "CSAFPID-816786", "CSAFPID-816787", "CSAFPID-816788", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-816791", "CSAFPID-816792", "CSAFPID-816793", "CSAFPID-816794", "CSAFPID-816795", "CSAFPID-816796", "CSAFPID-816797" ] }, "references": [ { "category": "self", "summary": "CVE-2023-43642", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-43642.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-40293", "CSAFPID-1265", "CSAFPID-1261", "CSAFPID-1266", "CSAFPID-8984", "CSAFPID-1673395", "CSAFPID-94291", "CSAFPID-204510", "CSAFPID-204563", "CSAFPID-204569", "CSAFPID-204622", "CSAFPID-219803", "CSAFPID-219838", "CSAFPID-219909", "CSAFPID-221118", "CSAFPID-224790", "CSAFPID-224793", "CSAFPID-240600", "CSAFPID-342793", "CSAFPID-342803", "CSAFPID-342804", "CSAFPID-611387", "CSAFPID-611413", "CSAFPID-611595", "CSAFPID-614517", "CSAFPID-764242", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-764738", "CSAFPID-816346", "CSAFPID-816347", "CSAFPID-816348", "CSAFPID-816349", "CSAFPID-816350", "CSAFPID-816351", "CSAFPID-816352", "CSAFPID-816353", "CSAFPID-816354", "CSAFPID-816355", "CSAFPID-816357", "CSAFPID-816358", "CSAFPID-816359", "CSAFPID-816765", "CSAFPID-816766", "CSAFPID-816767", "CSAFPID-816768", "CSAFPID-816769", "CSAFPID-816770", "CSAFPID-816771", "CSAFPID-816772", "CSAFPID-816773", "CSAFPID-816774", "CSAFPID-816775", "CSAFPID-816776", "CSAFPID-816777", "CSAFPID-816778", "CSAFPID-816779", "CSAFPID-816780", "CSAFPID-816781", "CSAFPID-816782", "CSAFPID-816783", "CSAFPID-816784", "CSAFPID-816785", "CSAFPID-816786", "CSAFPID-816787", "CSAFPID-816788", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-816791", "CSAFPID-816792", "CSAFPID-816793", "CSAFPID-816794", "CSAFPID-816795", "CSAFPID-816796", "CSAFPID-816797" ] } ], "title": "CVE-2023-43642" }, { "cve": "CVE-2023-46136", "cwe": { "id": "CWE-407", "name": "Inefficient Algorithmic Complexity" }, "notes": [ { "category": "other", "text": "Inefficient Algorithmic Complexity", "title": "CWE-407" }, { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" } ], "product_status": { "known_affected": [ "CSAFPID-1673411", "CSAFPID-912549", "CSAFPID-1673412", "CSAFPID-1673413", "CSAFPID-1673414", "CSAFPID-1673396", "CSAFPID-1503590", "CSAFPID-1673393", "CSAFPID-1673395", "CSAFPID-220132", "CSAFPID-1503585", "CSAFPID-1673392", "CSAFPID-1503589", "CSAFPID-1673415", "CSAFPID-1673416", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2023-46136", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-46136.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.0, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673411", "CSAFPID-912549", "CSAFPID-1673412", "CSAFPID-1673413", "CSAFPID-1673414", "CSAFPID-1673396", "CSAFPID-1503590", "CSAFPID-1673393", "CSAFPID-1673395", "CSAFPID-220132", "CSAFPID-1503585", "CSAFPID-1673392", "CSAFPID-1503589", "CSAFPID-1673415", "CSAFPID-1673416", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] } ], "title": "CVE-2023-46136" }, { "cve": "CVE-2023-48795", "cwe": { "id": "CWE-222", "name": "Truncation of Security-relevant Information" }, "notes": [ { "category": "other", "text": "Truncation of Security-relevant Information", "title": "CWE-222" } ], "product_status": { "known_affected": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1650752", "CSAFPID-816765", "CSAFPID-816766", "CSAFPID-816767", "CSAFPID-816768", "CSAFPID-816769", "CSAFPID-816770", "CSAFPID-816771", "CSAFPID-816772", "CSAFPID-219838", "CSAFPID-611387", "CSAFPID-816773", "CSAFPID-816774", "CSAFPID-816775", "CSAFPID-816346", "CSAFPID-816776", "CSAFPID-816348", "CSAFPID-816777", "CSAFPID-816347", "CSAFPID-94291", "CSAFPID-816778", "CSAFPID-614517", "CSAFPID-816779", "CSAFPID-816349", "CSAFPID-40293", "CSAFPID-764242", "CSAFPID-816780", "CSAFPID-816781", "CSAFPID-816782", "CSAFPID-816783", "CSAFPID-816784", "CSAFPID-816785", "CSAFPID-816353", "CSAFPID-816786", "CSAFPID-816352", "CSAFPID-342804", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-224793", "CSAFPID-342793", "CSAFPID-1265", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-204622", "CSAFPID-219909", "CSAFPID-219803", "CSAFPID-816351", "CSAFPID-611595", "CSAFPID-342803", "CSAFPID-1266", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-224790", "CSAFPID-221118", "CSAFPID-1673417", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-1670429", "CSAFPID-1670430", "CSAFPID-1670431", "CSAFPID-1670432", "CSAFPID-1670433", "CSAFPID-1670434", "CSAFPID-1670435", "CSAFPID-1670436", "CSAFPID-1670437", "CSAFPID-1670438", "CSAFPID-1670439", "CSAFPID-1670440", "CSAFPID-1670441", "CSAFPID-1670442", "CSAFPID-912076", "CSAFPID-912077", "CSAFPID-912078", "CSAFPID-90016", "CSAFPID-764826", "CSAFPID-345038", "CSAFPID-912079", "CSAFPID-220132", "CSAFPID-93781", "CSAFPID-345039", "CSAFPID-912080", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-912068", "CSAFPID-912539", "CSAFPID-912540", "CSAFPID-912541", "CSAFPID-912542", "CSAFPID-912543", "CSAFPID-912101", "CSAFPID-912544", "CSAFPID-912545", "CSAFPID-764240", "CSAFPID-912546", "CSAFPID-912547", "CSAFPID-224795", "CSAFPID-912548", "CSAFPID-611413", "CSAFPID-240600", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-816357", "CSAFPID-816358", "CSAFPID-816359", "CSAFPID-816787", "CSAFPID-816788", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-816791", "CSAFPID-816792", "CSAFPID-816793", "CSAFPID-816794", "CSAFPID-816795", "CSAFPID-816796", "CSAFPID-816797", "CSAFPID-8984", "CSAFPID-204510", "CSAFPID-204569", "CSAFPID-219776", "CSAFPID-219826", "CSAFPID-764739", "CSAFPID-765242", "CSAFPID-912073", "CSAFPID-912102", "CSAFPID-912549", "CSAFPID-912550", "CSAFPID-912551", "CSAFPID-912552", "CSAFPID-912553", "CSAFPID-912554", "CSAFPID-912556", "CSAFPID-912557", "CSAFPID-912558", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-1503582", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-1503591", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-1503601", "CSAFPID-1503602" ] }, "references": [ { "category": "self", "summary": "CVE-2023-48795", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-48795.json" } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1650752", "CSAFPID-816765", "CSAFPID-816766", "CSAFPID-816767", "CSAFPID-816768", "CSAFPID-816769", "CSAFPID-816770", "CSAFPID-816771", "CSAFPID-816772", "CSAFPID-219838", "CSAFPID-611387", "CSAFPID-816773", "CSAFPID-816774", "CSAFPID-816775", "CSAFPID-816346", "CSAFPID-816776", "CSAFPID-816348", "CSAFPID-816777", "CSAFPID-816347", "CSAFPID-94291", "CSAFPID-816778", "CSAFPID-614517", "CSAFPID-816779", "CSAFPID-816349", "CSAFPID-40293", "CSAFPID-764242", "CSAFPID-816780", "CSAFPID-816781", "CSAFPID-816782", "CSAFPID-816783", "CSAFPID-816784", "CSAFPID-816785", "CSAFPID-816353", "CSAFPID-816786", "CSAFPID-816352", "CSAFPID-342804", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-224793", "CSAFPID-342793", "CSAFPID-1265", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-204622", "CSAFPID-219909", "CSAFPID-219803", "CSAFPID-816351", "CSAFPID-611595", "CSAFPID-342803", "CSAFPID-1266", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-224790", "CSAFPID-221118", "CSAFPID-1673417", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-1670429", "CSAFPID-1670430", "CSAFPID-1670431", "CSAFPID-1670432", "CSAFPID-1670433", "CSAFPID-1670434", "CSAFPID-1670435", "CSAFPID-1670436", "CSAFPID-1670437", "CSAFPID-1670438", "CSAFPID-1670439", "CSAFPID-1670440", "CSAFPID-1670441", "CSAFPID-1670442", "CSAFPID-912076", "CSAFPID-912077", "CSAFPID-912078", "CSAFPID-90016", "CSAFPID-764826", "CSAFPID-345038", "CSAFPID-912079", "CSAFPID-220132", "CSAFPID-93781", "CSAFPID-345039", "CSAFPID-912080", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-912068", "CSAFPID-912539", "CSAFPID-912540", "CSAFPID-912541", "CSAFPID-912542", "CSAFPID-912543", "CSAFPID-912101", "CSAFPID-912544", "CSAFPID-912545", "CSAFPID-764240", "CSAFPID-912546", "CSAFPID-912547", "CSAFPID-224795", "CSAFPID-912548", "CSAFPID-611413", "CSAFPID-240600", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-816357", "CSAFPID-816358", "CSAFPID-816359", "CSAFPID-816787", "CSAFPID-816788", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-816791", "CSAFPID-816792", "CSAFPID-816793", "CSAFPID-816794", "CSAFPID-816795", "CSAFPID-816796", "CSAFPID-816797", "CSAFPID-8984", "CSAFPID-204510", "CSAFPID-204569", "CSAFPID-219776", "CSAFPID-219826", "CSAFPID-764739", "CSAFPID-765242", "CSAFPID-912073", "CSAFPID-912102", "CSAFPID-912549", "CSAFPID-912550", "CSAFPID-912551", "CSAFPID-912552", "CSAFPID-912553", "CSAFPID-912554", "CSAFPID-912556", "CSAFPID-912557", "CSAFPID-912558", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-1503582", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-1503591", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-1503601", "CSAFPID-1503602" ] } ], "title": "CVE-2023-48795" }, { "cve": "CVE-2023-51775", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" } ], "product_status": { "known_affected": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1650751", "CSAFPID-1673395", "CSAFPID-1673396", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-1670429", "CSAFPID-1670430", "CSAFPID-1670431", "CSAFPID-1670432", "CSAFPID-1670433", "CSAFPID-1670434", "CSAFPID-1670435", "CSAFPID-1670436", "CSAFPID-1670437", "CSAFPID-1670438", "CSAFPID-1670439", "CSAFPID-1670440", "CSAFPID-1670441", "CSAFPID-1670442", "CSAFPID-90016", "CSAFPID-93781", "CSAFPID-204510", "CSAFPID-204569", "CSAFPID-219776", "CSAFPID-219826", "CSAFPID-220132", "CSAFPID-224795", "CSAFPID-342804", "CSAFPID-611387", "CSAFPID-611413", "CSAFPID-614517", "CSAFPID-764237", "CSAFPID-764240", "CSAFPID-764242", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-764739", "CSAFPID-764826", "CSAFPID-765242", "CSAFPID-816348", "CSAFPID-816773", "CSAFPID-816781", "CSAFPID-816782", "CSAFPID-912068", "CSAFPID-912073", "CSAFPID-912076", "CSAFPID-912077", "CSAFPID-912078", "CSAFPID-912079", "CSAFPID-912080", "CSAFPID-912085", "CSAFPID-912101", "CSAFPID-912102", "CSAFPID-912539", "CSAFPID-912540", "CSAFPID-912541", "CSAFPID-912542", "CSAFPID-912543", "CSAFPID-912544", "CSAFPID-912545", "CSAFPID-912546", "CSAFPID-912547", "CSAFPID-912548", "CSAFPID-912549", "CSAFPID-912550", "CSAFPID-912551", "CSAFPID-912552", "CSAFPID-912553", "CSAFPID-912554", "CSAFPID-912556", "CSAFPID-912557", "CSAFPID-912558", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-1503582", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600" ] }, "references": [ { "category": "self", "summary": "CVE-2023-51775", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-51775.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1650751", "CSAFPID-1673395", "CSAFPID-1673396", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-1670429", "CSAFPID-1670430", "CSAFPID-1670431", "CSAFPID-1670432", "CSAFPID-1670433", "CSAFPID-1670434", "CSAFPID-1670435", "CSAFPID-1670436", "CSAFPID-1670437", "CSAFPID-1670438", "CSAFPID-1670439", "CSAFPID-1670440", "CSAFPID-1670441", "CSAFPID-1670442", "CSAFPID-90016", "CSAFPID-93781", "CSAFPID-204510", "CSAFPID-204569", "CSAFPID-219776", "CSAFPID-219826", "CSAFPID-220132", "CSAFPID-224795", "CSAFPID-342804", "CSAFPID-611387", "CSAFPID-611413", "CSAFPID-614517", "CSAFPID-764237", "CSAFPID-764240", "CSAFPID-764242", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-764739", "CSAFPID-764826", "CSAFPID-765242", "CSAFPID-816348", "CSAFPID-816773", "CSAFPID-816781", "CSAFPID-816782", "CSAFPID-912068", "CSAFPID-912073", "CSAFPID-912076", "CSAFPID-912077", "CSAFPID-912078", "CSAFPID-912079", "CSAFPID-912080", "CSAFPID-912085", "CSAFPID-912101", "CSAFPID-912102", "CSAFPID-912539", "CSAFPID-912540", "CSAFPID-912541", "CSAFPID-912542", "CSAFPID-912543", "CSAFPID-912544", "CSAFPID-912545", "CSAFPID-912546", "CSAFPID-912547", "CSAFPID-912548", "CSAFPID-912549", "CSAFPID-912550", "CSAFPID-912551", "CSAFPID-912552", "CSAFPID-912553", "CSAFPID-912554", "CSAFPID-912556", "CSAFPID-912557", "CSAFPID-912558", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-1503582", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600" ] } ], "title": "CVE-2023-51775" }, { "cve": "CVE-2023-52428", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" } ], "product_status": { "known_affected": [ "CSAFPID-1673395", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-912068", "CSAFPID-912076", "CSAFPID-611387", "CSAFPID-912539", "CSAFPID-816773", "CSAFPID-912540", "CSAFPID-912541", "CSAFPID-912542", "CSAFPID-912543", "CSAFPID-912101", "CSAFPID-912544", "CSAFPID-912077", "CSAFPID-816348", "CSAFPID-90016", "CSAFPID-93781", "CSAFPID-204510", "CSAFPID-204569", "CSAFPID-219776", "CSAFPID-219826", "CSAFPID-220132", "CSAFPID-224795", "CSAFPID-342804", "CSAFPID-611413", "CSAFPID-614517", "CSAFPID-764240", "CSAFPID-764242", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-764739", "CSAFPID-764826", "CSAFPID-765242", "CSAFPID-816781", "CSAFPID-816782", "CSAFPID-912073", "CSAFPID-912078", "CSAFPID-912079", "CSAFPID-912080", "CSAFPID-912102", "CSAFPID-912545", "CSAFPID-912546", "CSAFPID-912547", "CSAFPID-912548", "CSAFPID-912549", "CSAFPID-912550", "CSAFPID-912551", "CSAFPID-912552", "CSAFPID-912553", "CSAFPID-912554", "CSAFPID-912556", "CSAFPID-912557", "CSAFPID-912558", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-1503582", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600" ] }, "references": [ { "category": "self", "summary": "CVE-2023-52428", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-52428.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673395", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-912068", "CSAFPID-912076", "CSAFPID-611387", "CSAFPID-912539", "CSAFPID-816773", "CSAFPID-912540", "CSAFPID-912541", "CSAFPID-912542", "CSAFPID-912543", "CSAFPID-912101", "CSAFPID-912544", "CSAFPID-912077", "CSAFPID-816348", "CSAFPID-90016", "CSAFPID-93781", "CSAFPID-204510", "CSAFPID-204569", "CSAFPID-219776", "CSAFPID-219826", "CSAFPID-220132", "CSAFPID-224795", "CSAFPID-342804", "CSAFPID-611413", "CSAFPID-614517", "CSAFPID-764240", "CSAFPID-764242", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-764739", "CSAFPID-764826", "CSAFPID-765242", "CSAFPID-816781", "CSAFPID-816782", "CSAFPID-912073", "CSAFPID-912078", "CSAFPID-912079", "CSAFPID-912080", "CSAFPID-912102", "CSAFPID-912545", "CSAFPID-912546", "CSAFPID-912547", "CSAFPID-912548", "CSAFPID-912549", "CSAFPID-912550", "CSAFPID-912551", "CSAFPID-912552", "CSAFPID-912553", "CSAFPID-912554", "CSAFPID-912556", "CSAFPID-912557", "CSAFPID-912558", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-1503582", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600" ] } ], "title": "CVE-2023-52428" }, { "cve": "CVE-2024-0450", "cwe": { "id": "CWE-450", "name": "Multiple Interpretations of UI Input" }, "notes": [ { "category": "other", "text": "Multiple Interpretations of UI Input", "title": "CWE-450" }, { "category": "other", "text": "Asymmetric Resource Consumption (Amplification)", "title": "CWE-405" } ], "product_status": { "known_affected": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1673420", "CSAFPID-1673421", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-912101", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-764240", "CSAFPID-912547", "CSAFPID-1503582", "CSAFPID-912549", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-764242", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-342804", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-912556", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600", "CSAFPID-204510", "CSAFPID-204569" ] }, "references": [ { "category": "self", "summary": "CVE-2024-0450", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-0450.json" } ], "scores": [ { "cvss_v3": { "baseScore": 6.2, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1673420", "CSAFPID-1673421", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-912101", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-764240", "CSAFPID-912547", "CSAFPID-1503582", "CSAFPID-912549", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-764242", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-342804", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-912556", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600", "CSAFPID-204510", "CSAFPID-204569" ] } ], "title": "CVE-2024-0450" }, { "cve": "CVE-2024-2398", "cwe": { "id": "CWE-772", "name": "Missing Release of Resource after Effective Lifetime" }, "notes": [ { "category": "other", "text": "Missing Release of Resource after Effective Lifetime", "title": "CWE-772" }, { "category": "other", "text": "Missing Release of Memory after Effective Lifetime", "title": "CWE-401" } ], "product_status": { "known_affected": [ "CSAFPID-1673389", "CSAFPID-1673390", "CSAFPID-1673399", "CSAFPID-1673391", "CSAFPID-1673394", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2024-2398", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-2398.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.6, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L", "version": "3.1" }, "products": [ "CSAFPID-1673389", "CSAFPID-1673390", "CSAFPID-1673399", "CSAFPID-1673391", "CSAFPID-1673394", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] } ], "title": "CVE-2024-2398" }, { "cve": "CVE-2024-4577", "cwe": { "id": "CWE-88", "name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)" }, "notes": [ { "category": "other", "text": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)", "title": "CWE-88" }, { "category": "other", "text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)", "title": "CWE-78" } ], "product_status": { "known_affected": [ "CSAFPID-1650731", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2024-4577", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-4577.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1650731", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] } ], "title": "CVE-2024-4577" }, { "cve": "CVE-2024-4603", "cwe": { "id": "CWE-606", "name": "Unchecked Input for Loop Condition" }, "notes": [ { "category": "other", "text": "Unchecked Input for Loop Condition", "title": "CWE-606" } ], "product_status": { "known_affected": [ "CSAFPID-1673391", "CSAFPID-1673394", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-912101", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-764240", "CSAFPID-912547", "CSAFPID-1503582", "CSAFPID-912549", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-764242", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-342804", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-912556", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600", "CSAFPID-204510", "CSAFPID-204569" ] }, "references": [ { "category": "self", "summary": "CVE-2024-4603", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-4603.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673391", "CSAFPID-1673394", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-912101", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-764240", "CSAFPID-912547", "CSAFPID-1503582", "CSAFPID-912549", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-764242", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-342804", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-912556", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600", "CSAFPID-204510", "CSAFPID-204569" ] } ], "title": "CVE-2024-4603" }, { "cve": "CVE-2024-5585", "cwe": { "id": "CWE-116", "name": "Improper Encoding or Escaping of Output" }, "notes": [ { "category": "other", "text": "Improper Encoding or Escaping of Output", "title": "CWE-116" }, { "category": "other", "text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)", "title": "CWE-78" }, { "category": "other", "text": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)", "title": "CWE-88" } ], "product_status": { "known_affected": [ "CSAFPID-1650731", "CSAFPID-1674617", "CSAFPID-1674618", "CSAFPID-1674619", "CSAFPID-1674620", "CSAFPID-1674621", "CSAFPID-1674622", "CSAFPID-1674623", "CSAFPID-1674624", "CSAFPID-1674625", "CSAFPID-1674626", "CSAFPID-1674627", "CSAFPID-1674628" ] }, "references": [ { "category": "self", "summary": "CVE-2024-5585", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-5585.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1650731", "CSAFPID-1674617", "CSAFPID-1674618", "CSAFPID-1674619", "CSAFPID-1674620", "CSAFPID-1674621", "CSAFPID-1674622", "CSAFPID-1674623", "CSAFPID-1674624", "CSAFPID-1674625", "CSAFPID-1674626", "CSAFPID-1674627", "CSAFPID-1674628" ] } ], "title": "CVE-2024-5585" }, { "cve": "CVE-2024-5971", "cwe": { "id": "CWE-674", "name": "Uncontrolled Recursion" }, "notes": [ { "category": "other", "text": "Uncontrolled Recursion", "title": "CWE-674" } ], "product_status": { "known_affected": [ "CSAFPID-1673395", "CSAFPID-1673389", "CSAFPID-1673390", "CSAFPID-1673399", "CSAFPID-1673526", "CSAFPID-1673413", "CSAFPID-1673396", "CSAFPID-1673415", "CSAFPID-1673501", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2024-5971", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-5971.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673395", "CSAFPID-1673389", "CSAFPID-1673390", "CSAFPID-1673399", "CSAFPID-1673526", "CSAFPID-1673413", "CSAFPID-1673396", "CSAFPID-1673415", "CSAFPID-1673501", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] } ], "title": "CVE-2024-5971" }, { "cve": "CVE-2024-6162", "cwe": { "id": "CWE-404", "name": "Improper Resource Shutdown or Release" }, "notes": [ { "category": "other", "text": "Improper Resource Shutdown or Release", "title": "CWE-404" }, { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" } ], "product_status": { "known_affected": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1650752", "CSAFPID-1650751", "CSAFPID-1673526", "CSAFPID-1673399", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-912101", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-764240", "CSAFPID-912547", "CSAFPID-1503582", "CSAFPID-912549", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-764242", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-342804", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-912556", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600", "CSAFPID-204510", "CSAFPID-204569" ] }, "references": [ { "category": "self", "summary": "CVE-2024-6162", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-6162.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1650752", "CSAFPID-1650751", "CSAFPID-1673526", "CSAFPID-1673399", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-912101", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-764240", "CSAFPID-912547", "CSAFPID-1503582", "CSAFPID-912549", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-764242", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-342804", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-912556", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600", "CSAFPID-204510", "CSAFPID-204569" ] } ], "title": "CVE-2024-6162" }, { "cve": "CVE-2024-6387", "cwe": { "id": "CWE-362", "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)" }, "notes": [ { "category": "other", "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)", "title": "CWE-362" }, { "category": "other", "text": "Signal Handler Race Condition", "title": "CWE-364" } ], "product_status": { "known_affected": [ "CSAFPID-1503595", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2024-6387", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-6387.json" } ], "title": "CVE-2024-6387" }, { "cve": "CVE-2024-7254", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "notes": [ { "category": "other", "text": "Improper Input Validation", "title": "CWE-20" }, { "category": "other", "text": "Uncontrolled Recursion", "title": "CWE-674" } ], "product_status": { "known_affected": [ "CSAFPID-912549", "CSAFPID-1672767", "CSAFPID-1503585", "CSAFPID-1673391", "CSAFPID-1673394", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2024-7254", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-7254.json" } ], "title": "CVE-2024-7254" }, { "cve": "CVE-2024-7264", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "other", "text": "Out-of-bounds Read", "title": "CWE-125" }, { "category": "other", "text": "Improper Input Validation", "title": "CWE-20" } ], "product_status": { "known_affected": [ "CSAFPID-1673530", "CSAFPID-1673382", "CSAFPID-1674617", "CSAFPID-1674618", "CSAFPID-1674619", "CSAFPID-1674620", "CSAFPID-1674621", "CSAFPID-1674622", "CSAFPID-1674623", "CSAFPID-1674624", "CSAFPID-1674625", "CSAFPID-1674626", "CSAFPID-1674627", "CSAFPID-1674628" ] }, "references": [ { "category": "self", "summary": "CVE-2024-7264", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-7264.json" } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673530", "CSAFPID-1673382", "CSAFPID-1674617", "CSAFPID-1674618", "CSAFPID-1674619", "CSAFPID-1674620", "CSAFPID-1674621", "CSAFPID-1674622", "CSAFPID-1674623", "CSAFPID-1674624", "CSAFPID-1674625", "CSAFPID-1674626", "CSAFPID-1674627", "CSAFPID-1674628" ] } ], "title": "CVE-2024-7264" }, { "cve": "CVE-2024-22020", "product_status": { "known_affected": [ "CSAFPID-912101", "CSAFPID-1673473", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2024-22020", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-22020.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-912101", "CSAFPID-1673473", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] } ], "title": "CVE-2024-22020" }, { "cve": "CVE-2024-22201", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" } ], "product_status": { "known_affected": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1673475", "CSAFPID-1670429", "CSAFPID-1670430", "CSAFPID-1670431", "CSAFPID-1670432", "CSAFPID-1670433", "CSAFPID-1670434", "CSAFPID-1670435", "CSAFPID-1670436", "CSAFPID-1670437", "CSAFPID-1670438", "CSAFPID-1670439", "CSAFPID-1670440", "CSAFPID-1670441", "CSAFPID-1670442", "CSAFPID-912068", "CSAFPID-912073", "CSAFPID-912076", "CSAFPID-912077", "CSAFPID-912078", "CSAFPID-912079", "CSAFPID-912080", "CSAFPID-912085", "CSAFPID-912101", "CSAFPID-912102", "CSAFPID-912539", "CSAFPID-912540", "CSAFPID-912541", "CSAFPID-912542", "CSAFPID-912543", "CSAFPID-912544", "CSAFPID-912545", "CSAFPID-912546", "CSAFPID-912547", "CSAFPID-912548", "CSAFPID-1674617", "CSAFPID-1674618", "CSAFPID-1674619", "CSAFPID-1674620", "CSAFPID-1674621", "CSAFPID-1674622", "CSAFPID-1674623", "CSAFPID-1674624", "CSAFPID-1674625", "CSAFPID-1674626", "CSAFPID-1674627", "CSAFPID-1674628", "CSAFPID-90016", "CSAFPID-93781", "CSAFPID-220132", "CSAFPID-219776", "CSAFPID-204510", "CSAFPID-204569", "CSAFPID-219826", "CSAFPID-224795", "CSAFPID-912549", "CSAFPID-912550", "CSAFPID-912551", "CSAFPID-912552", "CSAFPID-912553", "CSAFPID-912554", "CSAFPID-912556", "CSAFPID-912557", "CSAFPID-912558", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-342804", "CSAFPID-611387", "CSAFPID-611413", "CSAFPID-614517", "CSAFPID-764237", "CSAFPID-764240", "CSAFPID-764242", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-764739", "CSAFPID-764826", "CSAFPID-765242", "CSAFPID-816348", "CSAFPID-816773", "CSAFPID-816781", "CSAFPID-816782", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-1503582", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600" ] }, "references": [ { "category": "self", "summary": "CVE-2024-22201", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-22201.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1673475", "CSAFPID-1670429", "CSAFPID-1670430", "CSAFPID-1670431", "CSAFPID-1670432", "CSAFPID-1670433", "CSAFPID-1670434", "CSAFPID-1670435", "CSAFPID-1670436", "CSAFPID-1670437", "CSAFPID-1670438", "CSAFPID-1670439", "CSAFPID-1670440", "CSAFPID-1670441", "CSAFPID-1670442", "CSAFPID-912068", "CSAFPID-912073", "CSAFPID-912076", "CSAFPID-912077", "CSAFPID-912078", "CSAFPID-912079", "CSAFPID-912080", "CSAFPID-912085", "CSAFPID-912101", "CSAFPID-912102", "CSAFPID-912539", "CSAFPID-912540", "CSAFPID-912541", "CSAFPID-912542", "CSAFPID-912543", "CSAFPID-912544", "CSAFPID-912545", "CSAFPID-912546", "CSAFPID-912547", "CSAFPID-912548", "CSAFPID-1674617", "CSAFPID-1674618", "CSAFPID-1674619", "CSAFPID-1674620", "CSAFPID-1674621", "CSAFPID-1674622", "CSAFPID-1674623", "CSAFPID-1674624", "CSAFPID-1674625", "CSAFPID-1674626", "CSAFPID-1674627", "CSAFPID-1674628", "CSAFPID-90016", "CSAFPID-93781", "CSAFPID-220132", "CSAFPID-219776", "CSAFPID-204510", "CSAFPID-204569", "CSAFPID-219826", "CSAFPID-224795", "CSAFPID-912549", "CSAFPID-912550", "CSAFPID-912551", "CSAFPID-912552", "CSAFPID-912553", "CSAFPID-912554", "CSAFPID-912556", "CSAFPID-912557", "CSAFPID-912558", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-342804", "CSAFPID-611387", "CSAFPID-611413", "CSAFPID-614517", "CSAFPID-764237", "CSAFPID-764240", "CSAFPID-764242", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-764739", "CSAFPID-764826", "CSAFPID-765242", "CSAFPID-816348", "CSAFPID-816773", "CSAFPID-816781", "CSAFPID-816782", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-1503582", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600" ] } ], "title": "CVE-2024-22201" }, { "cve": "CVE-2024-22257", "cwe": { "id": "CWE-284", "name": "Improper Access Control" }, "notes": [ { "category": "other", "text": "Improper Access Control", "title": "CWE-284" } ], "product_status": { "known_affected": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1673420", "CSAFPID-1673421", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-1670429", "CSAFPID-1670430", "CSAFPID-1670431", "CSAFPID-1670432", "CSAFPID-1670433", "CSAFPID-1670434", "CSAFPID-1670435", "CSAFPID-1670436", "CSAFPID-1670437", "CSAFPID-1670438", "CSAFPID-1670439", "CSAFPID-1670440", "CSAFPID-1670441", "CSAFPID-1670442", "CSAFPID-764237", "CSAFPID-912068", "CSAFPID-912076", "CSAFPID-611387", "CSAFPID-816773", "CSAFPID-912077", "CSAFPID-816348", "CSAFPID-764240", "CSAFPID-614517", "CSAFPID-224795", "CSAFPID-764826", "CSAFPID-90016", "CSAFPID-912078", "CSAFPID-611413", "CSAFPID-764242", "CSAFPID-816781", "CSAFPID-816782", "CSAFPID-93781", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-342804", "CSAFPID-912080", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-219776", "CSAFPID-765242", "CSAFPID-764739", "CSAFPID-204510", "CSAFPID-204569", "CSAFPID-219826", "CSAFPID-912073", "CSAFPID-912085", "CSAFPID-912101", "CSAFPID-912102", "CSAFPID-912539", "CSAFPID-912540", "CSAFPID-912541", "CSAFPID-912542", "CSAFPID-912543", "CSAFPID-912544", "CSAFPID-912545", "CSAFPID-912546", "CSAFPID-912547", "CSAFPID-912548", "CSAFPID-912549", "CSAFPID-912550", "CSAFPID-912551", "CSAFPID-912552", "CSAFPID-912553", "CSAFPID-912554", "CSAFPID-912556", "CSAFPID-912557", "CSAFPID-912558", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-1503582", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600" ] }, "references": [ { "category": "self", "summary": "CVE-2024-22257", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-22257.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.2, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "version": "3.1" }, "products": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1673420", "CSAFPID-1673421", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-1670429", "CSAFPID-1670430", "CSAFPID-1670431", "CSAFPID-1670432", "CSAFPID-1670433", "CSAFPID-1670434", "CSAFPID-1670435", "CSAFPID-1670436", "CSAFPID-1670437", "CSAFPID-1670438", "CSAFPID-1670439", "CSAFPID-1670440", "CSAFPID-1670441", "CSAFPID-1670442", "CSAFPID-764237", "CSAFPID-912068", "CSAFPID-912076", "CSAFPID-611387", "CSAFPID-816773", "CSAFPID-912077", "CSAFPID-816348", "CSAFPID-764240", "CSAFPID-614517", "CSAFPID-224795", "CSAFPID-764826", "CSAFPID-90016", "CSAFPID-912078", "CSAFPID-611413", "CSAFPID-764242", "CSAFPID-816781", "CSAFPID-816782", "CSAFPID-93781", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-342804", "CSAFPID-912080", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-219776", "CSAFPID-765242", "CSAFPID-764739", "CSAFPID-204510", "CSAFPID-204569", "CSAFPID-219826", "CSAFPID-912073", "CSAFPID-912085", "CSAFPID-912101", "CSAFPID-912102", "CSAFPID-912539", "CSAFPID-912540", "CSAFPID-912541", "CSAFPID-912542", "CSAFPID-912543", "CSAFPID-912544", "CSAFPID-912545", "CSAFPID-912546", "CSAFPID-912547", "CSAFPID-912548", "CSAFPID-912549", "CSAFPID-912550", "CSAFPID-912551", "CSAFPID-912552", "CSAFPID-912553", "CSAFPID-912554", "CSAFPID-912556", "CSAFPID-912557", "CSAFPID-912558", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-1503582", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600" ] } ], "title": "CVE-2024-22257" }, { "cve": "CVE-2024-22262", "cwe": { "id": "CWE-601", "name": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)" }, "notes": [ { "category": "other", "text": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)", "title": "CWE-601" } ], "product_status": { "known_affected": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1650752", "CSAFPID-1650820", "CSAFPID-1650751", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-912101", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-764240", "CSAFPID-912547", "CSAFPID-1503582", "CSAFPID-912549", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-764242", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-342804", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-912556", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600", "CSAFPID-204510", "CSAFPID-204569" ] }, "references": [ { "category": "self", "summary": "CVE-2024-22262", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-22262.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1650752", "CSAFPID-1650820", "CSAFPID-1650751", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-912101", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-764240", "CSAFPID-912547", "CSAFPID-1503582", "CSAFPID-912549", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-764242", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-342804", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-912556", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600", "CSAFPID-204510", "CSAFPID-204569" ] } ], "title": "CVE-2024-22262" }, { "cve": "CVE-2024-23672", "cwe": { "id": "CWE-459", "name": "Incomplete Cleanup" }, "notes": [ { "category": "other", "text": "Incomplete Cleanup", "title": "CWE-459" } ], "product_status": { "known_affected": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1650826", "CSAFPID-1650731", "CSAFPID-1673382", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-912068", "CSAFPID-912076", "CSAFPID-611387", "CSAFPID-912539", "CSAFPID-816773", "CSAFPID-912540", "CSAFPID-912541", "CSAFPID-912542", "CSAFPID-912543", "CSAFPID-912101", "CSAFPID-912544", "CSAFPID-912077", "CSAFPID-816348", "CSAFPID-912545", "CSAFPID-764240", "CSAFPID-912546", "CSAFPID-614517", "CSAFPID-912547", "CSAFPID-224795", "CSAFPID-912548", "CSAFPID-912102", "CSAFPID-912549", "CSAFPID-764826", "CSAFPID-90016", "CSAFPID-912078", "CSAFPID-912550", "CSAFPID-912551", "CSAFPID-912552", "CSAFPID-611413", "CSAFPID-764242", "CSAFPID-816781", "CSAFPID-816782", "CSAFPID-912553", "CSAFPID-93781", "CSAFPID-204510", "CSAFPID-204569", "CSAFPID-219776", "CSAFPID-219826", "CSAFPID-220132", "CSAFPID-342804", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-764739", "CSAFPID-765242", "CSAFPID-912073", "CSAFPID-912079", "CSAFPID-912080", "CSAFPID-912554", "CSAFPID-912556", "CSAFPID-912557", "CSAFPID-912558", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-1503582", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600" ] }, "references": [ { "category": "self", "summary": "CVE-2024-23672", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-23672.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1650826", "CSAFPID-1650731", "CSAFPID-1673382", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-912068", "CSAFPID-912076", "CSAFPID-611387", "CSAFPID-912539", "CSAFPID-816773", "CSAFPID-912540", "CSAFPID-912541", "CSAFPID-912542", "CSAFPID-912543", "CSAFPID-912101", "CSAFPID-912544", "CSAFPID-912077", "CSAFPID-816348", "CSAFPID-912545", "CSAFPID-764240", "CSAFPID-912546", "CSAFPID-614517", "CSAFPID-912547", "CSAFPID-224795", "CSAFPID-912548", "CSAFPID-912102", "CSAFPID-912549", "CSAFPID-764826", "CSAFPID-90016", "CSAFPID-912078", "CSAFPID-912550", "CSAFPID-912551", "CSAFPID-912552", "CSAFPID-611413", "CSAFPID-764242", "CSAFPID-816781", "CSAFPID-816782", "CSAFPID-912553", "CSAFPID-93781", "CSAFPID-204510", "CSAFPID-204569", "CSAFPID-219776", "CSAFPID-219826", "CSAFPID-220132", "CSAFPID-342804", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-764739", "CSAFPID-765242", "CSAFPID-912073", "CSAFPID-912079", "CSAFPID-912080", "CSAFPID-912554", "CSAFPID-912556", "CSAFPID-912557", "CSAFPID-912558", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-1503582", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600" ] } ], "title": "CVE-2024-23672" }, { "cve": "CVE-2024-23807", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "other", "text": "Use After Free", "title": "CWE-416" } ], "product_status": { "known_affected": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1650734", "CSAFPID-1650830", "CSAFPID-1650777", "CSAFPID-204622", "CSAFPID-219909", "CSAFPID-1650778", "CSAFPID-41182", "CSAFPID-1674617", "CSAFPID-1674618", "CSAFPID-1674619", "CSAFPID-1674620", "CSAFPID-1674621", "CSAFPID-1674622", "CSAFPID-1674623", "CSAFPID-1674624", "CSAFPID-1674625", "CSAFPID-1674626", "CSAFPID-1674627", "CSAFPID-1674628", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-912101", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-764240", "CSAFPID-912547", "CSAFPID-1503582", "CSAFPID-912549", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-764242", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-342804", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-912556", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600", "CSAFPID-204510", "CSAFPID-204569" ] }, "references": [ { "category": "self", "summary": "CVE-2024-23807", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-23807.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1650734", "CSAFPID-1650830", "CSAFPID-1650777", "CSAFPID-204622", "CSAFPID-219909", "CSAFPID-1650778", "CSAFPID-41182", "CSAFPID-1674617", "CSAFPID-1674618", "CSAFPID-1674619", "CSAFPID-1674620", "CSAFPID-1674621", "CSAFPID-1674622", "CSAFPID-1674623", "CSAFPID-1674624", "CSAFPID-1674625", "CSAFPID-1674626", "CSAFPID-1674627", "CSAFPID-1674628", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-912101", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-764240", "CSAFPID-912547", "CSAFPID-1503582", "CSAFPID-912549", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-764242", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-342804", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-912556", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600", "CSAFPID-204510", "CSAFPID-204569" ] } ], "title": "CVE-2024-23807" }, { "cve": "CVE-2024-24549", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "notes": [ { "category": "other", "text": "Improper Input Validation", "title": "CWE-20" } ], "product_status": { "known_affected": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1650826", "CSAFPID-1673382", "CSAFPID-1650731", "CSAFPID-1674617", "CSAFPID-1674618", "CSAFPID-1674619", "CSAFPID-1674620", "CSAFPID-1674621", "CSAFPID-1674622", "CSAFPID-1674623", "CSAFPID-1674624", "CSAFPID-1674625", "CSAFPID-1674626", "CSAFPID-1674627", "CSAFPID-1674628", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-912068", "CSAFPID-912076", "CSAFPID-611387", "CSAFPID-816773", "CSAFPID-912077", "CSAFPID-816348", "CSAFPID-764240", "CSAFPID-614517", "CSAFPID-224795", "CSAFPID-764826", "CSAFPID-90016", "CSAFPID-912078", "CSAFPID-611413", "CSAFPID-764242", "CSAFPID-816781", "CSAFPID-816782", "CSAFPID-93781", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-342804", "CSAFPID-912080", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-219776", "CSAFPID-765242", "CSAFPID-764739", "CSAFPID-204510", "CSAFPID-204569", "CSAFPID-219826", "CSAFPID-912073", "CSAFPID-912101", "CSAFPID-912102", "CSAFPID-912539", "CSAFPID-912540", "CSAFPID-912541", "CSAFPID-912542", "CSAFPID-912543", "CSAFPID-912544", "CSAFPID-912545", "CSAFPID-912546", "CSAFPID-912547", "CSAFPID-912548", "CSAFPID-912549", "CSAFPID-912550", "CSAFPID-912551", "CSAFPID-912552", "CSAFPID-912553", "CSAFPID-912554", "CSAFPID-912556", "CSAFPID-912557", "CSAFPID-912558", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-1503582", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600" ] }, "references": [ { "category": "self", "summary": "CVE-2024-24549", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-24549.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1650826", "CSAFPID-1673382", "CSAFPID-1650731", "CSAFPID-1674617", "CSAFPID-1674618", "CSAFPID-1674619", "CSAFPID-1674620", "CSAFPID-1674621", "CSAFPID-1674622", "CSAFPID-1674623", "CSAFPID-1674624", "CSAFPID-1674625", "CSAFPID-1674626", "CSAFPID-1674627", "CSAFPID-1674628", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-912068", "CSAFPID-912076", "CSAFPID-611387", "CSAFPID-816773", "CSAFPID-912077", "CSAFPID-816348", "CSAFPID-764240", "CSAFPID-614517", "CSAFPID-224795", "CSAFPID-764826", "CSAFPID-90016", "CSAFPID-912078", "CSAFPID-611413", "CSAFPID-764242", "CSAFPID-816781", "CSAFPID-816782", "CSAFPID-93781", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-342804", "CSAFPID-912080", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-219776", "CSAFPID-765242", "CSAFPID-764739", "CSAFPID-204510", "CSAFPID-204569", "CSAFPID-219826", "CSAFPID-912073", "CSAFPID-912101", "CSAFPID-912102", "CSAFPID-912539", "CSAFPID-912540", "CSAFPID-912541", "CSAFPID-912542", "CSAFPID-912543", "CSAFPID-912544", "CSAFPID-912545", "CSAFPID-912546", "CSAFPID-912547", "CSAFPID-912548", "CSAFPID-912549", "CSAFPID-912550", "CSAFPID-912551", "CSAFPID-912552", "CSAFPID-912553", "CSAFPID-912554", "CSAFPID-912556", "CSAFPID-912557", "CSAFPID-912558", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-1503582", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600" ] } ], "title": "CVE-2024-24549" }, { "cve": "CVE-2024-25062", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "other", "text": "Use After Free", "title": "CWE-416" } ], "product_status": { "known_affected": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1650751", "CSAFPID-1650752", "CSAFPID-1673481", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-1670429", "CSAFPID-1670430", "CSAFPID-1670431", "CSAFPID-1670432", "CSAFPID-1670433", "CSAFPID-1670434", "CSAFPID-1670435", "CSAFPID-1670436", "CSAFPID-1670437", "CSAFPID-1670438", "CSAFPID-1670439", "CSAFPID-1670440", "CSAFPID-1670441", "CSAFPID-1670442", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-912068", "CSAFPID-912076", "CSAFPID-611387", "CSAFPID-912539", "CSAFPID-816773", "CSAFPID-912540", "CSAFPID-912541", "CSAFPID-912542", "CSAFPID-912543", "CSAFPID-912101", "CSAFPID-912544", "CSAFPID-912077", "CSAFPID-816348", "CSAFPID-912545", "CSAFPID-764240", "CSAFPID-912546", "CSAFPID-614517", "CSAFPID-912547", "CSAFPID-224795", "CSAFPID-912548", "CSAFPID-912102", "CSAFPID-912549", "CSAFPID-764826", "CSAFPID-90016", "CSAFPID-912078", "CSAFPID-912550", "CSAFPID-912551", "CSAFPID-912552", "CSAFPID-611413", "CSAFPID-764242", "CSAFPID-816781", "CSAFPID-816782", "CSAFPID-912553", "CSAFPID-93781", "CSAFPID-204510", "CSAFPID-204569", "CSAFPID-219776", "CSAFPID-219826", "CSAFPID-220132", "CSAFPID-342804", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-764739", "CSAFPID-765242", "CSAFPID-912073", "CSAFPID-912079", "CSAFPID-912080", "CSAFPID-912554", "CSAFPID-912556", "CSAFPID-912557", "CSAFPID-912558", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-1503582", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600" ] }, "references": [ { "category": "self", "summary": "CVE-2024-25062", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-25062.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1650751", "CSAFPID-1650752", "CSAFPID-1673481", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-1670429", "CSAFPID-1670430", "CSAFPID-1670431", "CSAFPID-1670432", "CSAFPID-1670433", "CSAFPID-1670434", "CSAFPID-1670435", "CSAFPID-1670436", "CSAFPID-1670437", "CSAFPID-1670438", "CSAFPID-1670439", "CSAFPID-1670440", "CSAFPID-1670441", "CSAFPID-1670442", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-912068", "CSAFPID-912076", "CSAFPID-611387", "CSAFPID-912539", "CSAFPID-816773", "CSAFPID-912540", "CSAFPID-912541", "CSAFPID-912542", "CSAFPID-912543", "CSAFPID-912101", "CSAFPID-912544", "CSAFPID-912077", "CSAFPID-816348", "CSAFPID-912545", "CSAFPID-764240", "CSAFPID-912546", "CSAFPID-614517", "CSAFPID-912547", "CSAFPID-224795", "CSAFPID-912548", "CSAFPID-912102", "CSAFPID-912549", "CSAFPID-764826", "CSAFPID-90016", "CSAFPID-912078", "CSAFPID-912550", "CSAFPID-912551", "CSAFPID-912552", "CSAFPID-611413", "CSAFPID-764242", "CSAFPID-816781", "CSAFPID-816782", "CSAFPID-912553", "CSAFPID-93781", "CSAFPID-204510", "CSAFPID-204569", "CSAFPID-219776", "CSAFPID-219826", "CSAFPID-220132", "CSAFPID-342804", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-764739", "CSAFPID-765242", "CSAFPID-912073", "CSAFPID-912079", "CSAFPID-912080", "CSAFPID-912554", "CSAFPID-912556", "CSAFPID-912557", "CSAFPID-912558", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-1503582", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600" ] } ], "title": "CVE-2024-25062" }, { "cve": "CVE-2024-25638", "cwe": { "id": "CWE-345", "name": "Insufficient Verification of Data Authenticity" }, "notes": [ { "category": "other", "text": "Insufficient Verification of Data Authenticity", "title": "CWE-345" }, { "category": "other", "text": "Acceptance of Extraneous Untrusted Data With Trusted Data", "title": "CWE-349" } ], "product_status": { "known_affected": [ "CSAFPID-912549", "CSAFPID-1672767", "CSAFPID-1503585", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2024-25638", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-25638.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.9, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L", "version": "3.1" }, "products": [ "CSAFPID-912549", "CSAFPID-1672767", "CSAFPID-1503585", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] } ], "title": "CVE-2024-25638" }, { "cve": "CVE-2024-26308", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "other", "text": "Allocation of Resources Without Limits or Throttling", "title": "CWE-770" } ], "product_status": { "known_affected": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1673389", "CSAFPID-1673390", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-1670429", "CSAFPID-1670430", "CSAFPID-1670431", "CSAFPID-1670432", "CSAFPID-1670433", "CSAFPID-1670434", "CSAFPID-1670435", "CSAFPID-1670436", "CSAFPID-1670437", "CSAFPID-1670438", "CSAFPID-1670439", "CSAFPID-1670440", "CSAFPID-1670441", "CSAFPID-1670442", "CSAFPID-90016", "CSAFPID-93781", "CSAFPID-204510", "CSAFPID-204569", "CSAFPID-219776", "CSAFPID-219826", "CSAFPID-220132", "CSAFPID-224795", "CSAFPID-342804", "CSAFPID-611387", "CSAFPID-611413", "CSAFPID-614517", "CSAFPID-764237", "CSAFPID-764240", "CSAFPID-764242", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-764739", "CSAFPID-764826", "CSAFPID-765242", "CSAFPID-816348", "CSAFPID-816773", "CSAFPID-816781", "CSAFPID-816782", "CSAFPID-912068", "CSAFPID-912073", "CSAFPID-912076", "CSAFPID-912077", "CSAFPID-912078", "CSAFPID-912079", "CSAFPID-912080", "CSAFPID-912085", "CSAFPID-912101", "CSAFPID-912102", "CSAFPID-912539", "CSAFPID-912540", "CSAFPID-912541", "CSAFPID-912542", "CSAFPID-912543", "CSAFPID-912544", "CSAFPID-912545", "CSAFPID-912546", "CSAFPID-912547", "CSAFPID-912548", "CSAFPID-912549", "CSAFPID-912550", "CSAFPID-912551", "CSAFPID-912552", "CSAFPID-912553", "CSAFPID-912554", "CSAFPID-912556", "CSAFPID-912557", "CSAFPID-912558", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-1503582", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600" ] }, "references": [ { "category": "self", "summary": "CVE-2024-26308", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-26308.json" } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1673389", "CSAFPID-1673390", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-1670429", "CSAFPID-1670430", "CSAFPID-1670431", "CSAFPID-1670432", "CSAFPID-1670433", "CSAFPID-1670434", "CSAFPID-1670435", "CSAFPID-1670436", "CSAFPID-1670437", "CSAFPID-1670438", "CSAFPID-1670439", "CSAFPID-1670440", "CSAFPID-1670441", "CSAFPID-1670442", "CSAFPID-90016", "CSAFPID-93781", "CSAFPID-204510", "CSAFPID-204569", "CSAFPID-219776", "CSAFPID-219826", "CSAFPID-220132", "CSAFPID-224795", "CSAFPID-342804", "CSAFPID-611387", "CSAFPID-611413", "CSAFPID-614517", "CSAFPID-764237", "CSAFPID-764240", "CSAFPID-764242", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-764739", "CSAFPID-764826", "CSAFPID-765242", "CSAFPID-816348", "CSAFPID-816773", "CSAFPID-816781", "CSAFPID-816782", "CSAFPID-912068", "CSAFPID-912073", "CSAFPID-912076", "CSAFPID-912077", "CSAFPID-912078", "CSAFPID-912079", "CSAFPID-912080", "CSAFPID-912085", "CSAFPID-912101", "CSAFPID-912102", "CSAFPID-912539", "CSAFPID-912540", "CSAFPID-912541", "CSAFPID-912542", "CSAFPID-912543", "CSAFPID-912544", "CSAFPID-912545", "CSAFPID-912546", "CSAFPID-912547", "CSAFPID-912548", "CSAFPID-912549", "CSAFPID-912550", "CSAFPID-912551", "CSAFPID-912552", "CSAFPID-912553", "CSAFPID-912554", "CSAFPID-912556", "CSAFPID-912557", "CSAFPID-912558", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-1503582", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600" ] } ], "title": "CVE-2024-26308" }, { "cve": "CVE-2024-28182", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" }, { "category": "other", "text": "Improper Resource Shutdown or Release", "title": "CWE-404" }, { "category": "other", "text": "Detection of Error Condition Without Action", "title": "CWE-390" }, { "category": "other", "text": "Allocation of Resources Without Limits or Throttling", "title": "CWE-770" } ], "product_status": { "known_affected": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1673414", "CSAFPID-1673396", "CSAFPID-1673485", "CSAFPID-1673393", "CSAFPID-1673394", "CSAFPID-1673389", "CSAFPID-1672767", "CSAFPID-1673391", "CSAFPID-1673392", "CSAFPID-1673415", "CSAFPID-1673390", "CSAFPID-1673413", "CSAFPID-1673395", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-912101", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-764240", "CSAFPID-912547", "CSAFPID-1503582", "CSAFPID-912549", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-764242", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-342804", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-912556", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600", "CSAFPID-204510", "CSAFPID-204569" ] }, "references": [ { "category": "self", "summary": "CVE-2024-28182", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-28182.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1673414", "CSAFPID-1673396", "CSAFPID-1673485", "CSAFPID-1673393", "CSAFPID-1673394", "CSAFPID-1673389", "CSAFPID-1672767", "CSAFPID-1673391", "CSAFPID-1673392", "CSAFPID-1673415", "CSAFPID-1673390", "CSAFPID-1673413", "CSAFPID-1673395", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-912101", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-764240", "CSAFPID-912547", "CSAFPID-1503582", "CSAFPID-912549", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-764242", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-342804", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-912556", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600", "CSAFPID-204510", "CSAFPID-204569" ] } ], "title": "CVE-2024-28182" }, { "cve": "CVE-2024-28849", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "other", "text": "Exposure of Sensitive Information to an Unauthorized Actor", "title": "CWE-200" } ], "product_status": { "known_affected": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1673414", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-912101", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-764240", "CSAFPID-912547", "CSAFPID-1503582", "CSAFPID-912549", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-764242", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-342804", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-912556", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600", "CSAFPID-204510", "CSAFPID-204569" ] }, "references": [ { "category": "self", "summary": "CVE-2024-28849", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-28849.json" } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1673414", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-912101", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-764240", "CSAFPID-912547", "CSAFPID-1503582", "CSAFPID-912549", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-764242", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-342804", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-912556", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600", "CSAFPID-204510", "CSAFPID-204569" ] } ], "title": "CVE-2024-28849" }, { "cve": "CVE-2024-29025", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "other", "text": "Allocation of Resources Without Limits or Throttling", "title": "CWE-770" } ], "product_status": { "known_affected": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1650752", "CSAFPID-1650751", "CSAFPID-1673494", "CSAFPID-1673420", "CSAFPID-1673421", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-912101", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-764240", "CSAFPID-912547", "CSAFPID-1503582", "CSAFPID-912549", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-764242", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-342804", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-912556", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600", "CSAFPID-204510", "CSAFPID-204569" ] }, "references": [ { "category": "self", "summary": "CVE-2024-29025", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-29025.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.3, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.1" }, "products": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1650752", "CSAFPID-1650751", "CSAFPID-1673494", "CSAFPID-1673420", "CSAFPID-1673421", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-912101", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-764240", "CSAFPID-912547", "CSAFPID-1503582", "CSAFPID-912549", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-764242", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-342804", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-912556", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600", "CSAFPID-204510", "CSAFPID-204569" ] } ], "title": "CVE-2024-29025" }, { "cve": "CVE-2024-29133", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "other", "text": "Out-of-bounds Write", "title": "CWE-787" } ], "product_status": { "known_affected": [ "CSAFPID-1650820", "CSAFPID-224790", "CSAFPID-221118", "CSAFPID-1673496", "CSAFPID-1674617", "CSAFPID-1674618", "CSAFPID-1674619", "CSAFPID-1674620", "CSAFPID-1674621", "CSAFPID-1674622", "CSAFPID-1674623", "CSAFPID-1674624", "CSAFPID-1674625", "CSAFPID-1674626", "CSAFPID-1674627", "CSAFPID-1674628", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-912101", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-764240", "CSAFPID-912547", "CSAFPID-1503582", "CSAFPID-912549", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-764242", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-342804", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-912556", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600", "CSAFPID-204510", "CSAFPID-204569" ] }, "references": [ { "category": "self", "summary": "CVE-2024-29133", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-29133.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.3, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.1" }, "products": [ "CSAFPID-1650820", "CSAFPID-224790", "CSAFPID-221118", "CSAFPID-1673496", "CSAFPID-1674617", "CSAFPID-1674618", "CSAFPID-1674619", "CSAFPID-1674620", "CSAFPID-1674621", "CSAFPID-1674622", "CSAFPID-1674623", "CSAFPID-1674624", "CSAFPID-1674625", "CSAFPID-1674626", "CSAFPID-1674627", "CSAFPID-1674628", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-912101", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-764240", "CSAFPID-912547", "CSAFPID-1503582", "CSAFPID-912549", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-764242", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-342804", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-912556", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600", "CSAFPID-204510", "CSAFPID-204569" ] } ], "title": "CVE-2024-29133" }, { "cve": "CVE-2024-29736", "cwe": { "id": "CWE-918", "name": "Server-Side Request Forgery (SSRF)" }, "notes": [ { "category": "other", "text": "Server-Side Request Forgery (SSRF)", "title": "CWE-918" } ], "product_status": { "known_affected": [ "CSAFPID-1673399", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2024-29736", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-29736.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "CSAFPID-1673399", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] } ], "title": "CVE-2024-29736" }, { "cve": "CVE-2024-29857", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" }, { "category": "other", "text": "Improper Input Validation", "title": "CWE-20" }, { "category": "other", "text": "Out-of-bounds Read", "title": "CWE-125" } ], "product_status": { "known_affected": [ "CSAFPID-1673413", "CSAFPID-1673415", "CSAFPID-1673501", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-912101", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-764240", "CSAFPID-912547", "CSAFPID-1503582", "CSAFPID-912549", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-764242", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-342804", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-912556", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600", "CSAFPID-204510", "CSAFPID-204569" ] }, "references": [ { "category": "self", "summary": "CVE-2024-29857", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-29857.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673413", "CSAFPID-1673415", "CSAFPID-1673501", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-912101", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-764240", "CSAFPID-912547", "CSAFPID-1503582", "CSAFPID-912549", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-764242", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-342804", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-912556", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600", "CSAFPID-204510", "CSAFPID-204569" ] } ], "title": "CVE-2024-29857" }, { "cve": "CVE-2024-30251", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)" }, "notes": [ { "category": "other", "text": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)", "title": "CWE-835" } ], "product_status": { "known_affected": [ "CSAFPID-912079", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2024-30251", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-30251.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-912079", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] } ], "title": "CVE-2024-30251" }, { "cve": "CVE-2024-31080", "cwe": { "id": "CWE-126", "name": "Buffer Over-read" }, "notes": [ { "category": "other", "text": "Buffer Over-read", "title": "CWE-126" }, { "category": "other", "text": "Heap-based Buffer Overflow", "title": "CWE-122" } ], "product_status": { "known_affected": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2024-31080", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-31080.json" } ], "title": "CVE-2024-31080" }, { "cve": "CVE-2024-31744", "cwe": { "id": "CWE-404", "name": "Improper Resource Shutdown or Release" }, "notes": [ { "category": "other", "text": "Improper Resource Shutdown or Release", "title": "CWE-404" } ], "product_status": { "known_affected": [ "CSAFPID-1673395", "CSAFPID-1673392", "CSAFPID-1673393", "CSAFPID-1673396", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2024-31744", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-31744.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673395", "CSAFPID-1673392", "CSAFPID-1673393", "CSAFPID-1673396", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] } ], "title": "CVE-2024-31744" }, { "cve": "CVE-2024-32760", "cwe": { "id": "CWE-404", "name": "Improper Resource Shutdown or Release" }, "notes": [ { "category": "other", "text": "Improper Resource Shutdown or Release", "title": "CWE-404" }, { "category": "other", "text": "Out-of-bounds Write", "title": "CWE-787" } ], "product_status": { "known_affected": [ "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2024-32760", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-32760.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] } ], "title": "CVE-2024-32760" }, { "cve": "CVE-2024-33602", "cwe": { "id": "CWE-466", "name": "Return of Pointer Value Outside of Expected Range" }, "notes": [ { "category": "other", "text": "Return of Pointer Value Outside of Expected Range", "title": "CWE-466" }, { "category": "other", "text": "Improper Check or Handling of Exceptional Conditions", "title": "CWE-703" } ], "product_status": { "known_affected": [ "CSAFPID-912549", "CSAFPID-1673396", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-1672762", "CSAFPID-1673395", "CSAFPID-1672764", "CSAFPID-1672767", "CSAFPID-1503585", "CSAFPID-1673494", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2024-33602", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-33602.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.6, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L", "version": "3.1" }, "products": [ "CSAFPID-912549", "CSAFPID-1673396", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-1672762", "CSAFPID-1673395", "CSAFPID-1672764", "CSAFPID-1672767", "CSAFPID-1503585", "CSAFPID-1673494", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] } ], "title": "CVE-2024-33602" }, { "cve": "CVE-2024-34750", "cwe": { "id": "CWE-755", "name": "Improper Handling of Exceptional Conditions" }, "notes": [ { "category": "other", "text": "Improper Handling of Exceptional Conditions", "title": "CWE-755" }, { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" } ], "product_status": { "known_affected": [ "CSAFPID-1673481", "CSAFPID-1503596", "CSAFPID-1673420", "CSAFPID-1673421", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2024-34750", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-34750.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673481", "CSAFPID-1503596", "CSAFPID-1673420", "CSAFPID-1673421", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] } ], "title": "CVE-2024-34750" }, { "cve": "CVE-2024-37371", "cwe": { "id": "CWE-130", "name": "Improper Handling of Length Parameter Inconsistency" }, "notes": [ { "category": "other", "text": "Improper Handling of Length Parameter Inconsistency", "title": "CWE-130" } ], "product_status": { "known_affected": [ "CSAFPID-912549", "CSAFPID-1673413", "CSAFPID-1673414", "CSAFPID-1673396", "CSAFPID-1503590", "CSAFPID-1673393", "CSAFPID-1673395", "CSAFPID-1673399", "CSAFPID-1672767", "CSAFPID-1503585", "CSAFPID-1673392", "CSAFPID-1503589", "CSAFPID-1673415", "CSAFPID-1673389", "CSAFPID-1673390", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2024-37371", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-37371.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-912549", "CSAFPID-1673413", "CSAFPID-1673414", "CSAFPID-1673396", "CSAFPID-1503590", "CSAFPID-1673393", "CSAFPID-1673395", "CSAFPID-1673399", "CSAFPID-1672767", "CSAFPID-1503585", "CSAFPID-1673392", "CSAFPID-1503589", "CSAFPID-1673415", "CSAFPID-1673389", "CSAFPID-1673390", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] } ], "title": "CVE-2024-37371" }, { "cve": "CVE-2024-37891", "cwe": { "id": "CWE-669", "name": "Incorrect Resource Transfer Between Spheres" }, "notes": [ { "category": "other", "text": "Incorrect Resource Transfer Between Spheres", "title": "CWE-669" } ], "product_status": { "known_affected": [ "CSAFPID-1673395", "CSAFPID-1673396", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2024-37891", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-37891.json" } ], "scores": [ { "cvss_v3": { "baseScore": 4.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "CSAFPID-1673395", "CSAFPID-1673396", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] } ], "title": "CVE-2024-37891" }, { "cve": "CVE-2024-38816", "cwe": { "id": "CWE-22", "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)" }, "notes": [ { "category": "other", "text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)", "title": "CWE-22" } ], "product_status": { "known_affected": [ "CSAFPID-1673420", "CSAFPID-1673421", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2024-38816", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38816.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "CSAFPID-1673420", "CSAFPID-1673421", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] } ], "title": "CVE-2024-38816" }, { "cve": "CVE-2024-39689", "cwe": { "id": "CWE-345", "name": "Insufficient Verification of Data Authenticity" }, "notes": [ { "category": "other", "text": "Insufficient Verification of Data Authenticity", "title": "CWE-345" } ], "product_status": { "known_affected": [ "CSAFPID-1673395", "CSAFPID-1673396", "CSAFPID-1673392", "CSAFPID-1673393" ] }, "references": [ { "category": "self", "summary": "CVE-2024-39689", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-39689.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "CSAFPID-1673395", "CSAFPID-1673396", "CSAFPID-1673392", "CSAFPID-1673393" ] } ], "title": "CVE-2024-39689" }, { "cve": "CVE-2024-40898", "cwe": { "id": "CWE-918", "name": "Server-Side Request Forgery (SSRF)" }, "notes": [ { "category": "other", "text": "Server-Side Request Forgery (SSRF)", "title": "CWE-918" } ], "product_status": { "known_affected": [ "CSAFPID-1673516", "CSAFPID-1673411", "CSAFPID-1673412", "CSAFPID-1650731", "CSAFPID-1673382", "CSAFPID-1674617", "CSAFPID-1674618", "CSAFPID-1674619", "CSAFPID-1674620", "CSAFPID-1674621", "CSAFPID-1674622", "CSAFPID-1674623", "CSAFPID-1674624", "CSAFPID-1674625", "CSAFPID-1674626", "CSAFPID-1674627", "CSAFPID-1674628", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2024-40898", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40898.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "CSAFPID-1673516", "CSAFPID-1673411", "CSAFPID-1673412", "CSAFPID-1650731", "CSAFPID-1673382", "CSAFPID-1674617", "CSAFPID-1674618", "CSAFPID-1674619", "CSAFPID-1674620", "CSAFPID-1674621", "CSAFPID-1674622", "CSAFPID-1674623", "CSAFPID-1674624", "CSAFPID-1674625", "CSAFPID-1674626", "CSAFPID-1674627", "CSAFPID-1674628", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] } ], "title": "CVE-2024-40898" }, { "cve": "CVE-2024-41817", "cwe": { "id": "CWE-427", "name": "Uncontrolled Search Path Element" }, "notes": [ { "category": "other", "text": "Uncontrolled Search Path Element", "title": "CWE-427" } ], "product_status": { "known_affected": [ "CSAFPID-1673382", "CSAFPID-1650731", "CSAFPID-1674617", "CSAFPID-1674618", "CSAFPID-1674619", "CSAFPID-1674620", "CSAFPID-1674621", "CSAFPID-1674622", "CSAFPID-1674623", "CSAFPID-1674624", "CSAFPID-1674626", "CSAFPID-1674627", "CSAFPID-1674628", "CSAFPID-1674625" ] }, "references": [ { "category": "self", "summary": "CVE-2024-41817", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-41817.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673382", "CSAFPID-1650731", "CSAFPID-1674617", "CSAFPID-1674618", "CSAFPID-1674619", "CSAFPID-1674620", "CSAFPID-1674621", "CSAFPID-1674622", "CSAFPID-1674623", "CSAFPID-1674624", "CSAFPID-1674626", "CSAFPID-1674627", "CSAFPID-1674628", "CSAFPID-1674625" ] } ], "title": "CVE-2024-41817" }, { "cve": "CVE-2024-43044", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "other", "text": "Exposure of Sensitive Information to an Unauthorized Actor", "title": "CWE-200" }, { "category": "other", "text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)", "title": "CWE-22" }, { "category": "other", "text": "Improper Check for Unusual or Exceptional Conditions", "title": "CWE-754" } ], "product_status": { "known_affected": [ "CSAFPID-1673395", "CSAFPID-1673411", "CSAFPID-1673412", "CSAFPID-1673413", "CSAFPID-1673396", "CSAFPID-1673392", "CSAFPID-1673494", "CSAFPID-1673393", "CSAFPID-1673415", "CSAFPID-1673416", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2024-43044", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-43044.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.0, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673395", "CSAFPID-1673411", "CSAFPID-1673412", "CSAFPID-1673413", "CSAFPID-1673396", "CSAFPID-1673392", "CSAFPID-1673494", "CSAFPID-1673393", "CSAFPID-1673415", "CSAFPID-1673416", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] } ], "title": "CVE-2024-43044" }, { "cve": "CVE-2024-45492", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "other", "text": "Integer Overflow or Wraparound", "title": "CWE-190" } ], "product_status": { "known_affected": [ "CSAFPID-1673382", "CSAFPID-1673399", "CSAFPID-1650731", "CSAFPID-1673517", "CSAFPID-1673396", "CSAFPID-1674617", "CSAFPID-1674618", "CSAFPID-1674619", "CSAFPID-1674620", "CSAFPID-1674621", "CSAFPID-1674622", "CSAFPID-1674623", "CSAFPID-1674624", "CSAFPID-1674625", "CSAFPID-1674626", "CSAFPID-1674627", "CSAFPID-1674628", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2024-45492", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-45492.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673382", "CSAFPID-1673399", "CSAFPID-1650731", "CSAFPID-1673517", "CSAFPID-1673396", "CSAFPID-1674617", "CSAFPID-1674618", "CSAFPID-1674619", "CSAFPID-1674620", "CSAFPID-1674621", "CSAFPID-1674622", "CSAFPID-1674623", "CSAFPID-1674624", "CSAFPID-1674625", "CSAFPID-1674626", "CSAFPID-1674627", "CSAFPID-1674628", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] } ], "title": "CVE-2024-45492" } ] }
ncsc-2025-0023
Vulnerability from csaf_ncscnl
Notes
{ "document": { "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "nl", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." }, { "category": "description", "text": "Oracle heeft meerdere kwetsbaarheden verholpen in Oracle PeopleSoft, specifiek in de versies 8.60, 8.61 en 9.2.", "title": "Feiten" }, { "category": "description", "text": "De kwetsbaarheden in Oracle PeopleSoft stellen geauthenticeerde kwaadwillenden in staat om via HTTP-netwerktoegang ongeautoriseerde toegang te krijgen tot specifieke gegevens, wat kan leiden tot ongeautoriseerde gegevensmanipulatie en -toegang. Kwaadwillenden kunnen ook een Denial-of-Service veroorzaken. Hiervoor heeft de kwaadwillende geen voorafgaande authenticatie nodig.", "title": "Interpretaties" }, { "category": "description", "text": "Oracle heeft updates uitgebracht om de kwetsbaarheden in PeopleSoft te verhelpen. Zie bijgevoegde referenties voor meer informatie.", "title": "Oplossingen" }, { "category": "general", "text": "medium", "title": "Kans" }, { "category": "general", "text": "high", "title": "Schade" }, { "category": "general", "text": "Always-Incorrect Control Flow Implementation", "title": "CWE-670" }, { "category": "general", "text": "Dependency on Vulnerable Third-Party Component", "title": "CWE-1395" }, { "category": "general", "text": "Incorrect Resource Transfer Between Spheres", "title": "CWE-669" }, { "category": "general", "text": "Buffer Over-read", "title": "CWE-126" }, { "category": "general", "text": "Out-of-bounds Read", "title": "CWE-125" }, { "category": "general", "text": "Improper Restriction of Operations within the Bounds of a Memory Buffer", "title": "CWE-119" }, { "category": "general", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" }, { "category": "general", "text": "Allocation of Resources Without Limits or Throttling", "title": "CWE-770" }, { "category": "general", "text": "Out-of-bounds Write", "title": "CWE-787" }, { "category": "general", "text": "Exposure of Sensitive Information to an Unauthorized Actor", "title": "CWE-200" }, { "category": "general", "text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)", "title": "CWE-120" } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "Nationaal Cyber Security Centrum", "namespace": "https://www.ncsc.nl/" }, "references": [ { "category": "external", "summary": "Reference - cveprojectv5; nvd; oracle", "url": "https://www.oracle.com/security-alerts/cpujan2025.html" } ], "title": "Kwetsbaarheden verholpen in Oracle PeopleSoft", "tracking": { "current_release_date": "2025-01-22T13:31:17.380797Z", "id": "NCSC-2025-0023", "initial_release_date": "2025-01-22T13:31:17.380797Z", "revision_history": [ { "date": "2025-01-22T13:31:17.380797Z", "number": "0", "summary": "Initiele versie" } ], "status": "final", "version": "1.0.0" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_name", "name": "peoplesoft_enterprise_cc_common_application_objects", "product": { "name": "peoplesoft_enterprise_cc_common_application_objects", "product_id": "CSAFPID-449779", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:peoplesoft_enterprise_cc_common_application_objects:9.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "peoplesoft_enterprise_fin_cash_management", "product": { "name": "peoplesoft_enterprise_fin_cash_management", "product_id": "CSAFPID-765405", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:peoplesoft_enterprise_fin_cash_management:9.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "peoplesoft_enterprise_fin_esettlements", "product": { "name": "peoplesoft_enterprise_fin_esettlements", "product_id": "CSAFPID-1751153", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:peoplesoft_enterprise_fin_esettlements:9.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "peoplesoft_enterprise_hcm_human_resources", "product": { "name": "peoplesoft_enterprise_hcm_human_resources", "product_id": "CSAFPID-172663", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:peoplesoft_enterprise_hcm_human_resources:9.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "peoplesoft_enterprise_hcm_shared_components", "product": { "name": "peoplesoft_enterprise_hcm_shared_components", "product_id": "CSAFPID-607590", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:peoplesoft_enterprise_hcm_shared_components:9.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "peoplesoft_enterprise_peopletools", "product": { "name": "peoplesoft_enterprise_peopletools", "product_id": "CSAFPID-1682", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "peoplesoft_enterprise_peopletools", "product": { "name": "peoplesoft_enterprise_peopletools", "product_id": "CSAFPID-1681", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.60:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "peoplesoft_enterprise_peopletools", "product": { "name": "peoplesoft_enterprise_peopletools", "product_id": "CSAFPID-816362", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.61:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "peoplesoft_enterprise_peopletools", "product": { "name": "peoplesoft_enterprise_peopletools", "product_id": "CSAFPID-1503667", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:_opensearch___8.59:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "peoplesoft_enterprise_peopletools", "product": { "name": "peoplesoft_enterprise_peopletools", "product_id": "CSAFPID-1503672", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:_opensearch___8.60:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "peoplesoft_enterprise_peopletools", "product": { "name": "peoplesoft_enterprise_peopletools", "product_id": "CSAFPID-1503676", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:_opensearch___8.61:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "peoplesoft_enterprise_peopletools", "product": { "name": "peoplesoft_enterprise_peopletools", "product_id": "CSAFPID-1503669", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:_web_server___8.59:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "peoplesoft_enterprise_peopletools", "product": { "name": "peoplesoft_enterprise_peopletools", "product_id": "CSAFPID-1503673", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:_web_server___8.60:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "peoplesoft_enterprise_peopletools", "product": { "name": "peoplesoft_enterprise_peopletools", "product_id": "CSAFPID-1503678", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:_web_server___8.61:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "peoplesoft_enterprise_scm_purchasing", "product": { "name": "peoplesoft_enterprise_scm_purchasing", "product_id": "CSAFPID-172660", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:peoplesoft_enterprise_scm_purchasing:9.2:*:*:*:*:*:*:*" } } } ], "category": "vendor", "name": "oracle" } ] }, "vulnerabilities": [ { "cve": "CVE-2020-22218", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "other", "text": "Out-of-bounds Read", "title": "CWE-125" }, { "category": "other", "text": "Out-of-bounds Write", "title": "CWE-787" } ], "product_status": { "known_affected": [ "CSAFPID-816362", "CSAFPID-1681" ] }, "references": [ { "category": "self", "summary": "CVE-2020-22218", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2020/CVE-2020-22218.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-816362", "CSAFPID-1681" ] } ], "title": "CVE-2020-22218" }, { "cve": "CVE-2023-48795", "cwe": { "id": "CWE-222", "name": "Truncation of Security-relevant Information" }, "notes": [ { "category": "other", "text": "Truncation of Security-relevant Information", "title": "CWE-222" }, { "category": "other", "text": "Selection of Less-Secure Algorithm During Negotiation (\u0027Algorithm Downgrade\u0027)", "title": "CWE-757" }, { "category": "other", "text": "Improper Validation of Integrity Check Value", "title": "CWE-354" } ], "product_status": { "known_affected": [ "CSAFPID-1682", "CSAFPID-1681", "CSAFPID-816362", "CSAFPID-172663", "CSAFPID-607590", "CSAFPID-1503667", "CSAFPID-1503669", "CSAFPID-1503672", "CSAFPID-1503673", "CSAFPID-1503676", "CSAFPID-1503678" ] }, "references": [ { "category": "self", "summary": "CVE-2023-48795", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-48795.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1682", "CSAFPID-1681", "CSAFPID-816362", "CSAFPID-172663", "CSAFPID-607590", "CSAFPID-1503667", "CSAFPID-1503669", "CSAFPID-1503672", "CSAFPID-1503673", "CSAFPID-1503676", "CSAFPID-1503678" ] } ], "title": "CVE-2023-48795" }, { "cve": "CVE-2024-0397", "product_status": { "known_affected": [ "CSAFPID-172663", "CSAFPID-607590", "CSAFPID-1503667", "CSAFPID-1503669", "CSAFPID-1682", "CSAFPID-1503672", "CSAFPID-1503673", "CSAFPID-1681", "CSAFPID-1503676", "CSAFPID-1503678", "CSAFPID-816362" ] }, "references": [ { "category": "self", "summary": "CVE-2024-0397", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-0397.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-172663", "CSAFPID-607590", "CSAFPID-1503667", "CSAFPID-1503669", "CSAFPID-1682", "CSAFPID-1503672", "CSAFPID-1503673", "CSAFPID-1681", "CSAFPID-1503676", "CSAFPID-1503678", "CSAFPID-816362" ] } ], "title": "CVE-2024-0397" }, { "cve": "CVE-2024-2511", "cwe": { "id": "CWE-404", "name": "Improper Resource Shutdown or Release" }, "notes": [ { "category": "other", "text": "Improper Resource Shutdown or Release", "title": "CWE-404" }, { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" }, { "category": "other", "text": "Improperly Controlled Sequential Memory Allocation", "title": "CWE-1325" } ], "product_status": { "known_affected": [ "CSAFPID-172663", "CSAFPID-607590", "CSAFPID-1503667", "CSAFPID-1503669", "CSAFPID-1682", "CSAFPID-1503672", "CSAFPID-1503673", "CSAFPID-1681", "CSAFPID-1503676", "CSAFPID-1503678", "CSAFPID-816362" ] }, "references": [ { "category": "self", "summary": "CVE-2024-2511", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-2511.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-172663", "CSAFPID-607590", "CSAFPID-1503667", "CSAFPID-1503669", "CSAFPID-1682", "CSAFPID-1503672", "CSAFPID-1503673", "CSAFPID-1681", "CSAFPID-1503676", "CSAFPID-1503678", "CSAFPID-816362" ] } ], "title": "CVE-2024-2511" }, { "cve": "CVE-2024-4030", "cwe": { "id": "CWE-276", "name": "Incorrect Default Permissions" }, "notes": [ { "category": "other", "text": "Incorrect Default Permissions", "title": "CWE-276" } ], "product_status": { "known_affected": [ "CSAFPID-816362", "CSAFPID-1681" ] }, "references": [ { "category": "self", "summary": "CVE-2024-4030", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-4030.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-816362", "CSAFPID-1681" ] } ], "title": "CVE-2024-4030" }, { "cve": "CVE-2024-4032", "cwe": { "id": "CWE-440", "name": "Expected Behavior Violation" }, "notes": [ { "category": "other", "text": "Expected Behavior Violation", "title": "CWE-440" } ], "product_status": { "known_affected": [ "CSAFPID-816362", "CSAFPID-1681" ] }, "references": [ { "category": "self", "summary": "CVE-2024-4032", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-4032.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "CSAFPID-816362", "CSAFPID-1681" ] } ], "title": "CVE-2024-4032" }, { "cve": "CVE-2024-4603", "cwe": { "id": "CWE-606", "name": "Unchecked Input for Loop Condition" }, "notes": [ { "category": "other", "text": "Unchecked Input for Loop Condition", "title": "CWE-606" }, { "category": "other", "text": "Excessive Iteration", "title": "CWE-834" } ], "product_status": { "known_affected": [ "CSAFPID-172663", "CSAFPID-607590", "CSAFPID-1503667", "CSAFPID-1503669", "CSAFPID-1682", "CSAFPID-1503672", "CSAFPID-1503673", "CSAFPID-1681", "CSAFPID-1503676", "CSAFPID-1503678", "CSAFPID-816362" ] }, "references": [ { "category": "self", "summary": "CVE-2024-4603", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-4603.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-172663", "CSAFPID-607590", "CSAFPID-1503667", "CSAFPID-1503669", "CSAFPID-1682", "CSAFPID-1503672", "CSAFPID-1503673", "CSAFPID-1681", "CSAFPID-1503676", "CSAFPID-1503678", "CSAFPID-816362" ] } ], "title": "CVE-2024-4603" }, { "cve": "CVE-2024-4741", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "other", "text": "Use After Free", "title": "CWE-416" } ], "product_status": { "known_affected": [ "CSAFPID-172663", "CSAFPID-607590", "CSAFPID-1503667", "CSAFPID-1503669", "CSAFPID-1682", "CSAFPID-1503672", "CSAFPID-1503673", "CSAFPID-1681", "CSAFPID-1503676", "CSAFPID-1503678", "CSAFPID-816362" ] }, "references": [ { "category": "self", "summary": "CVE-2024-4741", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-4741.json" } ], "title": "CVE-2024-4741" }, { "cve": "CVE-2024-5535", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "other", "text": "Exposure of Sensitive Information to an Unauthorized Actor", "title": "CWE-200" }, { "category": "other", "text": "Improper Restriction of Operations within the Bounds of a Memory Buffer", "title": "CWE-119" }, { "category": "other", "text": "Dependency on Vulnerable Third-Party Component", "title": "CWE-1395" } ], "product_status": { "known_affected": [ "CSAFPID-1681", "CSAFPID-816362" ] }, "references": [ { "category": "self", "summary": "CVE-2024-5535", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-5535.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1681", "CSAFPID-816362" ] } ], "title": "CVE-2024-5535" }, { "cve": "CVE-2024-6119", "cwe": { "id": "CWE-843", "name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)" }, "notes": [ { "category": "other", "text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)", "title": "CWE-843" } ], "product_status": { "known_affected": [ "CSAFPID-816362", "CSAFPID-1681" ] }, "references": [ { "category": "self", "summary": "CVE-2024-6119", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-6119.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-816362", "CSAFPID-1681" ] } ], "title": "CVE-2024-6119" }, { "cve": "CVE-2024-6232", "cwe": { "id": "CWE-1333", "name": "Inefficient Regular Expression Complexity" }, "notes": [ { "category": "other", "text": "Inefficient Regular Expression Complexity", "title": "CWE-1333" } ], "product_status": { "known_affected": [ "CSAFPID-816362", "CSAFPID-1681" ] }, "references": [ { "category": "self", "summary": "CVE-2024-6232", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-6232.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-816362", "CSAFPID-1681" ] } ], "title": "CVE-2024-6232" }, { "cve": "CVE-2024-7592", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" } ], "product_status": { "known_affected": [ "CSAFPID-816362", "CSAFPID-1681" ] }, "references": [ { "category": "self", "summary": "CVE-2024-7592", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-7592.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-816362", "CSAFPID-1681" ] } ], "title": "CVE-2024-7592" }, { "cve": "CVE-2024-22018", "cwe": { "id": "CWE-275", "name": "-" }, "notes": [ { "category": "other", "text": "CWE-275", "title": "CWE-275" } ], "product_status": { "known_affected": [ "CSAFPID-816362", "CSAFPID-1681" ] }, "references": [ { "category": "self", "summary": "CVE-2024-22018", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-22018.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-816362", "CSAFPID-1681" ] } ], "title": "CVE-2024-22018" }, { "cve": "CVE-2024-22019", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" }, { "category": "other", "text": "Improper Resource Shutdown or Release", "title": "CWE-404" } ], "product_status": { "known_affected": [ "CSAFPID-1681", "CSAFPID-1682", "CSAFPID-816362", "CSAFPID-172663", "CSAFPID-607590", "CSAFPID-1503667", "CSAFPID-1503669", "CSAFPID-1503672", "CSAFPID-1503673", "CSAFPID-1503676", "CSAFPID-1503678" ] }, "references": [ { "category": "self", "summary": "CVE-2024-22019", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-22019.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.2, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "version": "3.1" }, "products": [ "CSAFPID-1681", "CSAFPID-1682", "CSAFPID-816362", "CSAFPID-172663", "CSAFPID-607590", "CSAFPID-1503667", "CSAFPID-1503669", "CSAFPID-1503672", "CSAFPID-1503673", "CSAFPID-1503676", "CSAFPID-1503678" ] } ], "title": "CVE-2024-22019" }, { "cve": "CVE-2024-22020", "product_status": { "known_affected": [ "CSAFPID-816362", "CSAFPID-1681" ] }, "references": [ { "category": "self", "summary": "CVE-2024-22020", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-22020.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.2, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "version": "3.1" }, "products": [ "CSAFPID-816362", "CSAFPID-1681" ] } ], "title": "CVE-2024-22020" }, { "cve": "CVE-2024-27280", "cwe": { "id": "CWE-120", "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)" }, "notes": [ { "category": "other", "text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)", "title": "CWE-120" }, { "category": "other", "text": "Buffer Over-read", "title": "CWE-126" } ], "product_status": { "known_affected": [ "CSAFPID-816362", "CSAFPID-1681" ] }, "references": [ { "category": "self", "summary": "CVE-2024-27280", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27280.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-816362", "CSAFPID-1681" ] } ], "title": "CVE-2024-27280" }, { "cve": "CVE-2024-27281", "cwe": { "id": "CWE-94", "name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)" }, "notes": [ { "category": "other", "text": "Improper Control of Generation of Code (\u0027Code Injection\u0027)", "title": "CWE-94" }, { "category": "other", "text": "Deserialization of Untrusted Data", "title": "CWE-502" }, { "category": "other", "text": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)", "title": "CWE-74" } ], "product_status": { "known_affected": [ "CSAFPID-1681", "CSAFPID-816362" ] }, "references": [ { "category": "self", "summary": "CVE-2024-27281", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27281.json" } ], "title": "CVE-2024-27281" }, { "cve": "CVE-2024-27282", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "notes": [ { "category": "other", "text": "Heap-based Buffer Overflow", "title": "CWE-122" }, { "category": "other", "text": "Out-of-bounds Read", "title": "CWE-125" } ], "product_status": { "known_affected": [ "CSAFPID-816362", "CSAFPID-1681" ] }, "references": [ { "category": "self", "summary": "CVE-2024-27282", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27282.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-816362", "CSAFPID-1681" ] } ], "title": "CVE-2024-27282" }, { "cve": "CVE-2024-28849", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "other", "text": "Exposure of Sensitive Information to an Unauthorized Actor", "title": "CWE-200" } ], "product_status": { "known_affected": [ "CSAFPID-172663", "CSAFPID-607590", "CSAFPID-1503667", "CSAFPID-1503669", "CSAFPID-1682", "CSAFPID-1503672", "CSAFPID-1503673", "CSAFPID-1681", "CSAFPID-1503676", "CSAFPID-1503678", "CSAFPID-816362" ] }, "references": [ { "category": "self", "summary": "CVE-2024-28849", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-28849.json" } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "CSAFPID-172663", "CSAFPID-607590", "CSAFPID-1503667", "CSAFPID-1503669", "CSAFPID-1682", "CSAFPID-1503672", "CSAFPID-1503673", "CSAFPID-1681", "CSAFPID-1503676", "CSAFPID-1503678", "CSAFPID-816362" ] } ], "title": "CVE-2024-28849" }, { "cve": "CVE-2024-29025", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "other", "text": "Allocation of Resources Without Limits or Throttling", "title": "CWE-770" } ], "product_status": { "known_affected": [ "CSAFPID-172663", "CSAFPID-607590", "CSAFPID-1503667", "CSAFPID-1503669", "CSAFPID-1682", "CSAFPID-1503672", "CSAFPID-1503673", "CSAFPID-1681", "CSAFPID-1503676", "CSAFPID-1503678", "CSAFPID-816362" ] }, "references": [ { "category": "self", "summary": "CVE-2024-29025", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-29025.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.3, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.1" }, "products": [ "CSAFPID-172663", "CSAFPID-607590", "CSAFPID-1503667", "CSAFPID-1503669", "CSAFPID-1682", "CSAFPID-1503672", "CSAFPID-1503673", "CSAFPID-1681", "CSAFPID-1503676", "CSAFPID-1503678", "CSAFPID-816362" ] } ], "title": "CVE-2024-29025" }, { "cve": "CVE-2024-35195", "cwe": { "id": "CWE-670", "name": "Always-Incorrect Control Flow Implementation" }, "notes": [ { "category": "other", "text": "Always-Incorrect Control Flow Implementation", "title": "CWE-670" } ], "product_status": { "known_affected": [ "CSAFPID-816362", "CSAFPID-1681" ] }, "references": [ { "category": "self", "summary": "CVE-2024-35195", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-35195.json" } ], "scores": [ { "cvss_v3": { "baseScore": 5.7, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "CSAFPID-816362", "CSAFPID-1681" ] } ], "title": "CVE-2024-35195" }, { "cve": "CVE-2024-36137", "cwe": { "id": "CWE-275", "name": "-" }, "notes": [ { "category": "other", "text": "CWE-275", "title": "CWE-275" }, { "category": "other", "text": "Incorrect Permission Assignment for Critical Resource", "title": "CWE-732" } ], "product_status": { "known_affected": [ "CSAFPID-816362", "CSAFPID-1681" ] }, "references": [ { "category": "self", "summary": "CVE-2024-36137", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-36137.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-816362", "CSAFPID-1681" ] } ], "title": "CVE-2024-36137" }, { "cve": "CVE-2024-36138", "cwe": { "id": "CWE-77", "name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)" }, "notes": [ { "category": "other", "text": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)", "title": "CWE-77" } ], "product_status": { "known_affected": [ "CSAFPID-816362", "CSAFPID-1681" ] }, "references": [ { "category": "self", "summary": "CVE-2024-36138", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-36138.json" } ], "scores": [ { "cvss_v3": { "baseScore": 10.0, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-816362", "CSAFPID-1681" ] } ], "title": "CVE-2024-36138" }, { "cve": "CVE-2024-37372", "cwe": { "id": "CWE-22", "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)" }, "notes": [ { "category": "other", "text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)", "title": "CWE-22" }, { "category": "other", "text": "Improper Check for Unusual or Exceptional Conditions", "title": "CWE-754" } ], "product_status": { "known_affected": [ "CSAFPID-816362", "CSAFPID-1681" ] }, "references": [ { "category": "self", "summary": "CVE-2024-37372", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-37372.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-816362", "CSAFPID-1681" ] } ], "title": "CVE-2024-37372" }, { "cve": "CVE-2024-37891", "cwe": { "id": "CWE-669", "name": "Incorrect Resource Transfer Between Spheres" }, "notes": [ { "category": "other", "text": "Incorrect Resource Transfer Between Spheres", "title": "CWE-669" } ], "product_status": { "known_affected": [ "CSAFPID-816362", "CSAFPID-1681" ] }, "references": [ { "category": "self", "summary": "CVE-2024-37891", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-37891.json" } ], "scores": [ { "cvss_v3": { "baseScore": 4.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "CSAFPID-816362", "CSAFPID-1681" ] } ], "title": "CVE-2024-37891" }, { "cve": "CVE-2024-38998", "cwe": { "id": "CWE-1321", "name": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)" }, "notes": [ { "category": "other", "text": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)", "title": "CWE-1321" } ], "product_status": { "known_affected": [ "CSAFPID-816362", "CSAFPID-1681" ] }, "references": [ { "category": "self", "summary": "CVE-2024-38998", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38998.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-816362", "CSAFPID-1681" ] } ], "title": "CVE-2024-38998" }, { "cve": "CVE-2024-38999", "cwe": { "id": "CWE-1321", "name": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)" }, "notes": [ { "category": "other", "text": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)", "title": "CWE-1321" } ], "product_status": { "known_affected": [ "CSAFPID-816362", "CSAFPID-1681" ] }, "references": [ { "category": "self", "summary": "CVE-2024-38999", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38999.json" } ], "scores": [ { "cvss_v3": { "baseScore": 10.0, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-816362", "CSAFPID-1681" ] } ], "title": "CVE-2024-38999" }, { "cve": "CVE-2025-21530", "product_status": { "known_affected": [ "CSAFPID-1681", "CSAFPID-816362" ] }, "references": [ { "category": "self", "summary": "CVE-2025-21530", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-21530.json" } ], "scores": [ { "cvss_v3": { "baseScore": 4.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "CSAFPID-1681", "CSAFPID-816362" ] } ], "title": "CVE-2025-21530" }, { "cve": "CVE-2025-21537", "product_status": { "known_affected": [ "CSAFPID-765405" ] }, "references": [ { "category": "self", "summary": "CVE-2025-21537", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-21537.json" } ], "scores": [ { "cvss_v3": { "baseScore": 5.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "version": "3.1" }, "products": [ "CSAFPID-765405" ] } ], "title": "CVE-2025-21537" }, { "cve": "CVE-2025-21539", "product_status": { "known_affected": [ "CSAFPID-1751153" ] }, "references": [ { "category": "self", "summary": "CVE-2025-21539", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-21539.json" } ], "scores": [ { "cvss_v3": { "baseScore": 5.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "version": "3.1" }, "products": [ "CSAFPID-1751153" ] } ], "title": "CVE-2025-21539" }, { "cve": "CVE-2025-21545", "product_status": { "known_affected": [ "CSAFPID-1681", "CSAFPID-816362" ] }, "references": [ { "category": "self", "summary": "CVE-2025-21545", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-21545.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1681", "CSAFPID-816362" ] } ], "title": "CVE-2025-21545" }, { "cve": "CVE-2025-21561", "product_status": { "known_affected": [ "CSAFPID-172660" ] }, "references": [ { "category": "self", "summary": "CVE-2025-21561", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-21561.json" } ], "scores": [ { "cvss_v3": { "baseScore": 5.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "version": "3.1" }, "products": [ "CSAFPID-172660" ] } ], "title": "CVE-2025-21561" }, { "cve": "CVE-2025-21562", "product_status": { "known_affected": [ "CSAFPID-449779" ] }, "references": [ { "category": "self", "summary": "CVE-2025-21562", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-21562.json" } ], "scores": [ { "cvss_v3": { "baseScore": 4.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "CSAFPID-449779" ] } ], "title": "CVE-2025-21562" }, { "cve": "CVE-2025-21563", "product_status": { "known_affected": [ "CSAFPID-449779" ] }, "references": [ { "category": "self", "summary": "CVE-2025-21563", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-21563.json" } ], "scores": [ { "cvss_v3": { "baseScore": 4.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "version": "3.1" }, "products": [ "CSAFPID-449779" ] } ], "title": "CVE-2025-21563" } ] }
ncsc-2025-0026
Vulnerability from csaf_ncscnl
Notes
{ "document": { "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "nl", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." }, { "category": "description", "text": "Oracle heeft kwetsbaarheden verholpen in JD Edwards EnterpriseOne Tools (specifiek voor versies prior tot 9.2.9.2).", "title": "Feiten" }, { "category": "description", "text": "De kwetsbaarheden in Oracle JD Edwards EnterpriseOne Tools stellen ongeauthenticeerde kwaadwillenden in staat om het systeem te compromitteren via HTTP-verzoeken. Dit kan leiden tot ongeautoriseerde toegang tot kritieke gegevens en gegevenswijzigingen.", "title": "Interpretaties" }, { "category": "description", "text": "Oracle heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.", "title": "Oplossingen" }, { "category": "general", "text": "medium", "title": "Kans" }, { "category": "general", "text": "high", "title": "Schade" }, { "category": "general", "text": "Truncation of Security-relevant Information", "title": "CWE-222" }, { "category": "general", "text": "Use of Weak Hash", "title": "CWE-328" }, { "category": "general", "text": "Buffer Over-read", "title": "CWE-126" }, { "category": "general", "text": "Creation of Temporary File in Directory with Insecure Permissions", "title": "CWE-379" }, { "category": "general", "text": "Expected Behavior Violation", "title": "CWE-440" }, { "category": "general", "text": "Improper Validation of Syntactic Correctness of Input", "title": "CWE-1286" }, { "category": "general", "text": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)", "title": "CWE-601" }, { "category": "general", "text": "Improper Validation of Integrity Check Value", "title": "CWE-354" }, { "category": "general", "text": "Files or Directories Accessible to External Parties", "title": "CWE-552" }, { "category": "general", "text": "Selection of Less-Secure Algorithm During Negotiation (\u0027Algorithm Downgrade\u0027)", "title": "CWE-757" }, { "category": "general", "text": "Use of a Broken or Risky Cryptographic Algorithm", "title": "CWE-327" }, { "category": "general", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" }, { "category": "general", "text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)", "title": "CWE-22" }, { "category": "general", "text": "Out-of-bounds Write", "title": "CWE-787" }, { "category": "general", "text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)", "title": "CWE-120" }, { "category": "general", "text": "Unchecked Input for Loop Condition", "title": "CWE-606" }, { "category": "general", "text": "Use of Blocking Code in Single-threaded, Non-blocking Context", "title": "CWE-1322" }, { "category": "general", "text": "Improper Handling of Insufficient Permissions or Privileges ", "title": "CWE-280" }, { "category": "general", "text": "Improper Check for Unusual or Exceptional Conditions", "title": "CWE-754" }, { "category": "general", "text": "Missing Cryptographic Step", "title": "CWE-325" }, { "category": "general", "text": "Out-of-bounds Read", "title": "CWE-125" }, { "category": "general", "text": "Improper Resource Shutdown or Release", "title": "CWE-404" }, { "category": "general", "text": "NULL Pointer Dereference", "title": "CWE-476" }, { "category": "general", "text": "Improper Control of Generation of Code (\u0027Code Injection\u0027)", "title": "CWE-94" }, { "category": "general", "text": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)", "title": "CWE-74" }, { "category": "general", "text": "Deserialization of Untrusted Data", "title": "CWE-502" }, { "category": "general", "text": "Heap-based Buffer Overflow", "title": "CWE-122" }, { "category": "general", "text": "Improper Input Validation", "title": "CWE-20" }, { "category": "general", "text": "Incorrect Default Permissions", "title": "CWE-276" } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "Nationaal Cyber Security Centrum", "namespace": "https://www.ncsc.nl/" }, "references": [ { "category": "external", "summary": "Reference - cveprojectv5; nvd; oracle", "url": "https://www.oracle.com/security-alerts/cpujan2025.html" } ], "title": "Kwetsbaarheden verholpen in Oracle JD Edwards", "tracking": { "current_release_date": "2025-01-22T13:34:42.937250Z", "id": "NCSC-2025-0026", "initial_release_date": "2025-01-22T13:34:42.937250Z", "revision_history": [ { "date": "2025-01-22T13:34:42.937250Z", "number": "0", "summary": "Initiele versie" } ], "status": "final", "version": "1.0.0" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_name", "name": "jd_edwards_enterpriseone_orchestrator", "product": { "name": "jd_edwards_enterpriseone_orchestrator", "product_id": "CSAFPID-266143", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:jd_edwards_enterpriseone_orchestrator:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "jd_edwards_enterpriseone_orchestrator", "product": { "name": "jd_edwards_enterpriseone_orchestrator", "product_id": "CSAFPID-1751193", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:jd_edwards_enterpriseone_orchestrator:9.2.9.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "jd_edwards_enterpriseone_orchestrator", "product": { "name": "jd_edwards_enterpriseone_orchestrator", "product_id": "CSAFPID-1751158", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:jd_edwards_enterpriseone_orchestrator:prior_to_9.2.9.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "jd_edwards_enterpriseone_tools", "product": { "name": "jd_edwards_enterpriseone_tools", "product_id": "CSAFPID-266526", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "jd_edwards_enterpriseone_tools", "product": { "name": "jd_edwards_enterpriseone_tools", "product_id": "CSAFPID-611382", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2.7:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "jd_edwards_enterpriseone_tools", "product": { "name": "jd_edwards_enterpriseone_tools", "product_id": "CSAFPID-1751099", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2.9.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "jd_edwards_enterpriseone_tools", "product": { "name": "jd_edwards_enterpriseone_tools", "product_id": "CSAFPID-1751092", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2.9.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "jd_edwards_enterpriseone_tools", "product": { "name": "jd_edwards_enterpriseone_tools", "product_id": "CSAFPID-1650738", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:prior_to_9.2.8.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "jd_edwards_enterpriseone_tools", "product": { "name": "jd_edwards_enterpriseone_tools", "product_id": "CSAFPID-1751123", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:prior_to_9.2.9.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "jd_edwards_enterpriseone_tools", "product": { "name": "jd_edwards_enterpriseone_tools", "product_id": "CSAFPID-1751154", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:prior_to_9.2.9.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "jd_edwards_world_security", "product": { "name": "jd_edwards_world_security", "product_id": "CSAFPID-41391", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:jd_edwards_world_security:a9.4:*:*:*:*:*:*:*" } } } ], "category": "vendor", "name": "oracle" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-2976", "cwe": { "id": "CWE-552", "name": "Files or Directories Accessible to External Parties" }, "notes": [ { "category": "other", "text": "Files or Directories Accessible to External Parties", "title": "CWE-552" }, { "category": "other", "text": "Creation of Temporary File in Directory with Insecure Permissions", "title": "CWE-379" } ], "product_status": { "known_affected": [ "CSAFPID-266143", "CSAFPID-266526", "CSAFPID-611382", "CSAFPID-41391", "CSAFPID-1751123" ] }, "references": [ { "category": "self", "summary": "CVE-2023-2976", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-2976.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-266143", "CSAFPID-266526", "CSAFPID-611382", "CSAFPID-41391", "CSAFPID-1751123" ] } ], "title": "CVE-2023-2976" }, { "cve": "CVE-2023-3961", "cwe": { "id": "CWE-22", "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)" }, "notes": [ { "category": "other", "text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)", "title": "CWE-22" } ], "product_status": { "known_affected": [ "CSAFPID-1751154" ] }, "references": [ { "category": "self", "summary": "CVE-2023-3961", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-3961.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1751154" ] } ], "title": "CVE-2023-3961" }, { "cve": "CVE-2023-4091", "cwe": { "id": "CWE-276", "name": "Incorrect Default Permissions" }, "notes": [ { "category": "other", "text": "Incorrect Default Permissions", "title": "CWE-276" }, { "category": "other", "text": "Improper Handling of Insufficient Permissions or Privileges ", "title": "CWE-280" } ], "product_status": { "known_affected": [ "CSAFPID-1751154" ] }, "references": [ { "category": "self", "summary": "CVE-2023-4091", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-4091.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1751154" ] } ], "title": "CVE-2023-4091" }, { "cve": "CVE-2023-4782", "cwe": { "id": "CWE-22", "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)" }, "notes": [ { "category": "other", "text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)", "title": "CWE-22" } ], "product_status": { "known_affected": [ "CSAFPID-1751154" ] }, "references": [ { "category": "self", "summary": "CVE-2023-4782", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-4782.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1751154" ] } ], "title": "CVE-2023-4782" }, { "cve": "CVE-2023-5678", "cwe": { "id": "CWE-754", "name": "Improper Check for Unusual or Exceptional Conditions" }, "notes": [ { "category": "other", "text": "Improper Check for Unusual or Exceptional Conditions", "title": "CWE-754" }, { "category": "other", "text": "Missing Cryptographic Step", "title": "CWE-325" }, { "category": "other", "text": "Unchecked Input for Loop Condition", "title": "CWE-606" }, { "category": "other", "text": "Improper Input Validation", "title": "CWE-20" } ], "product_status": { "known_affected": [ "CSAFPID-266143", "CSAFPID-266526", "CSAFPID-41391", "CSAFPID-1751123" ] }, "references": [ { "category": "self", "summary": "CVE-2023-5678", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-5678.json" } ], "title": "CVE-2023-5678" }, { "cve": "CVE-2023-6129", "cwe": { "id": "CWE-328", "name": "Use of Weak Hash" }, "notes": [ { "category": "other", "text": "Use of Weak Hash", "title": "CWE-328" }, { "category": "other", "text": "Expected Behavior Violation", "title": "CWE-440" }, { "category": "other", "text": "Out-of-bounds Write", "title": "CWE-787" }, { "category": "other", "text": "Use of a Broken or Risky Cryptographic Algorithm", "title": "CWE-327" } ], "product_status": { "known_affected": [ "CSAFPID-41391", "CSAFPID-266143", "CSAFPID-266526", "CSAFPID-1751123" ] }, "references": [ { "category": "self", "summary": "CVE-2023-6129", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-6129.json" } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H", "version": "3.1" }, "products": [ "CSAFPID-41391", "CSAFPID-266143", "CSAFPID-266526", "CSAFPID-1751123" ] } ], "title": "CVE-2023-6129" }, { "cve": "CVE-2023-38552", "cwe": { "id": "CWE-354", "name": "Improper Validation of Integrity Check Value" }, "notes": [ { "category": "other", "text": "Improper Validation of Integrity Check Value", "title": "CWE-354" }, { "category": "other", "text": "Improper Input Validation", "title": "CWE-20" } ], "product_status": { "known_affected": [ "CSAFPID-1650738", "CSAFPID-266143", "CSAFPID-266526", "CSAFPID-41391", "CSAFPID-1751154" ] }, "references": [ { "category": "self", "summary": "CVE-2023-38552", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-38552.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.2, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "version": "3.1" }, "products": [ "CSAFPID-1650738", "CSAFPID-266143", "CSAFPID-266526", "CSAFPID-41391", "CSAFPID-1751154" ] } ], "title": "CVE-2023-38552" }, { "cve": "CVE-2023-39017", "product_status": { "known_affected": [ "CSAFPID-611382" ] }, "references": [ { "category": "self", "summary": "CVE-2023-39017", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-39017.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-611382" ] } ], "title": "CVE-2023-39017" }, { "cve": "CVE-2023-42669", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" }, { "category": "other", "text": "Use of Blocking Code in Single-threaded, Non-blocking Context", "title": "CWE-1322" } ], "product_status": { "known_affected": [ "CSAFPID-1751154" ] }, "references": [ { "category": "self", "summary": "CVE-2023-42669", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-42669.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1751154" ] } ], "title": "CVE-2023-42669" }, { "cve": "CVE-2023-48795", "cwe": { "id": "CWE-222", "name": "Truncation of Security-relevant Information" }, "notes": [ { "category": "other", "text": "Truncation of Security-relevant Information", "title": "CWE-222" }, { "category": "other", "text": "Selection of Less-Secure Algorithm During Negotiation (\u0027Algorithm Downgrade\u0027)", "title": "CWE-757" }, { "category": "other", "text": "Improper Validation of Integrity Check Value", "title": "CWE-354" } ], "product_status": { "known_affected": [ "CSAFPID-266143", "CSAFPID-266526", "CSAFPID-41391", "CSAFPID-1751123" ] }, "references": [ { "category": "self", "summary": "CVE-2023-48795", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-48795.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-266143", "CSAFPID-266526", "CSAFPID-41391", "CSAFPID-1751123" ] } ], "title": "CVE-2023-48795" }, { "cve": "CVE-2024-0727", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "other", "text": "NULL Pointer Dereference", "title": "CWE-476" }, { "category": "other", "text": "Improper Input Validation", "title": "CWE-20" } ], "product_status": { "known_affected": [ "CSAFPID-266143", "CSAFPID-266526", "CSAFPID-41391", "CSAFPID-1751123" ] }, "references": [ { "category": "self", "summary": "CVE-2024-0727", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-0727.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-266143", "CSAFPID-266526", "CSAFPID-41391", "CSAFPID-1751123" ] } ], "title": "CVE-2024-0727" }, { "cve": "CVE-2024-21245", "product_status": { "known_affected": [ "CSAFPID-1751123" ] }, "references": [ { "category": "self", "summary": "CVE-2024-21245", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-21245.json" } ], "scores": [ { "cvss_v3": { "baseScore": 5.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "version": "3.1" }, "products": [ "CSAFPID-1751123" ] } ], "title": "CVE-2024-21245" }, { "cve": "CVE-2024-22019", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" }, { "category": "other", "text": "Improper Resource Shutdown or Release", "title": "CWE-404" } ], "product_status": { "known_affected": [ "CSAFPID-1751154", "CSAFPID-266143", "CSAFPID-266526", "CSAFPID-41391" ] }, "references": [ { "category": "self", "summary": "CVE-2024-22019", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-22019.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.2, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "version": "3.1" }, "products": [ "CSAFPID-1751154", "CSAFPID-266143", "CSAFPID-266526", "CSAFPID-41391" ] } ], "title": "CVE-2024-22019" }, { "cve": "CVE-2024-22020", "product_status": { "known_affected": [ "CSAFPID-1751154" ] }, "references": [ { "category": "self", "summary": "CVE-2024-22020", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-22020.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.2, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "version": "3.1" }, "products": [ "CSAFPID-1751154" ] } ], "title": "CVE-2024-22020" }, { "cve": "CVE-2024-27280", "cwe": { "id": "CWE-120", "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)" }, "notes": [ { "category": "other", "text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)", "title": "CWE-120" }, { "category": "other", "text": "Buffer Over-read", "title": "CWE-126" } ], "product_status": { "known_affected": [ "CSAFPID-1751154" ] }, "references": [ { "category": "self", "summary": "CVE-2024-27280", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27280.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1751154" ] } ], "title": "CVE-2024-27280" }, { "cve": "CVE-2024-27281", "cwe": { "id": "CWE-94", "name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)" }, "notes": [ { "category": "other", "text": "Improper Control of Generation of Code (\u0027Code Injection\u0027)", "title": "CWE-94" }, { "category": "other", "text": "Deserialization of Untrusted Data", "title": "CWE-502" }, { "category": "other", "text": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)", "title": "CWE-74" } ], "product_status": { "known_affected": [ "CSAFPID-1751154" ] }, "references": [ { "category": "self", "summary": "CVE-2024-27281", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27281.json" } ], "title": "CVE-2024-27281" }, { "cve": "CVE-2024-27282", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "notes": [ { "category": "other", "text": "Heap-based Buffer Overflow", "title": "CWE-122" }, { "category": "other", "text": "Out-of-bounds Read", "title": "CWE-125" } ], "product_status": { "known_affected": [ "CSAFPID-1751154" ] }, "references": [ { "category": "self", "summary": "CVE-2024-27282", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27282.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1751154" ] } ], "title": "CVE-2024-27282" }, { "cve": "CVE-2024-27983", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" } ], "product_status": { "known_affected": [ "CSAFPID-1650738", "CSAFPID-266143", "CSAFPID-266526", "CSAFPID-41391", "CSAFPID-1751154" ] }, "references": [ { "category": "self", "summary": "CVE-2024-27983", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27983.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.2, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "version": "3.1" }, "products": [ "CSAFPID-1650738", "CSAFPID-266143", "CSAFPID-266526", "CSAFPID-41391", "CSAFPID-1751154" ] } ], "title": "CVE-2024-27983" }, { "cve": "CVE-2024-29041", "cwe": { "id": "CWE-601", "name": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)" }, "notes": [ { "category": "other", "text": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)", "title": "CWE-601" }, { "category": "other", "text": "Improper Validation of Syntactic Correctness of Input", "title": "CWE-1286" } ], "product_status": { "known_affected": [ "CSAFPID-266143", "CSAFPID-266526", "CSAFPID-41391", "CSAFPID-1751154" ] }, "references": [ { "category": "self", "summary": "CVE-2024-29041", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-29041.json" } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "CSAFPID-266143", "CSAFPID-266526", "CSAFPID-41391", "CSAFPID-1751154" ] } ], "title": "CVE-2024-29041" }, { "cve": "CVE-2025-21507", "product_status": { "known_affected": [ "CSAFPID-1751123" ] }, "references": [ { "category": "self", "summary": "CVE-2025-21507", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-21507.json" } ], "scores": [ { "cvss_v3": { "baseScore": 5.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "version": "3.1" }, "products": [ "CSAFPID-1751123" ] } ], "title": "CVE-2025-21507" }, { "cve": "CVE-2025-21508", "product_status": { "known_affected": [ "CSAFPID-1751123" ] }, "references": [ { "category": "self", "summary": "CVE-2025-21508", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-21508.json" } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1751123" ] } ], "title": "CVE-2025-21508" }, { "cve": "CVE-2025-21509", "product_status": { "known_affected": [ "CSAFPID-1751123" ] }, "references": [ { "category": "self", "summary": "CVE-2025-21509", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-21509.json" } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1751123" ] } ], "title": "CVE-2025-21509" }, { "cve": "CVE-2025-21510", "product_status": { "known_affected": [ "CSAFPID-1751123" ] }, "references": [ { "category": "self", "summary": "CVE-2025-21510", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-21510.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "CSAFPID-1751123" ] } ], "title": "CVE-2025-21510" }, { "cve": "CVE-2025-21511", "product_status": { "known_affected": [ "CSAFPID-1751123" ] }, "references": [ { "category": "self", "summary": "CVE-2025-21511", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-21511.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "CSAFPID-1751123" ] } ], "title": "CVE-2025-21511" }, { "cve": "CVE-2025-21512", "product_status": { "known_affected": [ "CSAFPID-1751123" ] }, "references": [ { "category": "self", "summary": "CVE-2025-21512", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-21512.json" } ], "scores": [ { "cvss_v3": { "baseScore": 6.1, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1" }, "products": [ "CSAFPID-1751123" ] } ], "title": "CVE-2025-21512" }, { "cve": "CVE-2025-21513", "product_status": { "known_affected": [ "CSAFPID-1751123" ] }, "references": [ { "category": "self", "summary": "CVE-2025-21513", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-21513.json" } ], "scores": [ { "cvss_v3": { "baseScore": 6.1, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1" }, "products": [ "CSAFPID-1751123" ] } ], "title": "CVE-2025-21513" }, { "cve": "CVE-2025-21514", "product_status": { "known_affected": [ "CSAFPID-1751123" ] }, "references": [ { "category": "self", "summary": "CVE-2025-21514", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-21514.json" } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "CSAFPID-1751123" ] } ], "title": "CVE-2025-21514" }, { "cve": "CVE-2025-21515", "product_status": { "known_affected": [ "CSAFPID-1751123" ] }, "references": [ { "category": "self", "summary": "CVE-2025-21515", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-21515.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1751123" ] } ], "title": "CVE-2025-21515" }, { "cve": "CVE-2025-21517", "product_status": { "known_affected": [ "CSAFPID-1751123" ] }, "references": [ { "category": "self", "summary": "CVE-2025-21517", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-21517.json" } ], "scores": [ { "cvss_v3": { "baseScore": 4.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "version": "3.1" }, "products": [ "CSAFPID-1751123" ] } ], "title": "CVE-2025-21517" }, { "cve": "CVE-2025-21524", "product_status": { "known_affected": [ "CSAFPID-1751123" ] }, "references": [ { "category": "self", "summary": "CVE-2025-21524", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-21524.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1751123" ] } ], "title": "CVE-2025-21524" }, { "cve": "CVE-2025-21527", "product_status": { "known_affected": [ "CSAFPID-1751123" ] }, "references": [ { "category": "self", "summary": "CVE-2025-21527", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-21527.json" } ], "scores": [ { "cvss_v3": { "baseScore": 6.1, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1" }, "products": [ "CSAFPID-1751123" ] } ], "title": "CVE-2025-21527" }, { "cve": "CVE-2025-21538", "product_status": { "known_affected": [ "CSAFPID-1751154" ] }, "references": [ { "category": "self", "summary": "CVE-2025-21538", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-21538.json" } ], "scores": [ { "cvss_v3": { "baseScore": 6.1, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1" }, "products": [ "CSAFPID-1751154" ] } ], "title": "CVE-2025-21538" }, { "cve": "CVE-2025-21552", "product_status": { "known_affected": [ "CSAFPID-1751158" ] }, "references": [ { "category": "self", "summary": "CVE-2025-21552", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-21552.json" } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "CSAFPID-1751158" ] } ], "title": "CVE-2025-21552" } ] }
NCSC-2024-0411
Vulnerability from csaf_ncscnl
Notes
{ "document": { "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "nl", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." }, { "category": "description", "text": "Oracle heeft kwetsbaarheden verholpen in diverse Database producten en subsystemen, zoals de Core database, Application Express, Autonomous Health Framework, Essbase, GoldenGate, SQL Developer en Secure Backup.", "title": "Feiten" }, { "category": "description", "text": "Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorie\u00ebn schade:\n\n- Denial-of-Service (DoS)\n- Manipuleren van data\n- Toegang tot gevoelige gegevens", "title": "Interpretaties" }, { "category": "description", "text": "Oracle heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.", "title": "Oplossingen" }, { "category": "general", "text": "medium", "title": "Kans" }, { "category": "general", "text": "high", "title": "Schade" }, { "category": "general", "text": "Improper Handling of Length Parameter Inconsistency", "title": "CWE-130" }, { "category": "general", "text": "Observable Timing Discrepancy", "title": "CWE-208" }, { "category": "general", "text": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)", "title": "CWE-776" }, { "category": "general", "text": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)", "title": "CWE-88" }, { "category": "general", "text": "Improper Handling of Exceptional Conditions", "title": "CWE-755" }, { "category": "general", "text": "Excessive Iteration", "title": "CWE-834" }, { "category": "general", "text": "Inefficient Algorithmic Complexity", "title": "CWE-407" }, { "category": "general", "text": "Improper Handling of Case Sensitivity", "title": "CWE-178" }, { "category": "general", "text": "Incorrect Permission Assignment for Critical Resource", "title": "CWE-732" }, { "category": "general", "text": "Double Free", "title": "CWE-415" }, { "category": "general", "text": "Missing Encryption of Sensitive Data", "title": "CWE-311" }, { "category": "general", "text": "Uncontrolled Search Path Element", "title": "CWE-427" }, { "category": "general", "text": "Encoding Error", "title": "CWE-172" }, { "category": "general", "text": "Integer Overflow to Buffer Overflow", "title": "CWE-680" }, { "category": "general", "text": "Untrusted Search Path", "title": "CWE-426" }, { "category": "general", "text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)", "title": "CWE-843" }, { "category": "general", "text": "Improper Encoding or Escaping of Output", "title": "CWE-116" }, { "category": "general", "text": "Insufficient Verification of Data Authenticity", "title": "CWE-345" }, { "category": "general", "text": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)", "title": "CWE-77" }, { "category": "general", "text": "Observable Discrepancy", "title": "CWE-203" }, { "category": "general", "text": "Integer Overflow or Wraparound", "title": "CWE-190" }, { "category": "general", "text": "Files or Directories Accessible to External Parties", "title": "CWE-552" }, { "category": "general", "text": "Authorization Bypass Through User-Controlled Key", "title": "CWE-639" }, { "category": "general", "text": "Out-of-bounds Read", "title": "CWE-125" }, { "category": "general", "text": "Improper Resource Shutdown or Release", "title": "CWE-404" }, { "category": "general", "text": "CWE-275", "title": "CWE-275" }, { "category": "general", "text": "Improper Access Control", "title": "CWE-284" }, { "category": "general", "text": "Improper Restriction of Operations within the Bounds of a Memory Buffer", "title": "CWE-119" }, { "category": "general", "text": "Inefficient Regular Expression Complexity", "title": "CWE-1333" }, { "category": "general", "text": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)", "title": "CWE-1321" }, { "category": "general", "text": "Use After Free", "title": "CWE-416" }, { "category": "general", "text": "Missing Release of Memory after Effective Lifetime", "title": "CWE-401" }, { "category": "general", "text": "NULL Pointer Dereference", "title": "CWE-476" }, { "category": "general", "text": "Improper Certificate Validation", "title": "CWE-295" }, { "category": "general", "text": "Exposure of Resource to Wrong Sphere", "title": "CWE-668" }, { "category": "general", "text": "Inclusion of Functionality from Untrusted Control Sphere", "title": "CWE-829" }, { "category": "general", "text": "Use of a Broken or Risky Cryptographic Algorithm", "title": "CWE-327" }, { "category": "general", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" }, { "category": "general", "text": "Allocation of Resources Without Limits or Throttling", "title": "CWE-770" }, { "category": "general", "text": "Deserialization of Untrusted Data", "title": "CWE-502" }, { "category": "general", "text": "Server-Side Request Forgery (SSRF)", "title": "CWE-918" }, { "category": "general", "text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)", "title": "CWE-78" }, { "category": "general", "text": "Out-of-bounds Write", "title": "CWE-787" }, { "category": "general", "text": "Exposure of Sensitive Information to an Unauthorized Actor", "title": "CWE-200" }, { "category": "general", "text": "Heap-based Buffer Overflow", "title": "CWE-122" }, { "category": "general", "text": "Stack-based Buffer Overflow", "title": "CWE-121" }, { "category": "general", "text": "Incorrect Conversion between Numeric Types", "title": "CWE-681" }, { "category": "general", "text": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)", "title": "CWE-835" }, { "category": "general", "text": "Improper Privilege Management", "title": "CWE-269" }, { "category": "general", "text": "Improper Input Validation", "title": "CWE-20" }, { "category": "general", "text": "Improper Neutralization of Alternate XSS Syntax", "title": "CWE-87" }, { "category": "general", "text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)", "title": "CWE-79" }, { "category": "general", "text": "CWE-18", "title": "CWE-18" }, { "category": "general", "text": "Covert Timing Channel", "title": "CWE-385" }, { "category": "general", "text": "Unchecked Input for Loop Condition", "title": "CWE-606" }, { "category": "general", "text": "Integer Coercion Error", "title": "CWE-192" }, { "category": "general", "text": "Detection of Error Condition Without Action", "title": "CWE-390" }, { "category": "general", "text": "Improperly Controlled Sequential Memory Allocation", "title": "CWE-1325" }, { "category": "general", "text": "Truncation of Security-relevant Information", "title": "CWE-222" }, { "category": "general", "text": "Incorrect Calculation of Buffer Size", "title": "CWE-131" }, { "category": "general", "text": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)", "title": "CWE-59" }, { "category": "general", "text": "Missing Critical Step in Authentication", "title": "CWE-304" } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "Nationaal Cyber Security Centrum", "namespace": "https://www.ncsc.nl/" }, "references": [ { "category": "external", "summary": "Reference - cveprojectv5; hkcert; nvd; oracle; redhat", "url": "https://www.oracle.com/security-alerts/cpuoct2024.html" } ], "title": "Kwetsbaarheden verholpen in Oracle Database producten", "tracking": { "current_release_date": "2024-10-17T13:15:19.595269Z", "id": "NCSC-2024-0411", "initial_release_date": "2024-10-17T13:15:19.595269Z", "revision_history": [ { "date": "2024-10-17T13:15:19.595269Z", "number": "0", "summary": "Initiele versie" } ], "status": "final", "version": "1.0.0" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_name", "name": "database_-_grid", "product": { "name": "database_-_grid", "product_id": "CSAFPID-1673504", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_-_grid:19.3-19.24:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_-_grid", "product": { "name": "database_-_grid", "product_id": "CSAFPID-1673506", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_-_grid:21.3-21.15:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_-_core", "product": { "name": "database_-_core", "product_id": "CSAFPID-1673386", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_-_core:19.3-19.24:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_-_core", "product": { "name": "database_-_core", "product_id": "CSAFPID-1673385", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_-_core:21.3-21.15:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_-_core", "product": { "name": "database_-_core", "product_id": "CSAFPID-1673442", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_-_core:23.4-23.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_-_security", "product": { "name": "database_-_security", "product_id": "CSAFPID-1673507", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_-_security:19.3-19.24:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_-_security", "product": { "name": "database_-_security", "product_id": "CSAFPID-1673509", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_-_security:21.3-21.15:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_-_security", "product": { "name": "database_-_security", "product_id": "CSAFPID-1673508", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_-_security:23.4-23.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "spatial_and_graph_mapviewer", "product": { "name": "spatial_and_graph_mapviewer", "product_id": "CSAFPID-912561", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:spatial_and_graph_mapviewer:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "spatial_and_graph", "product": { "name": "spatial_and_graph", "product_id": "CSAFPID-764250", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:spatial_and_graph:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "spatial_and_graph", "product": { "name": "spatial_and_graph", "product_id": "CSAFPID-1673511", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:spatial_and_graph:19.3-19.24:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "spatial_and_graph", "product": { "name": "spatial_and_graph", "product_id": "CSAFPID-1673512", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:spatial_and_graph:21.3-21.15:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "spatial_and_graph", "product": { "name": "spatial_and_graph", "product_id": "CSAFPID-816800", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:spatial_and_graph:23.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "spatial_and_graph", "product": { "name": "spatial_and_graph", "product_id": "CSAFPID-1673529", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:spatial_and_graph:23.4-23.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "fleet_patching_and_provisioning_-_micronaut", "product": { "name": "fleet_patching_and_provisioning_-_micronaut", "product_id": "CSAFPID-1673492", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:fleet_patching_and_provisioning_-_micronaut:23.4-23.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "fleet_patching_and_provisioning", "product": { "name": "fleet_patching_and_provisioning", "product_id": "CSAFPID-1503603", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:fleet_patching_and_provisioning:23.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_-_xml_database", "product": { "name": "database_-_xml_database", "product_id": "CSAFPID-1673445", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_-_xml_database:19.3-19.24:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_-_xml_database", "product": { "name": "database_-_xml_database", "product_id": "CSAFPID-1673443", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_-_xml_database:21.3-21.15:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_-_xml_database", "product": { "name": "database_-_xml_database", "product_id": "CSAFPID-1673444", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_-_xml_database:23.4-23.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_-_java_vm", "product": { "name": "database_-_java_vm", "product_id": "CSAFPID-1673451", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_-_java_vm:19.3-19.24:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_-_java_vm", "product": { "name": "database_-_java_vm", "product_id": "CSAFPID-1673450", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_-_java_vm:21.3-21.15:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_-_java_vm", "product": { "name": "database_-_java_vm", "product_id": "CSAFPID-1673452", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_-_java_vm:23.4-23.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "autonomous_health_framework", "product": { "name": "autonomous_health_framework", "product_id": "CSAFPID-816798", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:autonomous_health_framework:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "autonomous_health_framework", "product": { "name": "autonomous_health_framework", "product_id": "CSAFPID-816799", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:autonomous_health_framework:23.10:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "autonomous_health_framework", "product": { "name": "autonomous_health_framework", "product_id": "CSAFPID-1673525", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:autonomous_health_framework:prior_to_24.9:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "graalvm_for_jdk", "product": { "name": "graalvm_for_jdk", "product_id": "CSAFPID-912046", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:graalvm_for_jdk:17.0.10:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "graalvm_for_jdk", "product": { "name": "graalvm_for_jdk", "product_id": "CSAFPID-1503299", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:graalvm_for_jdk:17.0.11:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "graalvm_for_jdk", "product": { "name": "graalvm_for_jdk", "product_id": "CSAFPID-816855", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:graalvm_for_jdk:17.0.9:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "graalvm_for_jdk", "product": { "name": "graalvm_for_jdk", "product_id": "CSAFPID-816361", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:graalvm_for_jdk:21.0.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "graalvm_for_jdk", "product": { "name": "graalvm_for_jdk", "product_id": "CSAFPID-912045", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:graalvm_for_jdk:21.0.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "graalvm_for_jdk", "product": { "name": "graalvm_for_jdk", "product_id": "CSAFPID-1503302", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:graalvm_for_jdk:21.0.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "graalvm_for_jdk", "product": { "name": "graalvm_for_jdk", "product_id": "CSAFPID-912044", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:graalvm_for_jdk:22:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "graalvm_for_jdk", "product": { "name": "graalvm_for_jdk", "product_id": "CSAFPID-1503306", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:graalvm_for_jdk:22.0.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "graalvm_for_jdk", "product": { "name": "graalvm_for_jdk", "product_id": "CSAFPID-816852", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:graalvm_for_jdk:graalvm_enterprise_edition20.3.12:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "graalvm_for_jdk", "product": { "name": "graalvm_for_jdk", "product_id": "CSAFPID-912600", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:graalvm_for_jdk:graalvm_enterprise_edition20.3.13:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "graalvm_for_jdk", "product": { "name": "graalvm_for_jdk", "product_id": "CSAFPID-816853", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:graalvm_for_jdk:graalvm_enterprise_edition21.3.8:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "graalvm_for_jdk", "product": { "name": "graalvm_for_jdk", "product_id": "CSAFPID-912601", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:graalvm_for_jdk:graalvm_enterprise_edition21.3.9:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "graalvm_for_jdk", "product": { "name": "graalvm_for_jdk", "product_id": "CSAFPID-816854", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:graalvm_for_jdk:graalvm_enterprise_edition22.3.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sqlcl", "product": { "name": "sqlcl", "product_id": "CSAFPID-816801", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:sqlcl:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sqlcl", "product": { "name": "sqlcl", "product_id": "CSAFPID-1673405", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:sqlcl:23.4-23.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "application_express_administration", "product": { "name": "application_express_administration", "product_id": "CSAFPID-764731", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:application_express_administration:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "application_express_customers_plugin", "product": { "name": "application_express_customers_plugin", "product_id": "CSAFPID-764732", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:application_express_customers_plugin:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "application_express_team_calendar_plugin", "product": { "name": "application_express_team_calendar_plugin", "product_id": "CSAFPID-764733", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:application_express_team_calendar_plugin:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "application_express", "product": { "name": "application_express", "product_id": "CSAFPID-266119", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:application_express:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "application_express", "product": { "name": "application_express", "product_id": "CSAFPID-1673510", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:application_express:23.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "application_express", "product": { "name": "application_express", "product_id": "CSAFPID-1503575", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:application_express:23.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "application_express", "product": { "name": "application_express", "product_id": "CSAFPID-1673188", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:application_express:24.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "autonomous_health_framework", "product": { "name": "autonomous_health_framework", "product_id": "CSAFPID-765238", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:autonomous_health_framework:19c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "autonomous_health_framework", "product": { "name": "autonomous_health_framework", "product_id": "CSAFPID-765239", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:autonomous_health_framework:21c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "blockchain_platform", "product": { "name": "blockchain_platform", "product_id": "CSAFPID-764779", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:blockchain_platform:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "blockchain_platform", "product": { "name": "blockchain_platform", "product_id": "CSAFPID-89587", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:blockchain_platform:21.1.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "essbase", "product": { "name": "essbase", "product_id": "CSAFPID-765259", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:essbase:_security_and_provisioning___21.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "essbase", "product": { "name": "essbase", "product_id": "CSAFPID-187448", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:essbase:21.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "essbase", "product": { "name": "essbase", "product_id": "CSAFPID-94075", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:essbase:21.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "essbase", "product": { "name": "essbase", "product_id": "CSAFPID-220886", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:essbase:21.4.3.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "essbase", "product": { "name": "essbase", "product_id": "CSAFPID-611394", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:essbase:21.5.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "essbase", "product": { "name": "essbase", "product_id": "CSAFPID-816317", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:essbase:21.5.3.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "essbase", "product": { "name": "essbase", "product_id": "CSAFPID-912567", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:essbase:21.5.4.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "essbase", "product": { "name": "essbase", "product_id": "CSAFPID-1503612", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:essbase:21.5.6:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "essbase", "product": { "name": "essbase", "product_id": "CSAFPID-1673479", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:essbase:21.6:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "oracle_essbase", "product": { "name": "oracle_essbase", "product_id": "CSAFPID-1650506", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:oracle_essbase:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "goldengate_big_data_and_application_adapters", "product": { "name": "goldengate_big_data_and_application_adapters", "product_id": "CSAFPID-816845", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "goldengate_big_data_and_application_adapters", "product": { "name": "goldengate_big_data_and_application_adapters", "product_id": "CSAFPID-1650825", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "goldengate_big_data_and_application_adapters", "product": { "name": "goldengate_big_data_and_application_adapters", "product_id": "CSAFPID-1673404", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.9:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "goldengate_big_data_and_application_adapters", "product": { "name": "goldengate_big_data_and_application_adapters", "product_id": "CSAFPID-1650831", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3-21.14.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "goldengate_big_data", "product": { "name": "goldengate_big_data", "product_id": "CSAFPID-764274", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:goldengate_big_data:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "goldengate_stream_analytics", "product": { "name": "goldengate_stream_analytics", "product_id": "CSAFPID-764752", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:goldengate_stream_analytics:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "goldengate_stream_analytics", "product": { "name": "goldengate_stream_analytics", "product_id": "CSAFPID-1673384", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.9:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "goldengate_stream_analytics", "product": { "name": "goldengate_stream_analytics", "product_id": "CSAFPID-220192", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "goldengate_stream_analytics", "product": { "name": "goldengate_stream_analytics", "product_id": "CSAFPID-220193", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.7:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "goldengate_studio", "product": { "name": "goldengate_studio", "product_id": "CSAFPID-816846", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:goldengate_studio:12.2.0.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "goldengate_studio", "product": { "name": "goldengate_studio", "product_id": "CSAFPID-611390", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:goldengate_studio:12.2.1.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "goldengate_studio", "product": { "name": "goldengate_studio", "product_id": "CSAFPID-764803", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:goldengate_studio:fusion_middleware_12.2.1.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "goldengate_veridata", "product": { "name": "goldengate_veridata", "product_id": "CSAFPID-764275", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:goldengate_veridata:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "goldengate", "product": { "name": "goldengate", "product_id": "CSAFPID-342816", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:goldengate:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "goldengate", "product": { "name": "goldengate", "product_id": "CSAFPID-1650767", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.23.0.0.240716:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "goldengate", "product": { "name": "goldengate", "product_id": "CSAFPID-485902", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:goldengate:19.1.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "goldengate", "product": { "name": "goldengate", "product_id": "CSAFPID-1503736", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:goldengate:19.23.0.0.240716:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "goldengate", "product": { "name": "goldengate", "product_id": "CSAFPID-219912", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:goldengate:19c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "goldengate", "product": { "name": "goldengate", "product_id": "CSAFPID-1503739", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:goldengate:21.14:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "goldengate", "product": { "name": "goldengate", "product_id": "CSAFPID-1650765", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:goldengate:21.3-21.14:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "goldengate", "product": { "name": "goldengate", "product_id": "CSAFPID-1503738", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:goldengate:21.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "oracle_goldengate_stream_analytics", "product": { "name": "oracle_goldengate_stream_analytics", "product_id": "CSAFPID-1650515", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:oracle_goldengate_stream_analytics:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "management_pack_for__goldengate", "product": { "name": "management_pack_for__goldengate", "product_id": "CSAFPID-764861", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:management_pack_for__goldengate:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "management_pack_for__goldengate", "product": { "name": "management_pack_for__goldengate", "product_id": "CSAFPID-1503640", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:management_pack_for__goldengate:12.2.1.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "oracle_goldengate_studio", "product": { "name": "oracle_goldengate_studio", "product_id": "CSAFPID-1650835", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:oracle_goldengate_studio:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "oracle_goldengate", "product": { "name": "oracle_goldengate", "product_id": "CSAFPID-1650575", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:oracle_goldengate:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "nosql_database", "product": { "name": "nosql_database", "product_id": "CSAFPID-764813", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:nosql_database:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "nosql_database", "product": { "name": "nosql_database", "product_id": "CSAFPID-1503661", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:nosql_database:1.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "nosql_database", "product": { "name": "nosql_database", "product_id": "CSAFPID-1503663", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:nosql_database:1.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "nosql_database", "product": { "name": "nosql_database", "product_id": "CSAFPID-1673497", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "nosql_database", "product": { "name": "nosql_database", "product_id": "CSAFPID-764764", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:nosql_database:19.5.33:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "nosql_database", "product": { "name": "nosql_database", "product_id": "CSAFPID-764765", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:nosql_database:20.3.28:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "nosql_database", "product": { "name": "nosql_database", "product_id": "CSAFPID-1673491", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:nosql_database:20.3.40:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "nosql_database", "product": { "name": "nosql_database", "product_id": "CSAFPID-764766", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:nosql_database:21.2.55:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "nosql_database", "product": { "name": "nosql_database", "product_id": "CSAFPID-1673495", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:nosql_database:21.2.71:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "nosql_database", "product": { "name": "nosql_database", "product_id": "CSAFPID-764767", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:nosql_database:22.3.26:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "nosql_database", "product": { "name": "nosql_database", "product_id": "CSAFPID-1673493", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:nosql_database:22.3.45:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "nosql_database", "product": { "name": "nosql_database", "product_id": "CSAFPID-1673489", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:nosql_database:23.3.33:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "nosql_database", "product": { "name": "nosql_database", "product_id": "CSAFPID-1673488", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:nosql_database:24.1.17:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "nosql_database", "product": { "name": "nosql_database", "product_id": "CSAFPID-1650757", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:nosql_database:prior_to_19.5.42:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "nosql_database", "product": { "name": "nosql_database", "product_id": "CSAFPID-1650758", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:nosql_database:prior_to_20.3.40:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "nosql_database", "product": { "name": "nosql_database", "product_id": "CSAFPID-1650761", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:nosql_database:prior_to_21.2.27:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "nosql_database", "product": { "name": "nosql_database", "product_id": "CSAFPID-1650760", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:nosql_database:prior_to_22.3.46:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "nosql_database", "product": { "name": "nosql_database", "product_id": "CSAFPID-1650759", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:nosql_database:prior_to_23.3.32:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "oracle_nosql_database", "product": { "name": "oracle_nosql_database", "product_id": "CSAFPID-1650584", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:oracle_nosql_database:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "oracle_secure_backup", "product": { "name": "oracle_secure_backup", "product_id": "CSAFPID-1650563", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:oracle_secure_backup:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "secure_backup", "product": { "name": "secure_backup", "product_id": "CSAFPID-667692", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:secure_backup:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "secure_backup", "product": { "name": "secure_backup", "product_id": "CSAFPID-345049", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:secure_backup:18.1.0.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "secure_backup", "product": { "name": "secure_backup", "product_id": "CSAFPID-611417", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:secure_backup:18.1.0.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "secure_backup", "product": { "name": "secure_backup", "product_id": "CSAFPID-1673422", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:secure_backup:19.1.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "oracle_sql_developer", "product": { "name": "oracle_sql_developer", "product_id": "CSAFPID-1650638", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:oracle_sql_developer:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sql_developer", "product": { "name": "sql_developer", "product_id": "CSAFPID-764822", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:sql_developer:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sql_developer", "product": { "name": "sql_developer", "product_id": "CSAFPID-220643", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:sql_developer:21.4.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sql_developer", "product": { "name": "sql_developer", "product_id": "CSAFPID-816870", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:sql_developer:22.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sql_developer", "product": { "name": "sql_developer", "product_id": "CSAFPID-816871", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:sql_developer:23.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sql_developer", "product": { "name": "sql_developer", "product_id": "CSAFPID-1673397", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:sql_developer:24.3.0:*:*:*:*:*:*:*" } } } ], "category": "vendor", "name": "oracle" }, { "branches": [ { "category": "product_name", "name": "oracle_application_express", "product": { "name": "oracle_application_express", "product_id": "CSAFPID-1673144", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle_corporation:oracle_application_express:24.1:*:*:*:*:*:*:*" } } } ], "category": "vendor", "name": "oracle_corporation" } ] }, "vulnerabilities": [ { "cve": "CVE-2022-1471", "cwe": { "id": "CWE-502", "name": "Deserialization of Untrusted Data" }, "notes": [ { "category": "other", "text": "Deserialization of Untrusted Data", "title": "CWE-502" }, { "category": "other", "text": "Improper Input Validation", "title": "CWE-20" } ], "product_status": { "known_affected": [ "CSAFPID-764731", "CSAFPID-764732", "CSAFPID-764733", "CSAFPID-764250", "CSAFPID-611394", "CSAFPID-764274", "CSAFPID-764275", "CSAFPID-611390", "CSAFPID-345049", "CSAFPID-611417", "CSAFPID-764764", "CSAFPID-764765", "CSAFPID-764766", "CSAFPID-764767", "CSAFPID-764779", "CSAFPID-94075", "CSAFPID-220886", "CSAFPID-764803", "CSAFPID-764813", "CSAFPID-342816", "CSAFPID-764752", "CSAFPID-764822", "CSAFPID-1650515", "CSAFPID-1650638", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-816317", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-89587", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-816361", "CSAFPID-220643", "CSAFPID-816870", "CSAFPID-816871", "CSAFPID-667692", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-912046", "CSAFPID-912045", "CSAFPID-912044" ] }, "references": [ { "category": "self", "summary": "CVE-2022-1471", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-1471.json" } ], "title": "CVE-2022-1471" }, { "cve": "CVE-2022-34169", "cwe": { "id": "CWE-192", "name": "Integer Coercion Error" }, "notes": [ { "category": "other", "text": "Integer Coercion Error", "title": "CWE-192" }, { "category": "other", "text": "Incorrect Conversion between Numeric Types", "title": "CWE-681" } ], "product_status": { "known_affected": [ "CSAFPID-764779", "CSAFPID-94075", "CSAFPID-342816", "CSAFPID-764803", "CSAFPID-764813", "CSAFPID-764822", "CSAFPID-764752", "CSAFPID-764275", "CSAFPID-764861", "CSAFPID-266119", "CSAFPID-187448", "CSAFPID-219912", "CSAFPID-765238", "CSAFPID-765239", "CSAFPID-765259", "CSAFPID-667692", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-764250", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-816317", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-816361", "CSAFPID-220643", "CSAFPID-816870", "CSAFPID-816871", "CSAFPID-1673384", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-912046", "CSAFPID-912045", "CSAFPID-912044", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663" ] }, "references": [ { "category": "self", "summary": "CVE-2022-34169", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-34169.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "CSAFPID-764779", "CSAFPID-94075", "CSAFPID-342816", "CSAFPID-764803", "CSAFPID-764813", "CSAFPID-764822", "CSAFPID-764752", "CSAFPID-764275", "CSAFPID-764861", "CSAFPID-266119", "CSAFPID-187448", "CSAFPID-219912", "CSAFPID-765238", "CSAFPID-765239", "CSAFPID-765259", "CSAFPID-667692", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-764250", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-816317", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-816361", "CSAFPID-220643", "CSAFPID-816870", "CSAFPID-816871", "CSAFPID-1673384", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-912046", "CSAFPID-912045", "CSAFPID-912044", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663" ] } ], "title": "CVE-2022-34169" }, { "cve": "CVE-2022-36033", "cwe": { "id": "CWE-87", "name": "Improper Neutralization of Alternate XSS Syntax" }, "notes": [ { "category": "other", "text": "Improper Neutralization of Alternate XSS Syntax", "title": "CWE-87" }, { "category": "other", "text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)", "title": "CWE-79" } ], "product_status": { "known_affected": [ "CSAFPID-764250", "CSAFPID-611394", "CSAFPID-764731", "CSAFPID-764732", "CSAFPID-764733", "CSAFPID-764274", "CSAFPID-764275", "CSAFPID-611390", "CSAFPID-345049", "CSAFPID-611417", "CSAFPID-764764", "CSAFPID-764765", "CSAFPID-764766", "CSAFPID-764767", "CSAFPID-764779", "CSAFPID-220886", "CSAFPID-94075", "CSAFPID-764803", "CSAFPID-342816", "CSAFPID-764752", "CSAFPID-764861", "CSAFPID-764813", "CSAFPID-764822", "CSAFPID-266119", "CSAFPID-187448", "CSAFPID-1650515", "CSAFPID-1650835", "CSAFPID-219912", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-816317", "CSAFPID-667692", "CSAFPID-1673384", "CSAFPID-912561", "CSAFPID-1503575", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-816361", "CSAFPID-220643", "CSAFPID-816870", "CSAFPID-816871", "CSAFPID-912567", "CSAFPID-1503603", "CSAFPID-1503612", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-912046", "CSAFPID-912045", "CSAFPID-912044", "CSAFPID-1503640", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663" ] }, "references": [ { "category": "self", "summary": "CVE-2022-36033", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-36033.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-764250", "CSAFPID-611394", "CSAFPID-764731", "CSAFPID-764732", "CSAFPID-764733", "CSAFPID-764274", "CSAFPID-764275", "CSAFPID-611390", "CSAFPID-345049", "CSAFPID-611417", "CSAFPID-764764", "CSAFPID-764765", "CSAFPID-764766", "CSAFPID-764767", "CSAFPID-764779", "CSAFPID-220886", "CSAFPID-94075", "CSAFPID-764803", "CSAFPID-342816", "CSAFPID-764752", "CSAFPID-764861", "CSAFPID-764813", "CSAFPID-764822", "CSAFPID-266119", "CSAFPID-187448", "CSAFPID-1650515", "CSAFPID-1650835", "CSAFPID-219912", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-816317", "CSAFPID-667692", "CSAFPID-1673384", "CSAFPID-912561", "CSAFPID-1503575", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-816361", "CSAFPID-220643", "CSAFPID-816870", "CSAFPID-816871", "CSAFPID-912567", "CSAFPID-1503603", "CSAFPID-1503612", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-912046", "CSAFPID-912045", "CSAFPID-912044", "CSAFPID-1503640", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663" ] } ], "title": "CVE-2022-36033" }, { "cve": "CVE-2022-37454", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "other", "text": "Integer Overflow or Wraparound", "title": "CWE-190" }, { "category": "other", "text": "Integer Overflow to Buffer Overflow", "title": "CWE-680" } ], "product_status": { "known_affected": [ "CSAFPID-764250", "CSAFPID-611394", "CSAFPID-764274", "CSAFPID-764275", "CSAFPID-611390", "CSAFPID-345049", "CSAFPID-611417", "CSAFPID-764731", "CSAFPID-764732", "CSAFPID-764733", "CSAFPID-220886", "CSAFPID-342816", "CSAFPID-764752", "CSAFPID-764764", "CSAFPID-764765", "CSAFPID-764766", "CSAFPID-764767", "CSAFPID-764779", "CSAFPID-94075", "CSAFPID-764803", "CSAFPID-764813", "CSAFPID-764822", "CSAFPID-1650563", "CSAFPID-89587", "CSAFPID-764861" ] }, "references": [ { "category": "self", "summary": "CVE-2022-37454", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-37454.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C", "version": "3.1" }, "products": [ "CSAFPID-764250", "CSAFPID-611394", "CSAFPID-764274", "CSAFPID-764275", "CSAFPID-611390", "CSAFPID-345049", "CSAFPID-611417", "CSAFPID-764731", "CSAFPID-764732", "CSAFPID-764733", "CSAFPID-220886", "CSAFPID-342816", "CSAFPID-764752", "CSAFPID-764764", "CSAFPID-764765", "CSAFPID-764766", "CSAFPID-764767", "CSAFPID-764779", "CSAFPID-94075", "CSAFPID-764803", "CSAFPID-764813", "CSAFPID-764822", "CSAFPID-1650563", "CSAFPID-89587", "CSAFPID-764861" ] } ], "title": "CVE-2022-37454" }, { "cve": "CVE-2022-38136", "product_status": { "known_affected": [ "CSAFPID-1673385", "CSAFPID-1673386" ] }, "references": [ { "category": "self", "summary": "CVE-2022-38136", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-38136.json" } ], "title": "CVE-2022-38136" }, { "cve": "CVE-2022-40196", "product_status": { "known_affected": [ "CSAFPID-1673385", "CSAFPID-1673386" ] }, "references": [ { "category": "self", "summary": "CVE-2022-40196", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-40196.json" } ], "title": "CVE-2022-40196" }, { "cve": "CVE-2022-41342", "product_status": { "known_affected": [ "CSAFPID-1673385", "CSAFPID-1673386" ] }, "references": [ { "category": "self", "summary": "CVE-2022-41342", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-41342.json" } ], "title": "CVE-2022-41342" }, { "cve": "CVE-2022-42919", "cwe": { "id": "CWE-311", "name": "Missing Encryption of Sensitive Data" }, "notes": [ { "category": "other", "text": "Missing Encryption of Sensitive Data", "title": "CWE-311" }, { "category": "other", "text": "Improper Privilege Management", "title": "CWE-269" } ], "product_status": { "known_affected": [ "CSAFPID-764250", "CSAFPID-611394", "CSAFPID-764274", "CSAFPID-764275", "CSAFPID-611390", "CSAFPID-345049", "CSAFPID-611417", "CSAFPID-764731", "CSAFPID-764732", "CSAFPID-764733", "CSAFPID-220886", "CSAFPID-342816", "CSAFPID-764752", "CSAFPID-764764", "CSAFPID-764765", "CSAFPID-764766", "CSAFPID-764767", "CSAFPID-764779", "CSAFPID-94075", "CSAFPID-764803", "CSAFPID-764813", "CSAFPID-764822", "CSAFPID-89587" ] }, "references": [ { "category": "self", "summary": "CVE-2022-42919", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-42919.json" } ], "title": "CVE-2022-42919" }, { "cve": "CVE-2022-45061", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" }, { "category": "other", "text": "Inefficient Algorithmic Complexity", "title": "CWE-407" } ], "product_status": { "known_affected": [ "CSAFPID-345049", "CSAFPID-611417", "CSAFPID-764731", "CSAFPID-764732", "CSAFPID-764733", "CSAFPID-220886", "CSAFPID-764250", "CSAFPID-611394", "CSAFPID-342816", "CSAFPID-764752", "CSAFPID-764764", "CSAFPID-764765", "CSAFPID-764766", "CSAFPID-764767", "CSAFPID-764779", "CSAFPID-94075", "CSAFPID-764274", "CSAFPID-764275", "CSAFPID-611390", "CSAFPID-764803", "CSAFPID-764813", "CSAFPID-764822", "CSAFPID-89587" ] }, "references": [ { "category": "self", "summary": "CVE-2022-45061", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-45061.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-345049", "CSAFPID-611417", "CSAFPID-764731", "CSAFPID-764732", "CSAFPID-764733", "CSAFPID-220886", "CSAFPID-764250", "CSAFPID-611394", "CSAFPID-342816", "CSAFPID-764752", "CSAFPID-764764", "CSAFPID-764765", "CSAFPID-764766", "CSAFPID-764767", "CSAFPID-764779", "CSAFPID-94075", "CSAFPID-764274", "CSAFPID-764275", "CSAFPID-611390", "CSAFPID-764803", "CSAFPID-764813", "CSAFPID-764822", "CSAFPID-89587" ] } ], "title": "CVE-2022-45061" }, { "cve": "CVE-2022-46337", "product_status": { "known_affected": [ "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-1673384", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-764752", "CSAFPID-764275", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-912046", "CSAFPID-912045", "CSAFPID-912044", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-1503612", "CSAFPID-764250", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-816317", "CSAFPID-816845", "CSAFPID-342816", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-1503640", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-816361", "CSAFPID-764813", "CSAFPID-220643", "CSAFPID-816870", "CSAFPID-816871", "CSAFPID-667692" ] }, "references": [ { "category": "self", "summary": "CVE-2022-46337", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-46337.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-1673384", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-764752", "CSAFPID-764275", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-912046", "CSAFPID-912045", "CSAFPID-912044", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-1503612", "CSAFPID-764250", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-816317", "CSAFPID-816845", "CSAFPID-342816", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-1503640", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-816361", "CSAFPID-764813", "CSAFPID-220643", "CSAFPID-816870", "CSAFPID-816871", "CSAFPID-667692" ] } ], "title": "CVE-2022-46337" }, { "cve": "CVE-2023-2976", "cwe": { "id": "CWE-552", "name": "Files or Directories Accessible to External Parties" }, "notes": [ { "category": "other", "text": "Files or Directories Accessible to External Parties", "title": "CWE-552" } ], "product_status": { "known_affected": [ "CSAFPID-1650584", "CSAFPID-1650835", "CSAFPID-1650506", "CSAFPID-1650515", "CSAFPID-816317", "CSAFPID-816845", "CSAFPID-342816", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-816361", "CSAFPID-764813", "CSAFPID-220643", "CSAFPID-816870", "CSAFPID-816871", "CSAFPID-667692", "CSAFPID-89587", "CSAFPID-1673397", "CSAFPID-764274", "CSAFPID-764275", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-816800", "CSAFPID-345049", "CSAFPID-816801", "CSAFPID-611390", "CSAFPID-611394", "CSAFPID-611417", "CSAFPID-764250", "CSAFPID-764752", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-912046", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663" ] }, "references": [ { "category": "self", "summary": "CVE-2023-2976", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-2976.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "CSAFPID-1650584", "CSAFPID-1650835", "CSAFPID-1650506", "CSAFPID-1650515", "CSAFPID-816317", "CSAFPID-816845", "CSAFPID-342816", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-816361", "CSAFPID-764813", "CSAFPID-220643", "CSAFPID-816870", "CSAFPID-816871", "CSAFPID-667692", "CSAFPID-89587", "CSAFPID-1673397", "CSAFPID-764274", "CSAFPID-764275", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-816800", "CSAFPID-345049", "CSAFPID-816801", "CSAFPID-611390", "CSAFPID-611394", "CSAFPID-611417", "CSAFPID-764250", "CSAFPID-764752", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-912046", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663" ] } ], "title": "CVE-2023-2976" }, { "cve": "CVE-2023-4043", "cwe": { "id": "CWE-834", "name": "Excessive Iteration" }, "notes": [ { "category": "other", "text": "Excessive Iteration", "title": "CWE-834" }, { "category": "other", "text": "Improper Input Validation", "title": "CWE-20" } ], "product_status": { "known_affected": [ "CSAFPID-1673405", "CSAFPID-1673397", "CSAFPID-220643", "CSAFPID-342816", "CSAFPID-667692", "CSAFPID-764250", "CSAFPID-764813", "CSAFPID-816317", "CSAFPID-816361", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-816870", "CSAFPID-816871", "CSAFPID-764275", "CSAFPID-764752", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-912046", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663" ] }, "references": [ { "category": "self", "summary": "CVE-2023-4043", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-4043.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673405", "CSAFPID-1673397", "CSAFPID-220643", "CSAFPID-342816", "CSAFPID-667692", "CSAFPID-764250", "CSAFPID-764813", "CSAFPID-816317", "CSAFPID-816361", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-816870", "CSAFPID-816871", "CSAFPID-764275", "CSAFPID-764752", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-912046", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663" ] } ], "title": "CVE-2023-4043" }, { "cve": "CVE-2023-4759", "cwe": { "id": "CWE-59", "name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)" }, "notes": [ { "category": "other", "text": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)", "title": "CWE-59" }, { "category": "other", "text": "Improper Handling of Case Sensitivity", "title": "CWE-178" } ], "product_status": { "known_affected": [ "CSAFPID-1673397", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2023-4759", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-4759.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673397", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] } ], "title": "CVE-2023-4759" }, { "cve": "CVE-2023-4863", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "notes": [ { "category": "other", "text": "Heap-based Buffer Overflow", "title": "CWE-122" }, { "category": "other", "text": "Improper Restriction of Operations within the Bounds of a Memory Buffer", "title": "CWE-119" }, { "category": "other", "text": "Out-of-bounds Write", "title": "CWE-787" } ], "product_status": { "known_affected": [ "CSAFPID-89587", "CSAFPID-816846", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-912046", "CSAFPID-342816", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-764275", "CSAFPID-764752", "CSAFPID-816798", "CSAFPID-816801" ] }, "references": [ { "category": "self", "summary": "CVE-2023-4863", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-4863.json" } ], "title": "CVE-2023-4863" }, { "cve": "CVE-2023-5072", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "other", "text": "Allocation of Resources Without Limits or Throttling", "title": "CWE-770" } ], "product_status": { "known_affected": [ "CSAFPID-1650575", "CSAFPID-1650515", "CSAFPID-1650835", "CSAFPID-89587", "CSAFPID-220643", "CSAFPID-342816", "CSAFPID-667692", "CSAFPID-764250", "CSAFPID-764813", "CSAFPID-816317", "CSAFPID-816361", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-816870", "CSAFPID-816871", "CSAFPID-764275", "CSAFPID-764752", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-912046", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663" ] }, "references": [ { "category": "self", "summary": "CVE-2023-5072", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-5072.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1650575", "CSAFPID-1650515", "CSAFPID-1650835", "CSAFPID-89587", "CSAFPID-220643", "CSAFPID-342816", "CSAFPID-667692", "CSAFPID-764250", "CSAFPID-764813", "CSAFPID-816317", "CSAFPID-816361", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-816870", "CSAFPID-816871", "CSAFPID-764275", "CSAFPID-764752", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-912046", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663" ] } ], "title": "CVE-2023-5072" }, { "cve": "CVE-2023-26031", "cwe": { "id": "CWE-426", "name": "Untrusted Search Path" }, "notes": [ { "category": "other", "text": "Untrusted Search Path", "title": "CWE-426" } ], "product_status": { "known_affected": [ "CSAFPID-1673384", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2023-26031", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-26031.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673384", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] } ], "title": "CVE-2023-26031" }, { "cve": "CVE-2023-26551", "product_status": { "known_affected": [ "CSAFPID-89587" ] }, "references": [ { "category": "self", "summary": "CVE-2023-26551", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-26551.json" } ], "scores": [ { "cvss_v3": { "baseScore": 0.0, "baseSeverity": "NONE", "vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N", "version": "3.1" }, "products": [ "CSAFPID-89587" ] } ], "title": "CVE-2023-26551" }, { "cve": "CVE-2023-26552", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "other", "text": "Out-of-bounds Write", "title": "CWE-787" } ], "product_status": { "known_affected": [ "CSAFPID-89587" ] }, "references": [ { "category": "self", "summary": "CVE-2023-26552", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-26552.json" } ], "scores": [ { "cvss_v3": { "baseScore": 5.6, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.1" }, "products": [ "CSAFPID-89587" ] } ], "title": "CVE-2023-26552" }, { "cve": "CVE-2023-26553", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "other", "text": "Out-of-bounds Write", "title": "CWE-787" } ], "product_status": { "known_affected": [ "CSAFPID-89587" ] }, "references": [ { "category": "self", "summary": "CVE-2023-26553", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-26553.json" } ], "scores": [ { "cvss_v3": { "baseScore": 5.6, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.1" }, "products": [ "CSAFPID-89587" ] } ], "title": "CVE-2023-26553" }, { "cve": "CVE-2023-26554", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "other", "text": "Out-of-bounds Write", "title": "CWE-787" } ], "product_status": { "known_affected": [ "CSAFPID-89587" ] }, "references": [ { "category": "self", "summary": "CVE-2023-26554", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-26554.json" } ], "scores": [ { "cvss_v3": { "baseScore": 5.6, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.1" }, "products": [ "CSAFPID-89587" ] } ], "title": "CVE-2023-26554" }, { "cve": "CVE-2023-26555", "product_status": { "known_affected": [ "CSAFPID-89587" ] }, "references": [ { "category": "self", "summary": "CVE-2023-26555", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-26555.json" } ], "scores": [ { "cvss_v3": { "baseScore": 6.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-89587" ] } ], "title": "CVE-2023-26555" }, { "cve": "CVE-2023-28484", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "notes": [ { "category": "other", "text": "Improper Input Validation", "title": "CWE-20" }, { "category": "other", "text": "NULL Pointer Dereference", "title": "CWE-476" } ], "product_status": { "known_affected": [ "CSAFPID-764250", "CSAFPID-764731", "CSAFPID-764732", "CSAFPID-764733", "CSAFPID-220886", "CSAFPID-816317", "CSAFPID-764813", "CSAFPID-89587", "CSAFPID-342816", "CSAFPID-345049", "CSAFPID-764752", "CSAFPID-764764", "CSAFPID-764765", "CSAFPID-764766", "CSAFPID-764767", "CSAFPID-611390", "CSAFPID-611394", "CSAFPID-611417", "CSAFPID-764274", "CSAFPID-764275", "CSAFPID-220643", "CSAFPID-667692", "CSAFPID-816361", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-816870", "CSAFPID-816871" ] }, "references": [ { "category": "self", "summary": "CVE-2023-28484", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-28484.json" } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", "version": "3.1" }, "products": [ "CSAFPID-764250", "CSAFPID-764731", "CSAFPID-764732", "CSAFPID-764733", "CSAFPID-220886", "CSAFPID-816317", "CSAFPID-764813", "CSAFPID-89587", "CSAFPID-342816", "CSAFPID-345049", "CSAFPID-764752", "CSAFPID-764764", "CSAFPID-764765", "CSAFPID-764766", "CSAFPID-764767", "CSAFPID-611390", "CSAFPID-611394", "CSAFPID-611417", "CSAFPID-764274", "CSAFPID-764275", "CSAFPID-220643", "CSAFPID-667692", "CSAFPID-816361", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-816870", "CSAFPID-816871" ] } ], "title": "CVE-2023-28484" }, { "cve": "CVE-2023-29469", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "notes": [ { "category": "other", "text": "Improper Input Validation", "title": "CWE-20" }, { "category": "other", "text": "Double Free", "title": "CWE-415" } ], "product_status": { "known_affected": [ "CSAFPID-611417", "CSAFPID-764731", "CSAFPID-764732", "CSAFPID-764733", "CSAFPID-816317", "CSAFPID-89587", "CSAFPID-220886", "CSAFPID-342816", "CSAFPID-345049", "CSAFPID-764752", "CSAFPID-611390", "CSAFPID-611394", "CSAFPID-764764", "CSAFPID-764765", "CSAFPID-764766", "CSAFPID-764767", "CSAFPID-764274", "CSAFPID-764275", "CSAFPID-220643", "CSAFPID-667692", "CSAFPID-764813", "CSAFPID-816361", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-764250", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-816870", "CSAFPID-816871" ] }, "references": [ { "category": "self", "summary": "CVE-2023-29469", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-29469.json" } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", "version": "3.1" }, "products": [ "CSAFPID-611417", "CSAFPID-764731", "CSAFPID-764732", "CSAFPID-764733", "CSAFPID-816317", "CSAFPID-89587", "CSAFPID-220886", "CSAFPID-342816", "CSAFPID-345049", "CSAFPID-764752", "CSAFPID-611390", "CSAFPID-611394", "CSAFPID-764764", "CSAFPID-764765", "CSAFPID-764766", "CSAFPID-764767", "CSAFPID-764274", "CSAFPID-764275", "CSAFPID-220643", "CSAFPID-667692", "CSAFPID-764813", "CSAFPID-816361", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-764250", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-816870", "CSAFPID-816871" ] } ], "title": "CVE-2023-29469" }, { "cve": "CVE-2023-33201", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "other", "text": "Exposure of Sensitive Information to an Unauthorized Actor", "title": "CWE-200" } ], "product_status": { "known_affected": [ "CSAFPID-764250", "CSAFPID-611394", "CSAFPID-1650584", "CSAFPID-1673397", "CSAFPID-912561", "CSAFPID-345049", "CSAFPID-611390", "CSAFPID-611417", "CSAFPID-764274", "CSAFPID-764275", "CSAFPID-220643", "CSAFPID-342816", "CSAFPID-667692", "CSAFPID-764813", "CSAFPID-816317", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816361", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-764752", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-912046", "CSAFPID-816855", "CSAFPID-816870", "CSAFPID-816871", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663" ] }, "references": [ { "category": "self", "summary": "CVE-2023-33201", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-33201.json" } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "CSAFPID-764250", "CSAFPID-611394", "CSAFPID-1650584", "CSAFPID-1673397", "CSAFPID-912561", "CSAFPID-345049", "CSAFPID-611390", "CSAFPID-611417", "CSAFPID-764274", "CSAFPID-764275", "CSAFPID-220643", "CSAFPID-342816", "CSAFPID-667692", "CSAFPID-764813", "CSAFPID-816317", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816361", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-764752", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-912046", "CSAFPID-816855", "CSAFPID-816870", "CSAFPID-816871", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663" ] } ], "title": "CVE-2023-33201" }, { "cve": "CVE-2023-37920", "cwe": { "id": "CWE-295", "name": "Improper Certificate Validation" }, "notes": [ { "category": "other", "text": "Improper Certificate Validation", "title": "CWE-295" }, { "category": "other", "text": "Insufficient Verification of Data Authenticity", "title": "CWE-345" } ], "product_status": { "known_affected": [ "CSAFPID-89587", "CSAFPID-1503575", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612" ] }, "references": [ { "category": "self", "summary": "CVE-2023-37920", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-37920.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-89587", "CSAFPID-1503575", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612" ] } ], "title": "CVE-2023-37920" }, { "cve": "CVE-2023-39410", "cwe": { "id": "CWE-502", "name": "Deserialization of Untrusted Data" }, "notes": [ { "category": "other", "text": "Deserialization of Untrusted Data", "title": "CWE-502" }, { "category": "other", "text": "Improper Input Validation", "title": "CWE-20" } ], "product_status": { "known_affected": [ "CSAFPID-1673404", "CSAFPID-1673384", "CSAFPID-220643", "CSAFPID-342816", "CSAFPID-667692", "CSAFPID-764250", "CSAFPID-764813", "CSAFPID-816317", "CSAFPID-816361", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-816870", "CSAFPID-816871" ] }, "references": [ { "category": "self", "summary": "CVE-2023-39410", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-39410.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673404", "CSAFPID-1673384", "CSAFPID-220643", "CSAFPID-342816", "CSAFPID-667692", "CSAFPID-764250", "CSAFPID-764813", "CSAFPID-816317", "CSAFPID-816361", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-816870", "CSAFPID-816871" ] } ], "title": "CVE-2023-39410" }, { "cve": "CVE-2023-44487", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" } ], "product_status": { "known_affected": [ "CSAFPID-1650757", "CSAFPID-1650758", "CSAFPID-1650759", "CSAFPID-1650760", "CSAFPID-1650761", "CSAFPID-89587", "CSAFPID-816361", "CSAFPID-220643", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-816870", "CSAFPID-816871", "CSAFPID-667692", "CSAFPID-764250", "CSAFPID-764813", "CSAFPID-816317", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-764275", "CSAFPID-764752", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-912046", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-1503603", "CSAFPID-1503575", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663" ] }, "references": [ { "category": "self", "summary": "CVE-2023-44487", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-44487.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1650757", "CSAFPID-1650758", "CSAFPID-1650759", "CSAFPID-1650760", "CSAFPID-1650761", "CSAFPID-89587", "CSAFPID-816361", "CSAFPID-220643", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-816870", "CSAFPID-816871", "CSAFPID-667692", "CSAFPID-764250", "CSAFPID-764813", "CSAFPID-816317", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-764275", "CSAFPID-764752", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-912046", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-1503603", "CSAFPID-1503575", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663" ] } ], "title": "CVE-2023-44487" }, { "cve": "CVE-2023-44981", "cwe": { "id": "CWE-639", "name": "Authorization Bypass Through User-Controlled Key" }, "notes": [ { "category": "other", "text": "Authorization Bypass Through User-Controlled Key", "title": "CWE-639" } ], "product_status": { "known_affected": [ "CSAFPID-1650515", "CSAFPID-89587", "CSAFPID-220643", "CSAFPID-342816", "CSAFPID-667692", "CSAFPID-764250", "CSAFPID-764813", "CSAFPID-816317", "CSAFPID-816361", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-816870", "CSAFPID-816871", "CSAFPID-764275", "CSAFPID-764752", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-912046", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601" ] }, "references": [ { "category": "self", "summary": "CVE-2023-44981", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-44981.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "CSAFPID-1650515", "CSAFPID-89587", "CSAFPID-220643", "CSAFPID-342816", "CSAFPID-667692", "CSAFPID-764250", "CSAFPID-764813", "CSAFPID-816317", "CSAFPID-816361", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-816870", "CSAFPID-816871", "CSAFPID-764275", "CSAFPID-764752", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-912046", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601" ] } ], "title": "CVE-2023-44981" }, { "cve": "CVE-2023-45288", "cwe": { "id": "CWE-404", "name": "Improper Resource Shutdown or Release" }, "notes": [ { "category": "other", "text": "Improper Resource Shutdown or Release", "title": "CWE-404" }, { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" } ], "product_status": { "known_affected": [ "CSAFPID-89587" ] }, "references": [ { "category": "self", "summary": "CVE-2023-45288", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-45288.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-89587" ] } ], "title": "CVE-2023-45288" }, { "cve": "CVE-2023-48795", "cwe": { "id": "CWE-222", "name": "Truncation of Security-relevant Information" }, "notes": [ { "category": "other", "text": "Truncation of Security-relevant Information", "title": "CWE-222" } ], "product_status": { "known_affected": [ "CSAFPID-1650765", "CSAFPID-1650757", "CSAFPID-1650758", "CSAFPID-1650767", "CSAFPID-1650759", "CSAFPID-1650760", "CSAFPID-1650761", "CSAFPID-89587", "CSAFPID-220643", "CSAFPID-342816", "CSAFPID-667692", "CSAFPID-764250", "CSAFPID-764813", "CSAFPID-816317", "CSAFPID-816361", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-816870", "CSAFPID-816871", "CSAFPID-764275", "CSAFPID-764752", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-912046", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-1503603", "CSAFPID-1503612", "CSAFPID-1503575", "CSAFPID-1503640", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663" ] }, "references": [ { "category": "self", "summary": "CVE-2023-48795", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-48795.json" } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "CSAFPID-1650765", "CSAFPID-1650757", "CSAFPID-1650758", "CSAFPID-1650767", "CSAFPID-1650759", "CSAFPID-1650760", "CSAFPID-1650761", "CSAFPID-89587", "CSAFPID-220643", "CSAFPID-342816", "CSAFPID-667692", "CSAFPID-764250", "CSAFPID-764813", "CSAFPID-816317", "CSAFPID-816361", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-816870", "CSAFPID-816871", "CSAFPID-764275", "CSAFPID-764752", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-912046", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-1503603", "CSAFPID-1503612", "CSAFPID-1503575", "CSAFPID-1503640", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663" ] } ], "title": "CVE-2023-48795" }, { "cve": "CVE-2023-49083", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "other", "text": "NULL Pointer Dereference", "title": "CWE-476" } ], "product_status": { "known_affected": [ "CSAFPID-89587", "CSAFPID-342816", "CSAFPID-764275", "CSAFPID-764752", "CSAFPID-816798", "CSAFPID-816801", "CSAFPID-816846", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-912046", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-816845", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2023-49083", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-49083.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-89587", "CSAFPID-342816", "CSAFPID-764275", "CSAFPID-764752", "CSAFPID-816798", "CSAFPID-816801", "CSAFPID-816846", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-912046", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-816845", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] } ], "title": "CVE-2023-49083" }, { "cve": "CVE-2023-51384", "cwe": { "id": "CWE-304", "name": "Missing Critical Step in Authentication" }, "notes": [ { "category": "other", "text": "Missing Critical Step in Authentication", "title": "CWE-304" }, { "category": "other", "text": "Improper Input Validation", "title": "CWE-20" } ], "product_status": { "known_affected": [ "CSAFPID-89587" ] }, "references": [ { "category": "self", "summary": "CVE-2023-51384", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-51384.json" } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "CSAFPID-89587" ] } ], "title": "CVE-2023-51384" }, { "cve": "CVE-2023-51385", "cwe": { "id": "CWE-78", "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)" }, "notes": [ { "category": "other", "text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)", "title": "CWE-78" } ], "product_status": { "known_affected": [ "CSAFPID-89587" ] }, "references": [ { "category": "self", "summary": "CVE-2023-51385", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-51385.json" } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "version": "3.1" }, "products": [ "CSAFPID-89587" ] } ], "title": "CVE-2023-51385" }, { "cve": "CVE-2023-52425", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" } ], "product_status": { "known_affected": [ "CSAFPID-89587", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2023-52425", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-52425.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-89587", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] } ], "title": "CVE-2023-52425" }, { "cve": "CVE-2023-52426", "cwe": { "id": "CWE-776", "name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)" }, "notes": [ { "category": "other", "text": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)", "title": "CWE-776" } ], "product_status": { "known_affected": [ "CSAFPID-89587", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2023-52426", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-52426.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-89587", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] } ], "title": "CVE-2023-52426" }, { "cve": "CVE-2024-1874", "cwe": { "id": "CWE-77", "name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)" }, "notes": [ { "category": "other", "text": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)", "title": "CWE-77" }, { "category": "other", "text": "Improper Encoding or Escaping of Output", "title": "CWE-116" } ], "product_status": { "known_affected": [ "CSAFPID-1673422", "CSAFPID-345049", "CSAFPID-611417" ] }, "references": [ { "category": "self", "summary": "CVE-2024-1874", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-1874.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673422", "CSAFPID-345049", "CSAFPID-611417" ] } ], "title": "CVE-2024-1874" }, { "cve": "CVE-2024-2408", "cwe": { "id": "CWE-203", "name": "Observable Discrepancy" }, "notes": [ { "category": "other", "text": "Observable Discrepancy", "title": "CWE-203" }, { "category": "other", "text": "Observable Timing Discrepancy", "title": "CWE-208" }, { "category": "other", "text": "Use of a Broken or Risky Cryptographic Algorithm", "title": "CWE-327" }, { "category": "other", "text": "Covert Timing Channel", "title": "CWE-385" } ], "product_status": { "known_affected": [ "CSAFPID-1673422", "CSAFPID-345049", "CSAFPID-611417" ] }, "references": [ { "category": "self", "summary": "CVE-2024-2408", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-2408.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673422", "CSAFPID-345049", "CSAFPID-611417" ] } ], "title": "CVE-2024-2408" }, { "cve": "CVE-2024-2511", "cwe": { "id": "CWE-404", "name": "Improper Resource Shutdown or Release" }, "notes": [ { "category": "other", "text": "Improper Resource Shutdown or Release", "title": "CWE-404" }, { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" }, { "category": "other", "text": "Improperly Controlled Sequential Memory Allocation", "title": "CWE-1325" } ], "product_status": { "known_affected": [ "CSAFPID-345049", "CSAFPID-611417", "CSAFPID-1673479", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2024-2511", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-2511.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-345049", "CSAFPID-611417", "CSAFPID-1673479", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] } ], "title": "CVE-2024-2511" }, { "cve": "CVE-2024-4577", "cwe": { "id": "CWE-88", "name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)" }, "notes": [ { "category": "other", "text": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)", "title": "CWE-88" }, { "category": "other", "text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)", "title": "CWE-78" } ], "product_status": { "known_affected": [ "CSAFPID-1673422", "CSAFPID-345049", "CSAFPID-611417" ] }, "references": [ { "category": "self", "summary": "CVE-2024-4577", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-4577.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673422", "CSAFPID-345049", "CSAFPID-611417" ] } ], "title": "CVE-2024-4577" }, { "cve": "CVE-2024-4603", "cwe": { "id": "CWE-606", "name": "Unchecked Input for Loop Condition" }, "notes": [ { "category": "other", "text": "Unchecked Input for Loop Condition", "title": "CWE-606" } ], "product_status": { "known_affected": [ "CSAFPID-345049", "CSAFPID-611417", "CSAFPID-1673479", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2024-4603", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-4603.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-345049", "CSAFPID-611417", "CSAFPID-1673479", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] } ], "title": "CVE-2024-4603" }, { "cve": "CVE-2024-4741", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "other", "text": "Use After Free", "title": "CWE-416" } ], "product_status": { "known_affected": [ "CSAFPID-345049", "CSAFPID-611417", "CSAFPID-1673479", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2024-4741", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-4741.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-345049", "CSAFPID-611417", "CSAFPID-1673479", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] } ], "title": "CVE-2024-4741" }, { "cve": "CVE-2024-5458", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "notes": [ { "category": "other", "text": "Improper Input Validation", "title": "CWE-20" } ], "product_status": { "known_affected": [ "CSAFPID-1673422", "CSAFPID-345049", "CSAFPID-611417" ] }, "references": [ { "category": "self", "summary": "CVE-2024-5458", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-5458.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673422", "CSAFPID-345049", "CSAFPID-611417" ] } ], "title": "CVE-2024-5458" }, { "cve": "CVE-2024-5535", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "other", "text": "Exposure of Sensitive Information to an Unauthorized Actor", "title": "CWE-200" }, { "category": "other", "text": "Improper Restriction of Operations within the Bounds of a Memory Buffer", "title": "CWE-119" } ], "product_status": { "known_affected": [ "CSAFPID-1673508", "CSAFPID-1673525" ] }, "references": [ { "category": "self", "summary": "CVE-2024-5535", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-5535.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673508", "CSAFPID-1673525" ] } ], "title": "CVE-2024-5535" }, { "cve": "CVE-2024-5585", "cwe": { "id": "CWE-116", "name": "Improper Encoding or Escaping of Output" }, "notes": [ { "category": "other", "text": "Improper Encoding or Escaping of Output", "title": "CWE-116" }, { "category": "other", "text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)", "title": "CWE-78" }, { "category": "other", "text": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)", "title": "CWE-88" } ], "product_status": { "known_affected": [ "CSAFPID-1673422", "CSAFPID-345049", "CSAFPID-611417" ] }, "references": [ { "category": "self", "summary": "CVE-2024-5585", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-5585.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673422", "CSAFPID-345049", "CSAFPID-611417" ] } ], "title": "CVE-2024-5585" }, { "cve": "CVE-2024-6119", "cwe": { "id": "CWE-843", "name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)" }, "notes": [ { "category": "other", "text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)", "title": "CWE-843" } ], "product_status": { "known_affected": [ "CSAFPID-1673508", "CSAFPID-1673525" ] }, "references": [ { "category": "self", "summary": "CVE-2024-6119", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-6119.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673508", "CSAFPID-1673525" ] } ], "title": "CVE-2024-6119" }, { "cve": "CVE-2024-6232", "cwe": { "id": "CWE-1333", "name": "Inefficient Regular Expression Complexity" }, "notes": [ { "category": "other", "text": "Inefficient Regular Expression Complexity", "title": "CWE-1333" } ], "references": [ { "category": "self", "summary": "CVE-2024-6232", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-6232.json" } ], "title": "CVE-2024-6232" }, { "cve": "CVE-2024-7264", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "other", "text": "Out-of-bounds Read", "title": "CWE-125" }, { "category": "other", "text": "Improper Input Validation", "title": "CWE-20" } ], "product_status": { "known_affected": [ "CSAFPID-1673529", "CSAFPID-1673479", "CSAFPID-1673511", "CSAFPID-1673512" ] }, "references": [ { "category": "self", "summary": "CVE-2024-7264", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-7264.json" } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673529", "CSAFPID-1673479", "CSAFPID-1673511", "CSAFPID-1673512" ] } ], "title": "CVE-2024-7264" }, { "cve": "CVE-2024-7592", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" } ], "references": [ { "category": "self", "summary": "CVE-2024-7592", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-7592.json" } ], "title": "CVE-2024-7592" }, { "cve": "CVE-2024-21131", "product_status": { "known_affected": [ "CSAFPID-1503299", "CSAFPID-1503306", "CSAFPID-1503302", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2024-21131", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-21131.json" } ], "title": "CVE-2024-21131" }, { "cve": "CVE-2024-21138", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)" }, "notes": [ { "category": "other", "text": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)", "title": "CWE-835" } ], "product_status": { "known_affected": [ "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2024-21138", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-21138.json" } ], "title": "CVE-2024-21138" }, { "cve": "CVE-2024-21140", "product_status": { "known_affected": [ "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503299", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2024-21140", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-21140.json" } ], "title": "CVE-2024-21140" }, { "cve": "CVE-2024-21144", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "notes": [ { "category": "other", "text": "Improper Input Validation", "title": "CWE-20" }, { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" } ], "product_status": { "known_affected": [ "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2024-21144", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-21144.json" } ], "title": "CVE-2024-21144" }, { "cve": "CVE-2024-21145", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "other", "text": "Out-of-bounds Write", "title": "CWE-787" } ], "product_status": { "known_affected": [ "CSAFPID-1503299", "CSAFPID-1503306", "CSAFPID-1503302", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2024-21145", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-21145.json" } ], "title": "CVE-2024-21145" }, { "cve": "CVE-2024-21147", "product_status": { "known_affected": [ "CSAFPID-1503306", "CSAFPID-1503302", "CSAFPID-1503299", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2024-21147", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-21147.json" } ], "title": "CVE-2024-21147" }, { "cve": "CVE-2024-21233", "product_status": { "known_affected": [ "CSAFPID-1673385", "CSAFPID-1673442", "CSAFPID-1673386" ] }, "references": [ { "category": "self", "summary": "CVE-2024-21233", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-21233.json" } ], "scores": [ { "cvss_v3": { "baseScore": 4.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "version": "3.1" }, "products": [ "CSAFPID-1673385", "CSAFPID-1673442", "CSAFPID-1673386" ] } ], "title": "CVE-2024-21233" }, { "cve": "CVE-2024-21242", "product_status": { "known_affected": [ "CSAFPID-1673443", "CSAFPID-1673444", "CSAFPID-1673445" ] }, "references": [ { "category": "self", "summary": "CVE-2024-21242", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-21242.json" } ], "scores": [ { "cvss_v3": { "baseScore": 3.5, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "CSAFPID-1673443", "CSAFPID-1673444", "CSAFPID-1673445" ] } ], "title": "CVE-2024-21242" }, { "cve": "CVE-2024-21251", "product_status": { "known_affected": [ "CSAFPID-1673450", "CSAFPID-1673451", "CSAFPID-1673452" ] }, "references": [ { "category": "self", "summary": "CVE-2024-21251", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-21251.json" } ], "scores": [ { "cvss_v3": { "baseScore": 3.1, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N", "version": "3.1" }, "products": [ "CSAFPID-1673450", "CSAFPID-1673451", "CSAFPID-1673452" ] } ], "title": "CVE-2024-21251" }, { "cve": "CVE-2024-21261", "product_status": { "known_affected": [ "CSAFPID-1673144", "CSAFPID-1503575", "CSAFPID-1673188" ] }, "references": [ { "category": "self", "summary": "CVE-2024-21261", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-21261.json" } ], "scores": [ { "cvss_v3": { "baseScore": 4.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N", "version": "3.1" }, "products": [ "CSAFPID-1673144", "CSAFPID-1503575", "CSAFPID-1673188" ] } ], "title": "CVE-2024-21261" }, { "cve": "CVE-2024-22018", "cwe": { "id": "CWE-275", "name": "-" }, "notes": [ { "category": "other", "text": "CWE-275", "title": "CWE-275" } ], "product_status": { "known_affected": [ "CSAFPID-89587" ] }, "references": [ { "category": "self", "summary": "CVE-2024-22018", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-22018.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-89587" ] } ], "title": "CVE-2024-22018" }, { "cve": "CVE-2024-22020", "product_status": { "known_affected": [ "CSAFPID-89587" ] }, "references": [ { "category": "self", "summary": "CVE-2024-22020", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-22020.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-89587" ] } ], "title": "CVE-2024-22020" }, { "cve": "CVE-2024-22201", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" } ], "product_status": { "known_affected": [ "CSAFPID-1673384", "CSAFPID-342816", "CSAFPID-764275", "CSAFPID-764752", "CSAFPID-816798", "CSAFPID-816801", "CSAFPID-816846", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-912046", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-816845", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2024-22201", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-22201.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673384", "CSAFPID-342816", "CSAFPID-764275", "CSAFPID-764752", "CSAFPID-816798", "CSAFPID-816801", "CSAFPID-816846", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-912046", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-816845", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] } ], "title": "CVE-2024-22201" }, { "cve": "CVE-2024-23807", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "other", "text": "Use After Free", "title": "CWE-416" } ], "product_status": { "known_affected": [ "CSAFPID-1650831", "CSAFPID-1650825", "CSAFPID-1673479", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2024-23807", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-23807.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1650831", "CSAFPID-1650825", "CSAFPID-1673479", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] } ], "title": "CVE-2024-23807" }, { "cve": "CVE-2024-23944", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "other", "text": "Exposure of Sensitive Information to an Unauthorized Actor", "title": "CWE-200" } ], "product_status": { "known_affected": [ "CSAFPID-1673384", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2024-23944", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-23944.json" } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "CSAFPID-1673384", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] } ], "title": "CVE-2024-23944" }, { "cve": "CVE-2024-24989", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "other", "text": "NULL Pointer Dereference", "title": "CWE-476" } ], "product_status": { "known_affected": [ "CSAFPID-89587" ] }, "references": [ { "category": "self", "summary": "CVE-2024-24989", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-24989.json" } ], "title": "CVE-2024-24989" }, { "cve": "CVE-2024-24990", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "other", "text": "Use After Free", "title": "CWE-416" } ], "product_status": { "known_affected": [ "CSAFPID-89587" ] }, "references": [ { "category": "self", "summary": "CVE-2024-24990", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-24990.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-89587" ] } ], "title": "CVE-2024-24990" }, { "cve": "CVE-2024-25710", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)" }, "notes": [ { "category": "other", "text": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)", "title": "CWE-835" } ], "product_status": { "known_affected": [ "CSAFPID-89587", "CSAFPID-1673384", "CSAFPID-816871", "CSAFPID-816798", "CSAFPID-816801", "CSAFPID-342816", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-764275", "CSAFPID-764752", "CSAFPID-816846", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-912046", "CSAFPID-1503640", "CSAFPID-816845", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2024-25710", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-25710.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-89587", "CSAFPID-1673384", "CSAFPID-816871", "CSAFPID-816798", "CSAFPID-816801", "CSAFPID-342816", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-764275", "CSAFPID-764752", "CSAFPID-816846", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-912046", "CSAFPID-1503640", "CSAFPID-816845", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] } ], "title": "CVE-2024-25710" }, { "cve": "CVE-2024-26130", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "other", "text": "NULL Pointer Dereference", "title": "CWE-476" } ], "product_status": { "known_affected": [ "CSAFPID-89587", "CSAFPID-342816", "CSAFPID-764275", "CSAFPID-764752", "CSAFPID-816798", "CSAFPID-816801", "CSAFPID-816846", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-912046", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-816845", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2024-26130", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-26130.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-89587", "CSAFPID-342816", "CSAFPID-764275", "CSAFPID-764752", "CSAFPID-816798", "CSAFPID-816801", "CSAFPID-816846", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-912046", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-816845", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] } ], "title": "CVE-2024-26130" }, { "cve": "CVE-2024-26308", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "other", "text": "Allocation of Resources Without Limits or Throttling", "title": "CWE-770" } ], "product_status": { "known_affected": [ "CSAFPID-89587", "CSAFPID-1673384", "CSAFPID-816871", "CSAFPID-816798", "CSAFPID-342816", "CSAFPID-764275", "CSAFPID-764752", "CSAFPID-816801", "CSAFPID-816846", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-912046", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-816845", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2024-26308", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-26308.json" } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-89587", "CSAFPID-1673384", "CSAFPID-816871", "CSAFPID-816798", "CSAFPID-342816", "CSAFPID-764275", "CSAFPID-764752", "CSAFPID-816801", "CSAFPID-816846", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-912046", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-816845", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] } ], "title": "CVE-2024-26308" }, { "cve": "CVE-2024-27983", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" } ], "product_status": { "known_affected": [ "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2024-27983", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27983.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.2, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "version": "3.1" }, "products": [ "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] } ], "title": "CVE-2024-27983" }, { "cve": "CVE-2024-28182", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" }, { "category": "other", "text": "Improper Resource Shutdown or Release", "title": "CWE-404" }, { "category": "other", "text": "Detection of Error Condition Without Action", "title": "CWE-390" }, { "category": "other", "text": "Allocation of Resources Without Limits or Throttling", "title": "CWE-770" } ], "product_status": { "known_affected": [ "CSAFPID-1673442", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2024-28182", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-28182.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673442", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] } ], "title": "CVE-2024-28182" }, { "cve": "CVE-2024-28849", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "other", "text": "Exposure of Sensitive Information to an Unauthorized Actor", "title": "CWE-200" } ], "product_status": { "known_affected": [ "CSAFPID-89587", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2024-28849", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-28849.json" } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "CSAFPID-89587", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] } ], "title": "CVE-2024-28849" }, { "cve": "CVE-2024-28887", "cwe": { "id": "CWE-427", "name": "Uncontrolled Search Path Element" }, "notes": [ { "category": "other", "text": "Uncontrolled Search Path Element", "title": "CWE-427" } ], "product_status": { "known_affected": [ "CSAFPID-1673385", "CSAFPID-1673442", "CSAFPID-1673386" ] }, "references": [ { "category": "self", "summary": "CVE-2024-28887", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-28887.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673385", "CSAFPID-1673442", "CSAFPID-1673386" ] } ], "title": "CVE-2024-28887" }, { "cve": "CVE-2024-29025", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "other", "text": "Allocation of Resources Without Limits or Throttling", "title": "CWE-770" } ], "product_status": { "known_affected": [ "CSAFPID-1673488", "CSAFPID-1673489", "CSAFPID-1673491", "CSAFPID-1673492", "CSAFPID-1673493", "CSAFPID-1673495", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2024-29025", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-29025.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.3, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.1" }, "products": [ "CSAFPID-1673488", "CSAFPID-1673489", "CSAFPID-1673491", "CSAFPID-1673492", "CSAFPID-1673493", "CSAFPID-1673495", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] } ], "title": "CVE-2024-29025" }, { "cve": "CVE-2024-29131", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "other", "text": "Out-of-bounds Write", "title": "CWE-787" } ], "product_status": { "known_affected": [ "CSAFPID-1673497", "CSAFPID-1673397", "CSAFPID-1673384", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2024-29131", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-29131.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.3, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.1" }, "products": [ "CSAFPID-1673497", "CSAFPID-1673397", "CSAFPID-1673384", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] } ], "title": "CVE-2024-29131" }, { "cve": "CVE-2024-29133", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "other", "text": "Out-of-bounds Write", "title": "CWE-787" } ], "product_status": { "known_affected": [ "CSAFPID-1673497", "CSAFPID-1673397", "CSAFPID-1673384", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2024-29133", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-29133.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.3, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.1" }, "products": [ "CSAFPID-1673497", "CSAFPID-1673397", "CSAFPID-1673384", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] } ], "title": "CVE-2024-29133" }, { "cve": "CVE-2024-31079", "cwe": { "id": "CWE-404", "name": "Improper Resource Shutdown or Release" }, "notes": [ { "category": "other", "text": "Improper Resource Shutdown or Release", "title": "CWE-404" }, { "category": "other", "text": "Stack-based Buffer Overflow", "title": "CWE-121" } ], "product_status": { "known_affected": [ "CSAFPID-89587" ] }, "references": [ { "category": "self", "summary": "CVE-2024-31079", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-31079.json" } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "version": "3.1" }, "products": [ "CSAFPID-89587" ] } ], "title": "CVE-2024-31079" }, { "cve": "CVE-2024-32760", "cwe": { "id": "CWE-404", "name": "Improper Resource Shutdown or Release" }, "notes": [ { "category": "other", "text": "Improper Resource Shutdown or Release", "title": "CWE-404" }, { "category": "other", "text": "Out-of-bounds Write", "title": "CWE-787" } ], "product_status": { "known_affected": [ "CSAFPID-89587" ] }, "references": [ { "category": "self", "summary": "CVE-2024-32760", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-32760.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-89587" ] } ], "title": "CVE-2024-32760" }, { "cve": "CVE-2024-34161", "cwe": { "id": "CWE-401", "name": "Missing Release of Memory after Effective Lifetime" }, "notes": [ { "category": "other", "text": "Missing Release of Memory after Effective Lifetime", "title": "CWE-401" }, { "category": "other", "text": "Use After Free", "title": "CWE-416" } ], "product_status": { "known_affected": [ "CSAFPID-89587" ] }, "references": [ { "category": "self", "summary": "CVE-2024-34161", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-34161.json" } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "version": "3.1" }, "products": [ "CSAFPID-89587" ] } ], "title": "CVE-2024-34161" }, { "cve": "CVE-2024-34750", "cwe": { "id": "CWE-755", "name": "Improper Handling of Exceptional Conditions" }, "notes": [ { "category": "other", "text": "Improper Handling of Exceptional Conditions", "title": "CWE-755" }, { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" } ], "product_status": { "known_affected": [ "CSAFPID-1673504", "CSAFPID-1673506" ] }, "references": [ { "category": "self", "summary": "CVE-2024-34750", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-34750.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673504", "CSAFPID-1673506" ] } ], "title": "CVE-2024-34750" }, { "cve": "CVE-2024-35200", "cwe": { "id": "CWE-404", "name": "Improper Resource Shutdown or Release" }, "notes": [ { "category": "other", "text": "Improper Resource Shutdown or Release", "title": "CWE-404" }, { "category": "other", "text": "NULL Pointer Dereference", "title": "CWE-476" } ], "product_status": { "known_affected": [ "CSAFPID-89587" ] }, "references": [ { "category": "self", "summary": "CVE-2024-35200", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-35200.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-89587" ] } ], "title": "CVE-2024-35200" }, { "cve": "CVE-2024-36137", "cwe": { "id": "CWE-275", "name": "-" }, "notes": [ { "category": "other", "text": "CWE-275", "title": "CWE-275" }, { "category": "other", "text": "Incorrect Permission Assignment for Critical Resource", "title": "CWE-732" } ], "product_status": { "known_affected": [ "CSAFPID-89587" ] }, "references": [ { "category": "self", "summary": "CVE-2024-36137", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-36137.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-89587" ] } ], "title": "CVE-2024-36137" }, { "cve": "CVE-2024-36138", "cwe": { "id": "CWE-77", "name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)" }, "notes": [ { "category": "other", "text": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)", "title": "CWE-77" } ], "product_status": { "known_affected": [ "CSAFPID-89587" ] }, "references": [ { "category": "self", "summary": "CVE-2024-36138", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-36138.json" } ], "title": "CVE-2024-36138" }, { "cve": "CVE-2024-36387", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "other", "text": "NULL Pointer Dereference", "title": "CWE-476" } ], "product_status": { "known_affected": [ "CSAFPID-345049", "CSAFPID-611417" ] }, "references": [ { "category": "self", "summary": "CVE-2024-36387", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-36387.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-345049", "CSAFPID-611417" ] } ], "title": "CVE-2024-36387" }, { "cve": "CVE-2024-37370", "cwe": { "id": "CWE-130", "name": "Improper Handling of Length Parameter Inconsistency" }, "notes": [ { "category": "other", "text": "Improper Handling of Length Parameter Inconsistency", "title": "CWE-130" } ], "product_status": { "known_affected": [ "CSAFPID-1673507", "CSAFPID-1673508", "CSAFPID-1673509" ] }, "references": [ { "category": "self", "summary": "CVE-2024-37370", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-37370.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673507", "CSAFPID-1673508", "CSAFPID-1673509" ] } ], "title": "CVE-2024-37370" }, { "cve": "CVE-2024-37371", "cwe": { "id": "CWE-130", "name": "Improper Handling of Length Parameter Inconsistency" }, "notes": [ { "category": "other", "text": "Improper Handling of Length Parameter Inconsistency", "title": "CWE-130" } ], "product_status": { "known_affected": [ "CSAFPID-1673507", "CSAFPID-1673508", "CSAFPID-1673509" ] }, "references": [ { "category": "self", "summary": "CVE-2024-37371", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-37371.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673507", "CSAFPID-1673508", "CSAFPID-1673509" ] } ], "title": "CVE-2024-37371" }, { "cve": "CVE-2024-37372", "product_status": { "known_affected": [ "CSAFPID-89587" ] }, "references": [ { "category": "self", "summary": "CVE-2024-37372", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-37372.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-89587" ] } ], "title": "CVE-2024-37372" }, { "cve": "CVE-2024-38356", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)" }, "notes": [ { "category": "other", "text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)", "title": "CWE-79" } ], "product_status": { "known_affected": [ "CSAFPID-1673510", "CSAFPID-1503575", "CSAFPID-1673188" ] }, "references": [ { "category": "self", "summary": "CVE-2024-38356", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38356.json" } ], "scores": [ { "cvss_v3": { "baseScore": 6.1, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1" }, "products": [ "CSAFPID-1673510", "CSAFPID-1503575", "CSAFPID-1673188" ] } ], "title": "CVE-2024-38356" }, { "cve": "CVE-2024-38357", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)" }, "notes": [ { "category": "other", "text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)", "title": "CWE-79" } ], "product_status": { "known_affected": [ "CSAFPID-1673510", "CSAFPID-1503575", "CSAFPID-1673188" ] }, "references": [ { "category": "self", "summary": "CVE-2024-38357", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38357.json" } ], "scores": [ { "cvss_v3": { "baseScore": 6.1, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1" }, "products": [ "CSAFPID-1673510", "CSAFPID-1503575", "CSAFPID-1673188" ] } ], "title": "CVE-2024-38357" }, { "cve": "CVE-2024-38472", "cwe": { "id": "CWE-918", "name": "Server-Side Request Forgery (SSRF)" }, "notes": [ { "category": "other", "text": "Server-Side Request Forgery (SSRF)", "title": "CWE-918" } ], "product_status": { "known_affected": [ "CSAFPID-345049", "CSAFPID-611417" ] }, "references": [ { "category": "self", "summary": "CVE-2024-38472", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38472.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "CSAFPID-345049", "CSAFPID-611417" ] } ], "title": "CVE-2024-38472" }, { "cve": "CVE-2024-38473", "cwe": { "id": "CWE-172", "name": "Encoding Error" }, "notes": [ { "category": "other", "text": "Encoding Error", "title": "CWE-172" }, { "category": "other", "text": "Improper Encoding or Escaping of Output", "title": "CWE-116" } ], "product_status": { "known_affected": [ "CSAFPID-345049", "CSAFPID-611417" ] }, "references": [ { "category": "self", "summary": "CVE-2024-38473", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38473.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-345049", "CSAFPID-611417" ] } ], "title": "CVE-2024-38473" }, { "cve": "CVE-2024-38474", "cwe": { "id": "CWE-172", "name": "Encoding Error" }, "notes": [ { "category": "other", "text": "Encoding Error", "title": "CWE-172" }, { "category": "other", "text": "Improper Encoding or Escaping of Output", "title": "CWE-116" } ], "product_status": { "known_affected": [ "CSAFPID-345049", "CSAFPID-611417" ] }, "references": [ { "category": "self", "summary": "CVE-2024-38474", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38474.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-345049", "CSAFPID-611417" ] } ], "title": "CVE-2024-38474" }, { "cve": "CVE-2024-38475", "cwe": { "id": "CWE-284", "name": "Improper Access Control" }, "notes": [ { "category": "other", "text": "Improper Access Control", "title": "CWE-284" }, { "category": "other", "text": "Improper Encoding or Escaping of Output", "title": "CWE-116" } ], "product_status": { "known_affected": [ "CSAFPID-345049", "CSAFPID-611417" ] }, "references": [ { "category": "self", "summary": "CVE-2024-38475", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38475.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "CSAFPID-345049", "CSAFPID-611417" ] } ], "title": "CVE-2024-38475" }, { "cve": "CVE-2024-38476", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "other", "text": "Exposure of Sensitive Information to an Unauthorized Actor", "title": "CWE-200" }, { "category": "other", "text": "Inclusion of Functionality from Untrusted Control Sphere", "title": "CWE-829" } ], "product_status": { "known_affected": [ "CSAFPID-345049", "CSAFPID-611417" ] }, "references": [ { "category": "self", "summary": "CVE-2024-38476", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38476.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-345049", "CSAFPID-611417" ] } ], "title": "CVE-2024-38476" }, { "cve": "CVE-2024-38477", "cwe": { "id": "CWE-404", "name": "Improper Resource Shutdown or Release" }, "notes": [ { "category": "other", "text": "Improper Resource Shutdown or Release", "title": "CWE-404" }, { "category": "other", "text": "NULL Pointer Dereference", "title": "CWE-476" } ], "product_status": { "known_affected": [ "CSAFPID-345049", "CSAFPID-611417" ] }, "references": [ { "category": "self", "summary": "CVE-2024-38477", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38477.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-345049", "CSAFPID-611417" ] } ], "title": "CVE-2024-38477" }, { "cve": "CVE-2024-38998", "cwe": { "id": "CWE-1321", "name": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)" }, "notes": [ { "category": "other", "text": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)", "title": "CWE-1321" } ], "product_status": { "known_affected": [ "CSAFPID-1673511", "CSAFPID-1673512", "CSAFPID-1503575", "CSAFPID-1673188" ] }, "references": [ { "category": "self", "summary": "CVE-2024-38998", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38998.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673511", "CSAFPID-1673512", "CSAFPID-1503575", "CSAFPID-1673188" ] } ], "title": "CVE-2024-38998" }, { "cve": "CVE-2024-38999", "cwe": { "id": "CWE-1321", "name": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)" }, "notes": [ { "category": "other", "text": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)", "title": "CWE-1321" } ], "product_status": { "known_affected": [ "CSAFPID-1673511", "CSAFPID-1673512", "CSAFPID-1503575", "CSAFPID-1673188" ] }, "references": [ { "category": "self", "summary": "CVE-2024-38999", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38999.json" } ], "scores": [ { "cvss_v3": { "baseScore": 10.0, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673511", "CSAFPID-1673512", "CSAFPID-1503575", "CSAFPID-1673188" ] } ], "title": "CVE-2024-38999" }, { "cve": "CVE-2024-39573", "cwe": { "id": "CWE-918", "name": "Server-Side Request Forgery (SSRF)" }, "notes": [ { "category": "other", "text": "Server-Side Request Forgery (SSRF)", "title": "CWE-918" }, { "category": "other", "text": "Improper Input Validation", "title": "CWE-20" } ], "product_status": { "known_affected": [ "CSAFPID-345049", "CSAFPID-611417" ] }, "references": [ { "category": "self", "summary": "CVE-2024-39573", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-39573.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "CSAFPID-345049", "CSAFPID-611417" ] } ], "title": "CVE-2024-39573" }, { "cve": "CVE-2024-39884", "cwe": { "id": "CWE-18", "name": "-" }, "notes": [ { "category": "other", "text": "CWE-18", "title": "CWE-18" } ], "product_status": { "known_affected": [ "CSAFPID-345049", "CSAFPID-611417" ] }, "references": [ { "category": "self", "summary": "CVE-2024-39884", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-39884.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "CSAFPID-345049", "CSAFPID-611417" ] } ], "title": "CVE-2024-39884" }, { "cve": "CVE-2024-40725", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "other", "text": "Exposure of Sensitive Information to an Unauthorized Actor", "title": "CWE-200" }, { "category": "other", "text": "Exposure of Resource to Wrong Sphere", "title": "CWE-668" } ], "product_status": { "known_affected": [ "CSAFPID-345049", "CSAFPID-611417", "CSAFPID-1673479" ] }, "references": [ { "category": "self", "summary": "CVE-2024-40725", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40725.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "CSAFPID-345049", "CSAFPID-611417", "CSAFPID-1673479" ] } ], "title": "CVE-2024-40725" }, { "cve": "CVE-2024-40898", "cwe": { "id": "CWE-918", "name": "Server-Side Request Forgery (SSRF)" }, "notes": [ { "category": "other", "text": "Server-Side Request Forgery (SSRF)", "title": "CWE-918" } ], "product_status": { "known_affected": [ "CSAFPID-345049", "CSAFPID-611417", "CSAFPID-1673479" ] }, "references": [ { "category": "self", "summary": "CVE-2024-40898", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40898.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "CSAFPID-345049", "CSAFPID-611417", "CSAFPID-1673479" ] } ], "title": "CVE-2024-40898" }, { "cve": "CVE-2024-45490", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "other", "text": "Integer Overflow or Wraparound", "title": "CWE-190" }, { "category": "other", "text": "Incorrect Calculation of Buffer Size", "title": "CWE-131" } ], "product_status": { "known_affected": [ "CSAFPID-1673385", "CSAFPID-1673442", "CSAFPID-1673386" ] }, "references": [ { "category": "self", "summary": "CVE-2024-45490", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-45490.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673385", "CSAFPID-1673442", "CSAFPID-1673386" ] } ], "title": "CVE-2024-45490" }, { "cve": "CVE-2024-45491", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "other", "text": "Integer Overflow or Wraparound", "title": "CWE-190" } ], "product_status": { "known_affected": [ "CSAFPID-1673385", "CSAFPID-1673442", "CSAFPID-1673386" ] }, "references": [ { "category": "self", "summary": "CVE-2024-45491", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-45491.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673385", "CSAFPID-1673442", "CSAFPID-1673386" ] } ], "title": "CVE-2024-45491" }, { "cve": "CVE-2024-45492", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "other", "text": "Integer Overflow or Wraparound", "title": "CWE-190" } ], "product_status": { "known_affected": [ "CSAFPID-1673385", "CSAFPID-1673442", "CSAFPID-1673386" ] }, "references": [ { "category": "self", "summary": "CVE-2024-45492", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-45492.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673385", "CSAFPID-1673442", "CSAFPID-1673386" ] } ], "title": "CVE-2024-45492" }, { "cve": "CVE-2024-45801", "cwe": { "id": "CWE-1333", "name": "Inefficient Regular Expression Complexity" }, "notes": [ { "category": "other", "text": "Inefficient Regular Expression Complexity", "title": "CWE-1333" }, { "category": "other", "text": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)", "title": "CWE-1321" } ], "product_status": { "known_affected": [ "CSAFPID-1503575", "CSAFPID-1673188" ] }, "references": [ { "category": "self", "summary": "CVE-2024-45801", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-45801.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.3, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.1" }, "products": [ "CSAFPID-1503575", "CSAFPID-1673188" ] } ], "title": "CVE-2024-45801" } ] }
ncsc-2024-0414
Vulnerability from csaf_ncscnl
Notes
{ "document": { "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "nl", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." }, { "category": "description", "text": "Oracle heeft kwetsbaarheden verholpen in diverse Communications producten en systemen.", "title": "Feiten" }, { "category": "description", "text": "Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorie\u00ebn schade:\n\n- Denial-of-Service (DoS)\n- Manipuleren van gegevens\n- Uitvoer van willekeurige code (Gebruikersrechten)\n- Uitvoer van willekeurige code (Administratorrechten)\n- Toegang tot gevoelige gegevens", "title": "Interpretaties" }, { "category": "description", "text": "Oracle heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.", "title": "Oplossingen" }, { "category": "general", "text": "medium", "title": "Kans" }, { "category": "general", "text": "high", "title": "Schade" }, { "category": "general", "text": "Heap-based Buffer Overflow", "title": "CWE-122" }, { "category": "general", "text": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)", "title": "CWE-835" }, { "category": "general", "text": "Improper Input Validation", "title": "CWE-20" }, { "category": "general", "text": "Return of Pointer Value Outside of Expected Range", "title": "CWE-466" }, { "category": "general", "text": "Unchecked Input for Loop Condition", "title": "CWE-606" }, { "category": "general", "text": "Detection of Error Condition Without Action", "title": "CWE-390" }, { "category": "general", "text": "Asymmetric Resource Consumption (Amplification)", "title": "CWE-405" }, { "category": "general", "text": "Truncation of Security-relevant Information", "title": "CWE-222" }, { "category": "general", "text": "Signal Handler Race Condition", "title": "CWE-364" }, { "category": "general", "text": "Multiple Interpretations of UI Input", "title": "CWE-450" }, { "category": "general", "text": "Improper Handling of Length Parameter Inconsistency", "title": "CWE-130" }, { "category": "general", "text": "Missing Release of Resource after Effective Lifetime", "title": "CWE-772" }, { "category": "general", "text": "Incorrect Resource Transfer Between Spheres", "title": "CWE-669" }, { "category": "general", "text": "Buffer Over-read", "title": "CWE-126" }, { "category": "general", "text": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)", "title": "CWE-88" }, { "category": "general", "text": "Acceptance of Extraneous Untrusted Data With Trusted Data", "title": "CWE-349" }, { "category": "general", "text": "Improper Handling of Exceptional Conditions", "title": "CWE-755" }, { "category": "general", "text": "Excessive Iteration", "title": "CWE-834" }, { "category": "general", "text": "Inefficient Algorithmic Complexity", "title": "CWE-407" }, { "category": "general", "text": "Improper Check for Unusual or Exceptional Conditions", "title": "CWE-754" }, { "category": "general", "text": "Improper Check or Handling of Exceptional Conditions", "title": "CWE-703" }, { "category": "general", "text": "Uncontrolled Search Path Element", "title": "CWE-427" }, { "category": "general", "text": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)", "title": "CWE-601" }, { "category": "general", "text": "Signed to Unsigned Conversion Error", "title": "CWE-195" }, { "category": "general", "text": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)", "title": "CWE-444" }, { "category": "general", "text": "Improper Encoding or Escaping of Output", "title": "CWE-116" }, { "category": "general", "text": "Insufficient Verification of Data Authenticity", "title": "CWE-345" }, { "category": "general", "text": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)", "title": "CWE-77" }, { "category": "general", "text": "Integer Overflow or Wraparound", "title": "CWE-190" }, { "category": "general", "text": "UNIX Symbolic Link (Symlink) Following", "title": "CWE-61" }, { "category": "general", "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)", "title": "CWE-362" }, { "category": "general", "text": "Out-of-bounds Read", "title": "CWE-125" }, { "category": "general", "text": "Improper Resource Shutdown or Release", "title": "CWE-404" }, { "category": "general", "text": "Improper Access Control", "title": "CWE-284" }, { "category": "general", "text": "Improper Restriction of Operations within the Bounds of a Memory Buffer", "title": "CWE-119" }, { "category": "general", "text": "Use After Free", "title": "CWE-416" }, { "category": "general", "text": "Missing Release of Memory after Effective Lifetime", "title": "CWE-401" }, { "category": "general", "text": "NULL Pointer Dereference", "title": "CWE-476" }, { "category": "general", "text": "Incomplete Cleanup", "title": "CWE-459" }, { "category": "general", "text": "Improper Control of Generation of Code (\u0027Code Injection\u0027)", "title": "CWE-94" }, { "category": "general", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" }, { "category": "general", "text": "Allocation of Resources Without Limits or Throttling", "title": "CWE-770" }, { "category": "general", "text": "Uncaught Exception", "title": "CWE-248" }, { "category": "general", "text": "Uncontrolled Recursion", "title": "CWE-674" }, { "category": "general", "text": "Server-Side Request Forgery (SSRF)", "title": "CWE-918" }, { "category": "general", "text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)", "title": "CWE-22" }, { "category": "general", "text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)", "title": "CWE-78" }, { "category": "general", "text": "Out-of-bounds Write", "title": "CWE-787" }, { "category": "general", "text": "Exposure of Sensitive Information to an Unauthorized Actor", "title": "CWE-200" } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "Nationaal Cyber Security Centrum", "namespace": "https://www.ncsc.nl/" }, "references": [ { "category": "external", "summary": "Reference - cveprojectv5; hkcert; nvd; oracle; redhat", "url": "https://www.oracle.com/security-alerts/cpuoct2024.html" } ], "title": "Kwetsbaarheden verholpen in Oracle Communications", "tracking": { "current_release_date": "2024-10-17T13:17:52.103171Z", "id": "NCSC-2024-0414", "initial_release_date": "2024-10-17T13:17:52.103171Z", "revision_history": [ { "date": "2024-10-17T13:17:52.103171Z", "number": "0", "summary": "Initiele versie" } ], "status": "final", "version": "1.0.0" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1635313", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:10.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1635305", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:12.11.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1635311", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:12.11.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1635312", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:12.11.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1635323", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:12.6.1.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1670430", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:14.0.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1674632", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:14.0.0.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1674630", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:14.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1635320", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:15.0.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1674633", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:17.0.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1670439", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:22.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1635322", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:23.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1670429", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:23.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1670435", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:23.2.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1670431", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:23.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1670436", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:23.3.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1670432", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:23.3.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1635321", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:23.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1635310", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:23.4.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1635318", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:23.4.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1674640", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:23.4.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1674642", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:23.4.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1670434", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:24.1.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1635316", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:24.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1674639", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:24.1.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1635314", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:24.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1674638", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:24.2.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1674637", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:24.2.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1635306", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:4.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1635307", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:4.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1635317", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:46.6.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1635319", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:46.6.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1670438", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:5.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1635324", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:5.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1635315", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:5.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1670433", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:9.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1674641", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:9.0.1.10.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1674635", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:9.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1674636", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:9.1.1.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1670437", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:9.1.1.7.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1674631", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:9.1.1.9.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1674634", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:9.1.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1635308", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:9.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications", "product": { "name": "communications", "product_id": "CSAFPID-1635309", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications:9.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications__10.4.0.4", "product": { "name": "communications__10.4.0.4", "product_id": "CSAFPID-1674629", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications__10.4.0.4:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications___23.4.2", "product": { "name": "communications___23.4.2", "product_id": "CSAFPID-1670442", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications___23.4.2:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications___23.4.3", "product": { "name": "communications___23.4.3", "product_id": "CSAFPID-1635325", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications___23.4.3:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications___23.4.4", "product": { "name": "communications___23.4.4", "product_id": "CSAFPID-1635326", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications___23.4.4:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications___23.4.5", "product": { "name": "communications___23.4.5", "product_id": "CSAFPID-1674645", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications___23.4.5:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications___23.4.6", "product": { "name": "communications___23.4.6", "product_id": "CSAFPID-1674646", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications___23.4.6:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications___24.2.0", "product": { "name": "communications___24.2.0", "product_id": "CSAFPID-1674644", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications___24.2.0:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications___7.2.1.0.0", "product": { "name": "communications___7.2.1.0.0", "product_id": "CSAFPID-1670441", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications___7.2.1.0.0:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications___8.6.0.6", "product": { "name": "communications___8.6.0.6", "product_id": "CSAFPID-1635327", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications___8.6.0.6:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications___8.6.0.8", "product": { "name": "communications___8.6.0.8", "product_id": "CSAFPID-1635328", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications___8.6.0.8:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications___9.0.2", "product": { "name": "communications___9.0.2", "product_id": "CSAFPID-1670440", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications___9.0.2:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications___9.0.3", "product": { "name": "communications___9.0.3", "product_id": "CSAFPID-1635329", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications___9.0.3:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications___9.1.1.8.0", "product": { "name": "communications___9.1.1.8.0", "product_id": "CSAFPID-1674643", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications___9.1.1.8.0:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_applications", "product": { "name": "communications_applications", "product_id": "CSAFPID-1674621", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_applications:15.0.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_applications", "product": { "name": "communications_applications", "product_id": "CSAFPID-1674618", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_applications:6.0.1.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_applications", "product": { "name": "communications_applications", "product_id": "CSAFPID-1674619", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_applications:7.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_applications", "product": { "name": "communications_applications", "product_id": "CSAFPID-1674622", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_applications:7.4.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_applications", "product": { "name": "communications_applications", "product_id": "CSAFPID-1674617", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_applications:7.4.3.0.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_applications", "product": { "name": "communications_applications", "product_id": "CSAFPID-1674623", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_applications:7.5.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_applications", "product": { "name": "communications_applications", "product_id": "CSAFPID-1674620", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_applications:8.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_applications___12.0.6.0.0", "product": { "name": "communications_applications___12.0.6.0.0", "product_id": "CSAFPID-1674627", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_applications___12.0.6.0.0:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_applications___5.5.22", "product": { "name": "communications_applications___5.5.22", "product_id": "CSAFPID-1674626", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_applications___5.5.22:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_applications___6.0.3", "product": { "name": "communications_applications___6.0.3", "product_id": "CSAFPID-1674628", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_applications___6.0.3:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_applications___6.0.4", "product": { "name": "communications_applications___6.0.4", "product_id": "CSAFPID-1674624", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_applications___6.0.4:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_applications___6.0.5", "product": { "name": "communications_applications___6.0.5", "product_id": "CSAFPID-1674625", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_applications___6.0.5:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_asap", "product": { "name": "communications_asap", "product_id": "CSAFPID-204629", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_asap:7.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_asap", "product": { "name": "communications_asap", "product_id": "CSAFPID-1673475", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_asap:7.4.3.0.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_asap", "product": { "name": "communications_asap", "product_id": "CSAFPID-816792", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_asap:7.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_billing_and_revenue_management", "product": { "name": "communications_billing_and_revenue_management", "product_id": "CSAFPID-764735", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_billing_and_revenue_management:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_billing_and_revenue_management", "product": { "name": "communications_billing_and_revenue_management", "product_id": "CSAFPID-1650734", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.4.0-12.0.0.8.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_billing_and_revenue_management", "product": { "name": "communications_billing_and_revenue_management", "product_id": "CSAFPID-204639", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_billing_and_revenue_management", "product": { "name": "communications_billing_and_revenue_management", "product_id": "CSAFPID-204627", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_billing_and_revenue_management", "product": { "name": "communications_billing_and_revenue_management", "product_id": "CSAFPID-816793", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_billing_and_revenue_management:15.0.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_billing_and_revenue_management", "product": { "name": "communications_billing_and_revenue_management", "product_id": "CSAFPID-912557", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_billing_and_revenue_management:15.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_billing_and_revenue_management__-_elastic_charging_engine", "product": { "name": "communications_billing_and_revenue_management__-_elastic_charging_engine", "product_id": "CSAFPID-219835", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_billing_and_revenue_management__-_elastic_charging_engine:12.0.0.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_brm_-_elastic_charging_engine", "product": { "name": "communications_brm_-_elastic_charging_engine", "product_id": "CSAFPID-764247", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_brm_-_elastic_charging_engine:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_brm_-_elastic_charging_engine", "product": { "name": "communications_brm_-_elastic_charging_engine", "product_id": "CSAFPID-209548", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_brm_-_elastic_charging_engine:11.3.0.9.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_brm_-_elastic_charging_engine", "product": { "name": "communications_brm_-_elastic_charging_engine", "product_id": "CSAFPID-209549", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_brm_-_elastic_charging_engine:11.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_brm_-_elastic_charging_engine", "product": { "name": "communications_brm_-_elastic_charging_engine", "product_id": "CSAFPID-41194", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_brm_-_elastic_charging_engine:12.0.0.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_brm_-_elastic_charging_engine", "product": { "name": "communications_brm_-_elastic_charging_engine", "product_id": "CSAFPID-1650820", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_brm_-_elastic_charging_engine:12.0.0.4-12.0.0.8:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_brm_-_elastic_charging_engine", "product": { "name": "communications_brm_-_elastic_charging_engine", "product_id": "CSAFPID-765241", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_brm_-_elastic_charging_engine:12.0.0.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_brm_-_elastic_charging_engine", "product": { "name": "communications_brm_-_elastic_charging_engine", "product_id": "CSAFPID-209546", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_brm_-_elastic_charging_engine:12.0.0.5.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_brm_-_elastic_charging_engine", "product": { "name": "communications_brm_-_elastic_charging_engine", "product_id": "CSAFPID-209550", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_brm_-_elastic_charging_engine:12.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_brm_-_elastic_charging_engine", "product": { "name": "communications_brm_-_elastic_charging_engine", "product_id": "CSAFPID-498607", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_brm_-_elastic_charging_engine:12:0.0.5.0:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_brm_-_elastic_charging_engine", "product": { "name": "communications_brm_-_elastic_charging_engine", "product_id": "CSAFPID-912556", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_brm_-_elastic_charging_engine:15.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_calendar_server", "product": { "name": "communications_calendar_server", "product_id": "CSAFPID-764736", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_calendar_server:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_calendar_server", "product": { "name": "communications_calendar_server", "product_id": "CSAFPID-220190", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_calendar_server:8.0.0.6.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_configuration_console", "product": { "name": "communications_cloud_native_configuration_console", "product_id": "CSAFPID-391501", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_configuration_console:22.4.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_configuration_console", "product": { "name": "communications_cloud_native_configuration_console", "product_id": "CSAFPID-440102", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_configuration_console:23.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_automated_test_suite", "product": { "name": "communications_cloud_native_core_automated_test_suite", "product_id": "CSAFPID-89545", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_automated_test_suite:1.8.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_automated_test_suite", "product": { "name": "communications_cloud_native_core_automated_test_suite", "product_id": "CSAFPID-180215", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_automated_test_suite:1.9.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_automated_test_suite", "product": { "name": "communications_cloud_native_core_automated_test_suite", "product_id": "CSAFPID-180197", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_automated_test_suite:22.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_automated_test_suite", "product": { "name": "communications_cloud_native_core_automated_test_suite", "product_id": "CSAFPID-220548", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_automated_test_suite:22.2.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_automated_test_suite", "product": { "name": "communications_cloud_native_core_automated_test_suite", "product_id": "CSAFPID-41516", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_automated_test_suite:22.3.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_automated_test_suite", "product": { "name": "communications_cloud_native_core_automated_test_suite", "product_id": "CSAFPID-41515", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_automated_test_suite:22.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_automated_test_suite", "product": { "name": "communications_cloud_native_core_automated_test_suite", "product_id": "CSAFPID-220057", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_automated_test_suite:22.4.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_automated_test_suite", "product": { "name": "communications_cloud_native_core_automated_test_suite", "product_id": "CSAFPID-220055", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_automated_test_suite:23.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_automated_test_suite", "product": { "name": "communications_cloud_native_core_automated_test_suite", "product_id": "CSAFPID-220909", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_automated_test_suite:23.1.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_automated_test_suite", "product": { "name": "communications_cloud_native_core_automated_test_suite", "product_id": "CSAFPID-816765", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_automated_test_suite:23.1.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_automated_test_suite", "product": { "name": "communications_cloud_native_core_automated_test_suite", "product_id": "CSAFPID-816766", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_automated_test_suite:23.2.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_automated_test_suite", "product": { "name": "communications_cloud_native_core_automated_test_suite", "product_id": "CSAFPID-816767", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_automated_test_suite:23.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_automated_test_suite", "product": { "name": "communications_cloud_native_core_automated_test_suite", "product_id": "CSAFPID-1503577", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_automated_test_suite:23.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_automated_test_suite", "product": { "name": "communications_cloud_native_core_automated_test_suite", "product_id": "CSAFPID-1673416", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_automated_test_suite:23.4.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_automated_test_suite", "product": { "name": "communications_cloud_native_core_automated_test_suite", "product_id": "CSAFPID-1673516", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_automated_test_suite:23.4.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_automated_test_suite", "product": { "name": "communications_cloud_native_core_automated_test_suite", "product_id": "CSAFPID-1673412", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_automated_test_suite:24.1.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_automated_test_suite", "product": { "name": "communications_cloud_native_core_automated_test_suite", "product_id": "CSAFPID-1673411", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_automated_test_suite:24.2.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_binding_support_function", "product": { "name": "communications_cloud_native_core_binding_support_function", "product_id": "CSAFPID-764237", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_binding_support_function", "product": { "name": "communications_cloud_native_core_binding_support_function", "product_id": "CSAFPID-2045", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:1.10.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_binding_support_function", "product": { "name": "communications_cloud_native_core_binding_support_function", "product_id": "CSAFPID-40612", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:1.11.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_binding_support_function", "product": { "name": "communications_cloud_native_core_binding_support_function", "product_id": "CSAFPID-608629", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:22.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_binding_support_function", "product": { "name": "communications_cloud_native_core_binding_support_function", "product_id": "CSAFPID-93784", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:22.1.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_binding_support_function", "product": { "name": "communications_cloud_native_core_binding_support_function", "product_id": "CSAFPID-1899", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:22.1.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_binding_support_function", "product": { "name": "communications_cloud_native_core_binding_support_function", "product_id": "CSAFPID-41111", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:22.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_binding_support_function", "product": { "name": "communications_cloud_native_core_binding_support_function", "product_id": "CSAFPID-1685", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:22.2.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_binding_support_function", "product": { "name": "communications_cloud_native_core_binding_support_function", "product_id": "CSAFPID-493445", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:22.2.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_binding_support_function", "product": { "name": "communications_cloud_native_core_binding_support_function", "product_id": "CSAFPID-294401", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:22.2.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_binding_support_function", "product": { "name": "communications_cloud_native_core_binding_support_function", "product_id": "CSAFPID-220547", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:22.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_binding_support_function", "product": { "name": "communications_cloud_native_core_binding_support_function", "product_id": "CSAFPID-764824", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:22.3.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_binding_support_function", "product": { "name": "communications_cloud_native_core_binding_support_function", "product_id": "CSAFPID-220459", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:22.3.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_binding_support_function", "product": { "name": "communications_cloud_native_core_binding_support_function", "product_id": "CSAFPID-45184", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:22.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_binding_support_function", "product": { "name": "communications_cloud_native_core_binding_support_function", "product_id": "CSAFPID-45182", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:23.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_binding_support_function", "product": { "name": "communications_cloud_native_core_binding_support_function", "product_id": "CSAFPID-45181", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:23.1.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_binding_support_function", "product": { "name": "communications_cloud_native_core_binding_support_function", "product_id": "CSAFPID-611405", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:23.1.7:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_binding_support_function", "product": { "name": "communications_cloud_native_core_binding_support_function", "product_id": "CSAFPID-611403", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:23.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_binding_support_function", "product": { "name": "communications_cloud_native_core_binding_support_function", "product_id": "CSAFPID-611404", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:23.2.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_binding_support_function", "product": { "name": "communications_cloud_native_core_binding_support_function", "product_id": "CSAFPID-1650752", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:23.4.0-23.4.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_binding_support_function", "product": { "name": "communications_cloud_native_core_binding_support_function", "product_id": "CSAFPID-1673396", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:23.4.0-23.4.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_binding_support_function", "product": { "name": "communications_cloud_native_core_binding_support_function", "product_id": "CSAFPID-912066", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:23.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_binding_support_function", "product": { "name": "communications_cloud_native_core_binding_support_function", "product_id": "CSAFPID-1503323", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:23.4.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_certificate_management", "product": { "name": "communications_cloud_native_core_certificate_management", "product_id": "CSAFPID-1673526", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_certificate_management:23.4.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_certificate_management", "product": { "name": "communications_cloud_native_core_certificate_management", "product_id": "CSAFPID-1673391", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_certificate_management:23.4.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_certificate_management", "product": { "name": "communications_cloud_native_core_certificate_management", "product_id": "CSAFPID-1673394", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_certificate_management:24.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_console", "product": { "name": "communications_cloud_native_core_console", "product_id": "CSAFPID-165550", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_console:1.7.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_console", "product": { "name": "communications_cloud_native_core_console", "product_id": "CSAFPID-93546", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_console:1.9.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_console", "product": { "name": "communications_cloud_native_core_console", "product_id": "CSAFPID-180195", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_console:22.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_console", "product": { "name": "communications_cloud_native_core_console", "product_id": "CSAFPID-40299", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_console:22.1.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_console", "product": { "name": "communications_cloud_native_core_console", "product_id": "CSAFPID-187447", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_console:22.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_console", "product": { "name": "communications_cloud_native_core_console", "product_id": "CSAFPID-45186", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_console:22.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_console", "product": { "name": "communications_cloud_native_core_console", "product_id": "CSAFPID-45185", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_console:22.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_console", "product": { "name": "communications_cloud_native_core_console", "product_id": "CSAFPID-220559", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_console:22.4.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_console", "product": { "name": "communications_cloud_native_core_console", "product_id": "CSAFPID-220558", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_console:23.1.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_console", "product": { "name": "communications_cloud_native_core_console", "product_id": "CSAFPID-764238", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_console:23.1.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_console", "product": { "name": "communications_cloud_native_core_console", "product_id": "CSAFPID-764239", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_console:23.2.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_console", "product": { "name": "communications_cloud_native_core_console", "product_id": "CSAFPID-816768", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_console:23.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_console", "product": { "name": "communications_cloud_native_core_console", "product_id": "CSAFPID-816769", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_console:23.3.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_console", "product": { "name": "communications_cloud_native_core_console", "product_id": "CSAFPID-912085", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_console:23.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_console", "product": { "name": "communications_cloud_native_core_console", "product_id": "CSAFPID-1503578", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_console:23.4.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_console", "product": { "name": "communications_cloud_native_core_console", "product_id": "CSAFPID-1673389", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_console:23.4.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_console", "product": { "name": "communications_cloud_native_core_console", "product_id": "CSAFPID-1673390", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_console:24.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_dbtier", "product": { "name": "communications_cloud_native_core_dbtier", "product_id": "CSAFPID-1673421", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_dbtier:24.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_dbtier", "product": { "name": "communications_cloud_native_core_dbtier", "product_id": "CSAFPID-1673420", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_dbtier:24.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_data_analytics_function", "product": { "name": "communications_cloud_native_core_network_data_analytics_function", "product_id": "CSAFPID-764825", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_data_analytics_function:22.0.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_data_analytics_function", "product": { "name": "communications_cloud_native_core_network_data_analytics_function", "product_id": "CSAFPID-816770", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_data_analytics_function:23.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_data_analytics_function", "product": { "name": "communications_cloud_native_core_network_data_analytics_function", "product_id": "CSAFPID-816771", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_data_analytics_function:23.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_data_analytics_function", "product": { "name": "communications_cloud_native_core_network_data_analytics_function", "product_id": "CSAFPID-912068", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_data_analytics_function:24.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_data_analytics_function", "product": { "name": "communications_cloud_native_core_network_data_analytics_function", "product_id": "CSAFPID-1503579", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_data_analytics_function:24.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_exposure_function", "product": { "name": "communications_cloud_native_core_network_exposure_function", "product_id": "CSAFPID-180201", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_exposure_function:22.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_exposure_function", "product": { "name": "communications_cloud_native_core_network_exposure_function", "product_id": "CSAFPID-1900", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_exposure_function:22.1.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_exposure_function", "product": { "name": "communications_cloud_native_core_network_exposure_function", "product_id": "CSAFPID-760687", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_exposure_function:22.2.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_exposure_function", "product": { "name": "communications_cloud_native_core_network_exposure_function", "product_id": "CSAFPID-40947", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_exposure_function:22.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_exposure_function", "product": { "name": "communications_cloud_native_core_network_exposure_function", "product_id": "CSAFPID-93635", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_exposure_function:22.3.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_exposure_function", "product": { "name": "communications_cloud_native_core_network_exposure_function", "product_id": "CSAFPID-503534", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_exposure_function:22.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_exposure_function", "product": { "name": "communications_cloud_native_core_network_exposure_function", "product_id": "CSAFPID-90018", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_exposure_function:22.4.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_exposure_function", "product": { "name": "communications_cloud_native_core_network_exposure_function", "product_id": "CSAFPID-220327", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_exposure_function:22.4.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_exposure_function", "product": { "name": "communications_cloud_native_core_network_exposure_function", "product_id": "CSAFPID-94290", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_exposure_function:23.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_exposure_function", "product": { "name": "communications_cloud_native_core_network_exposure_function", "product_id": "CSAFPID-220325", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_exposure_function:23.1.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_exposure_function", "product": { "name": "communications_cloud_native_core_network_exposure_function", "product_id": "CSAFPID-614513", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_exposure_function:23.1.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_exposure_function", "product": { "name": "communications_cloud_native_core_network_exposure_function", "product_id": "CSAFPID-643776", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_exposure_function:23.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_exposure_function", "product": { "name": "communications_cloud_native_core_network_exposure_function", "product_id": "CSAFPID-816772", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_exposure_function:23.3.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_exposure_function", "product": { "name": "communications_cloud_native_core_network_exposure_function", "product_id": "CSAFPID-912076", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_exposure_function:23.4.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_exposure_function", "product": { "name": "communications_cloud_native_core_network_exposure_function", "product_id": "CSAFPID-1503580", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_exposure_function:23.4.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product": { "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product_id": "CSAFPID-40613", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:1.10.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product": { "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product_id": "CSAFPID-2044", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:1.9.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product": { "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product_id": "CSAFPID-40301", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:22.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product": { "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product_id": "CSAFPID-180194", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:22.1.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product": { "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product_id": "CSAFPID-449747", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:22.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product": { "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product_id": "CSAFPID-40298", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:22.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product": { "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product_id": "CSAFPID-223527", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:22.2.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product": { "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product_id": "CSAFPID-449746", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:22.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product": { "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product_id": "CSAFPID-503493", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:22.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product": { "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product_id": "CSAFPID-260394", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:22.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product": { "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product_id": "CSAFPID-219838", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:23.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product": { "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product_id": "CSAFPID-611387", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:23.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product": { "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product_id": "CSAFPID-618156", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:23.2.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product": { "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product_id": "CSAFPID-816773", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:23.3.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product": { "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product_id": "CSAFPID-912101", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:23.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product": { "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product_id": "CSAFPID-1673473", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:24.1.0-24.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product": { "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product_id": "CSAFPID-1503581", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:24.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product": { "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product_id": "CSAFPID-912539", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:_install_upgrade___23.3.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product": { "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product_id": "CSAFPID-912540", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:_install_upgrade___23.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product": { "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product_id": "CSAFPID-912541", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:_installation___23.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product": { "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product_id": "CSAFPID-912542", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:_obserability_services_overlay___23.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product": { "name": "communications_cloud_native_core_network_function_cloud_native_environment", "product_id": "CSAFPID-912543", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:_observability_services_overlay___23.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_repository_function", "product": { "name": "communications_cloud_native_core_network_repository_function", "product_id": "CSAFPID-40611", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:1.15.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_repository_function", "product": { "name": "communications_cloud_native_core_network_repository_function", "product_id": "CSAFPID-40609", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:1.15.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_repository_function", "product": { "name": "communications_cloud_native_core_network_repository_function", "product_id": "CSAFPID-180198", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:22.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_repository_function", "product": { "name": "communications_cloud_native_core_network_repository_function", "product_id": "CSAFPID-41112", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:22.1.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_repository_function", "product": { "name": "communications_cloud_native_core_network_repository_function", "product_id": "CSAFPID-41110", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:22.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_repository_function", "product": { "name": "communications_cloud_native_core_network_repository_function", "product_id": "CSAFPID-760688", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:22.2.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_repository_function", "product": { "name": "communications_cloud_native_core_network_repository_function", "product_id": "CSAFPID-493444", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:22.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_repository_function", "product": { "name": "communications_cloud_native_core_network_repository_function", "product_id": "CSAFPID-93633", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:22.3.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_repository_function", "product": { "name": "communications_cloud_native_core_network_repository_function", "product_id": "CSAFPID-220056", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:22.4.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_repository_function", "product": { "name": "communications_cloud_native_core_network_repository_function", "product_id": "CSAFPID-223511", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:22.4.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_repository_function", "product": { "name": "communications_cloud_native_core_network_repository_function", "product_id": "CSAFPID-216017", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:23.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_repository_function", "product": { "name": "communications_cloud_native_core_network_repository_function", "product_id": "CSAFPID-220889", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:23.1.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_repository_function", "product": { "name": "communications_cloud_native_core_network_repository_function", "product_id": "CSAFPID-614516", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:23.1.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_repository_function", "product": { "name": "communications_cloud_native_core_network_repository_function", "product_id": "CSAFPID-816774", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:23.1.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_repository_function", "product": { "name": "communications_cloud_native_core_network_repository_function", "product_id": "CSAFPID-220918", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:23.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_repository_function", "product": { "name": "communications_cloud_native_core_network_repository_function", "product_id": "CSAFPID-614515", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:23.2.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_repository_function", "product": { "name": "communications_cloud_native_core_network_repository_function", "product_id": "CSAFPID-614514", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:23.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_repository_function", "product": { "name": "communications_cloud_native_core_network_repository_function", "product_id": "CSAFPID-816346", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:23.3.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_repository_function", "product": { "name": "communications_cloud_native_core_network_repository_function", "product_id": "CSAFPID-912077", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:23.4.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_repository_function", "product": { "name": "communications_cloud_native_core_network_repository_function", "product_id": "CSAFPID-1503322", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:23.4.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_repository_function", "product": { "name": "communications_cloud_native_core_network_repository_function", "product_id": "CSAFPID-1673413", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:23.4.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_repository_function", "product": { "name": "communications_cloud_native_core_network_repository_function", "product_id": "CSAFPID-1673415", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:24.2.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_repository_function", "product": { "name": "communications_cloud_native_core_network_repository_function", "product_id": "CSAFPID-816775", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:_install_upgrade___23.3.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_repository_function", "product": { "name": "communications_cloud_native_core_network_repository_function", "product_id": "CSAFPID-912544", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:_install_upgrade___23.4.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_slice_selection_function", "product": { "name": "communications_cloud_native_core_network_slice_selection_function", "product_id": "CSAFPID-40608", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:1.8.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_slice_selection_function", "product": { "name": "communications_cloud_native_core_network_slice_selection_function", "product_id": "CSAFPID-180199", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:22.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_slice_selection_function", "product": { "name": "communications_cloud_native_core_network_slice_selection_function", "product_id": "CSAFPID-41113", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:22.1.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_slice_selection_function", "product": { "name": "communications_cloud_native_core_network_slice_selection_function", "product_id": "CSAFPID-260395", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:22.3.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_slice_selection_function", "product": { "name": "communications_cloud_native_core_network_slice_selection_function", "product_id": "CSAFPID-260393", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:22.4.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_slice_selection_function", "product": { "name": "communications_cloud_native_core_network_slice_selection_function", "product_id": "CSAFPID-816348", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:23.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_slice_selection_function", "product": { "name": "communications_cloud_native_core_network_slice_selection_function", "product_id": "CSAFPID-912545", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:23.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_slice_selection_function", "product": { "name": "communications_cloud_native_core_network_slice_selection_function", "product_id": "CSAFPID-816347", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:23.3.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_slice_selection_function", "product": { "name": "communications_cloud_native_core_network_slice_selection_function", "product_id": "CSAFPID-1673494", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:24.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_slice_selection_function", "product": { "name": "communications_cloud_native_core_network_slice_selection_function", "product_id": "CSAFPID-1673501", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:24.2.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_slice_selection_function", "product": { "name": "communications_cloud_native_core_network_slice_selection_function", "product_id": "CSAFPID-816776", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:_install_upgrade___23.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_network_slice_selection_function", "product": { "name": "communications_cloud_native_core_network_slice_selection_function", "product_id": "CSAFPID-816777", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:_install_upgrade___23.3.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_policy", "product": { "name": "communications_cloud_native_core_policy", "product_id": "CSAFPID-764240", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_policy:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_policy", "product": { "name": "communications_cloud_native_core_policy", "product_id": "CSAFPID-220468", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.11.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_policy", "product": { "name": "communications_cloud_native_core_policy", "product_id": "CSAFPID-2310", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.14.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_policy", "product": { "name": "communications_cloud_native_core_policy", "product_id": "CSAFPID-93547", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.15.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_policy", "product": { "name": "communications_cloud_native_core_policy", "product_id": "CSAFPID-180200", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_policy:22.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_policy", "product": { "name": "communications_cloud_native_core_policy", "product_id": "CSAFPID-180193", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_policy:22.1.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_policy", "product": { "name": "communications_cloud_native_core_policy", "product_id": "CSAFPID-1898", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_policy:22.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_policy", "product": { "name": "communications_cloud_native_core_policy", "product_id": "CSAFPID-93636", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_policy:22.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_policy", "product": { "name": "communications_cloud_native_core_policy", "product_id": "CSAFPID-90020", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_policy:22.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_policy", "product": { "name": "communications_cloud_native_core_policy", "product_id": "CSAFPID-90015", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_policy:23.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_policy", "product": { "name": "communications_cloud_native_core_policy", "product_id": "CSAFPID-220133", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_policy:23.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_policy", "product": { "name": "communications_cloud_native_core_policy", "product_id": "CSAFPID-1650751", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_policy:23.4.0-23.4.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_policy", "product": { "name": "communications_cloud_native_core_policy", "product_id": "CSAFPID-1673517", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_policy:23.4.0-23.4.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_policy", "product": { "name": "communications_cloud_native_core_policy", "product_id": "CSAFPID-1673395", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_policy:23.4.0-23.4.6:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_policy", "product": { "name": "communications_cloud_native_core_policy", "product_id": "CSAFPID-912069", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_policy:23.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_policy", "product": { "name": "communications_cloud_native_core_policy", "product_id": "CSAFPID-765371", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_policy:all_supported_s:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_security_edge_protection_proxy", "product": { "name": "communications_cloud_native_core_security_edge_protection_proxy", "product_id": "CSAFPID-180216", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:1.7.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_security_edge_protection_proxy", "product": { "name": "communications_cloud_native_core_security_edge_protection_proxy", "product_id": "CSAFPID-180202", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:22.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_security_edge_protection_proxy", "product": { "name": "communications_cloud_native_core_security_edge_protection_proxy", "product_id": "CSAFPID-40300", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:22.1.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_security_edge_protection_proxy", "product": { "name": "communications_cloud_native_core_security_edge_protection_proxy", "product_id": "CSAFPID-93653", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:22.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_security_edge_protection_proxy", "product": { "name": "communications_cloud_native_core_security_edge_protection_proxy", "product_id": "CSAFPID-40949", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:22.2.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_security_edge_protection_proxy", "product": { "name": "communications_cloud_native_core_security_edge_protection_proxy", "product_id": "CSAFPID-642000", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:22.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_security_edge_protection_proxy", "product": { "name": "communications_cloud_native_core_security_edge_protection_proxy", "product_id": "CSAFPID-93634", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:22.3.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_security_edge_protection_proxy", "product": { "name": "communications_cloud_native_core_security_edge_protection_proxy", "product_id": "CSAFPID-220561", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:22.3.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_security_edge_protection_proxy", "product": { "name": "communications_cloud_native_core_security_edge_protection_proxy", "product_id": "CSAFPID-90021", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:22.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_security_edge_protection_proxy", "product": { "name": "communications_cloud_native_core_security_edge_protection_proxy", "product_id": "CSAFPID-94292", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:22.4.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_security_edge_protection_proxy", "product": { "name": "communications_cloud_native_core_security_edge_protection_proxy", "product_id": "CSAFPID-218028", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:22.4.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_security_edge_protection_proxy", "product": { "name": "communications_cloud_native_core_security_edge_protection_proxy", "product_id": "CSAFPID-220881", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:22.4.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_security_edge_protection_proxy", "product": { "name": "communications_cloud_native_core_security_edge_protection_proxy", "product_id": "CSAFPID-94291", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:23.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_security_edge_protection_proxy", "product": { "name": "communications_cloud_native_core_security_edge_protection_proxy", "product_id": "CSAFPID-220910", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:23.1.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_security_edge_protection_proxy", "product": { "name": "communications_cloud_native_core_security_edge_protection_proxy", "product_id": "CSAFPID-220324", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:23.1.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_security_edge_protection_proxy", "product": { "name": "communications_cloud_native_core_security_edge_protection_proxy", "product_id": "CSAFPID-611401", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:23.1.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_security_edge_protection_proxy", "product": { "name": "communications_cloud_native_core_security_edge_protection_proxy", "product_id": "CSAFPID-816778", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:23.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_security_edge_protection_proxy", "product": { "name": "communications_cloud_native_core_security_edge_protection_proxy", "product_id": "CSAFPID-614517", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:23.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_security_edge_protection_proxy", "product": { "name": "communications_cloud_native_core_security_edge_protection_proxy", "product_id": "CSAFPID-912547", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:23.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_security_edge_protection_proxy", "product": { "name": "communications_cloud_native_core_security_edge_protection_proxy", "product_id": "CSAFPID-1673392", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:23.4.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_security_edge_protection_proxy", "product": { "name": "communications_cloud_native_core_security_edge_protection_proxy", "product_id": "CSAFPID-1503582", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:24.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_security_edge_protection_proxy", "product": { "name": "communications_cloud_native_core_security_edge_protection_proxy", "product_id": "CSAFPID-1673393", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:24.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_security_edge_protection_proxy", "product": { "name": "communications_cloud_native_core_security_edge_protection_proxy", "product_id": "CSAFPID-912546", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:_automated_test_suite___23.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_service_communication_proxy", "product": { "name": "communications_cloud_native_core_service_communication_proxy", "product_id": "CSAFPID-40610", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_service_communication_proxy:1.15.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_service_communication_proxy", "product": { "name": "communications_cloud_native_core_service_communication_proxy", "product_id": "CSAFPID-611587", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_service_communication_proxy:22.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_service_communication_proxy", "product": { "name": "communications_cloud_native_core_service_communication_proxy", "product_id": "CSAFPID-642002", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_service_communication_proxy:22.2.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_service_communication_proxy", "product": { "name": "communications_cloud_native_core_service_communication_proxy", "product_id": "CSAFPID-493443", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_service_communication_proxy:22.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_service_communication_proxy", "product": { "name": "communications_cloud_native_core_service_communication_proxy", "product_id": "CSAFPID-642001", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_service_communication_proxy:22.3.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_service_communication_proxy", "product": { "name": "communications_cloud_native_core_service_communication_proxy", "product_id": "CSAFPID-224796", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_service_communication_proxy:22.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_service_communication_proxy", "product": { "name": "communications_cloud_native_core_service_communication_proxy", "product_id": "CSAFPID-224795", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_service_communication_proxy:23.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_service_communication_proxy", "product": { "name": "communications_cloud_native_core_service_communication_proxy", "product_id": "CSAFPID-912548", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_service_communication_proxy:23.2.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_service_communication_proxy", "product": { "name": "communications_cloud_native_core_service_communication_proxy", "product_id": "CSAFPID-912102", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_service_communication_proxy:23.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_service_communication_proxy", "product": { "name": "communications_cloud_native_core_service_communication_proxy", "product_id": "CSAFPID-912549", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_service_communication_proxy:23.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_service_communication_proxy", "product": { "name": "communications_cloud_native_core_service_communication_proxy", "product_id": "CSAFPID-1503583", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_service_communication_proxy:23.4.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_service_communication_proxy", "product": { "name": "communications_cloud_native_core_service_communication_proxy", "product_id": "CSAFPID-1503584", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_service_communication_proxy:23.4.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_service_communication_proxy", "product": { "name": "communications_cloud_native_core_service_communication_proxy", "product_id": "CSAFPID-1503585", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_service_communication_proxy:24.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_service_communication_proxy", "product": { "name": "communications_cloud_native_core_service_communication_proxy", "product_id": "CSAFPID-1672767", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_service_communication_proxy:24.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_unified_data_repository", "product": { "name": "communications_cloud_native_core_unified_data_repository", "product_id": "CSAFPID-180217", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:1.15.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_unified_data_repository", "product": { "name": "communications_cloud_native_core_unified_data_repository", "product_id": "CSAFPID-180196", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:22.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_unified_data_repository", "product": { "name": "communications_cloud_native_core_unified_data_repository", "product_id": "CSAFPID-165576", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:22.1.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_unified_data_repository", "product": { "name": "communications_cloud_native_core_unified_data_repository", "product_id": "CSAFPID-40297", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:22.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_unified_data_repository", "product": { "name": "communications_cloud_native_core_unified_data_repository", "product_id": "CSAFPID-764899", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:22.2.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_unified_data_repository", "product": { "name": "communications_cloud_native_core_unified_data_repository", "product_id": "CSAFPID-589926", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:22.2.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_unified_data_repository", "product": { "name": "communications_cloud_native_core_unified_data_repository", "product_id": "CSAFPID-179780", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:22.2.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_unified_data_repository", "product": { "name": "communications_cloud_native_core_unified_data_repository", "product_id": "CSAFPID-40948", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:22.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_unified_data_repository", "product": { "name": "communications_cloud_native_core_unified_data_repository", "product_id": "CSAFPID-589925", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:22.3.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_unified_data_repository", "product": { "name": "communications_cloud_native_core_unified_data_repository", "product_id": "CSAFPID-179779", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:22.3.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_unified_data_repository", "product": { "name": "communications_cloud_native_core_unified_data_repository", "product_id": "CSAFPID-764826", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:22.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_unified_data_repository", "product": { "name": "communications_cloud_native_core_unified_data_repository", "product_id": "CSAFPID-90019", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:22.4.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_unified_data_repository", "product": { "name": "communications_cloud_native_core_unified_data_repository", "product_id": "CSAFPID-90016", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:23.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_unified_data_repository", "product": { "name": "communications_cloud_native_core_unified_data_repository", "product_id": "CSAFPID-220326", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:23.1.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_unified_data_repository", "product": { "name": "communications_cloud_native_core_unified_data_repository", "product_id": "CSAFPID-764241", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:23.1.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_unified_data_repository", "product": { "name": "communications_cloud_native_core_unified_data_repository", "product_id": "CSAFPID-912078", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:23.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_unified_data_repository", "product": { "name": "communications_cloud_native_core_unified_data_repository", "product_id": "CSAFPID-816349", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:23.3.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_unified_data_repository", "product": { "name": "communications_cloud_native_core_unified_data_repository", "product_id": "CSAFPID-912550", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:23.3.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_unified_data_repository", "product": { "name": "communications_cloud_native_core_unified_data_repository", "product_id": "CSAFPID-1503586", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:23.4.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_unified_data_repository", "product": { "name": "communications_cloud_native_core_unified_data_repository", "product_id": "CSAFPID-1503587", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:23.4.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_unified_data_repository", "product": { "name": "communications_cloud_native_core_unified_data_repository", "product_id": "CSAFPID-1673399", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:24.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_cloud_native_core_unified_data_repository", "product": { "name": "communications_cloud_native_core_unified_data_repository", "product_id": "CSAFPID-816779", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:_signaling___23.3.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_contacts_server", "product": { "name": "communications_contacts_server", "product_id": "CSAFPID-764737", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_contacts_server:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_contacts_server", "product": { "name": "communications_contacts_server", "product_id": "CSAFPID-224787", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_contacts_server:8.0.0.6.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_contacts_server", "product": { "name": "communications_contacts_server", "product_id": "CSAFPID-220189", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_contacts_server:8.0.0.7.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_converged_application_server", "product": { "name": "communications_converged_application_server", "product_id": "CSAFPID-764827", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_converged_application_server:7.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_converged_application_server", "product": { "name": "communications_converged_application_server", "product_id": "CSAFPID-764828", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_converged_application_server:8.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_converged_application_server_-_service_controller", "product": { "name": "communications_converged_application_server_-_service_controller", "product_id": "CSAFPID-764734", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_converged_application_server_-_service_controller:6.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_converged_application_server_-_service_controller", "product": { "name": "communications_converged_application_server_-_service_controller", "product_id": "CSAFPID-426842", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_converged_application_server_-_service_controller:6.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_converged_charging_system", "product": { "name": "communications_converged_charging_system", "product_id": "CSAFPID-1503599", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_converged_charging_system:2.0.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_converged_charging_system", "product": { "name": "communications_converged_charging_system", "product_id": "CSAFPID-1503600", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_converged_charging_system:2.0.0.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_convergence", "product": { "name": "communications_convergence", "product_id": "CSAFPID-345031", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_convergence:3.0.2.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_convergence", "product": { "name": "communications_convergence", "product_id": "CSAFPID-204635", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_convergence:3.0.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_convergence", "product": { "name": "communications_convergence", "product_id": "CSAFPID-764833", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_convergence:3.0.3.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_convergence", "product": { "name": "communications_convergence", "product_id": "CSAFPID-224793", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_convergence:3.0.3.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_convergence", "product": { "name": "communications_convergence", "product_id": "CSAFPID-816794", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_convergence:3.0.3.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_convergent_charging_controller", "product": { "name": "communications_convergent_charging_controller", "product_id": "CSAFPID-342793", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_convergent_charging_controller:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_convergent_charging_controller", "product": { "name": "communications_convergent_charging_controller", "product_id": "CSAFPID-1650777", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_convergent_charging_controller:12.0.1.0.0-12.0.6.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_convergent_charging_controller", "product": { "name": "communications_convergent_charging_controller", "product_id": "CSAFPID-1265", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_convergent_charging_controller:12.0.6.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_convergent_charging_controller", "product": { "name": "communications_convergent_charging_controller", "product_id": "CSAFPID-764248", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_convergent_charging_controller:12.0.6.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_convergent_charging_controller", "product": { "name": "communications_convergent_charging_controller", "product_id": "CSAFPID-816350", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_convergent_charging_controller:15.0.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_convergent_charging_controller", "product": { "name": "communications_convergent_charging_controller", "product_id": "CSAFPID-1261", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_convergent_charging_controller:6.0.1.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_core_session_manager", "product": { "name": "communications_core_session_manager", "product_id": "CSAFPID-110244", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_core_session_manager:8.2.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_core_session_manager", "product": { "name": "communications_core_session_manager", "product_id": "CSAFPID-110242", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_core_session_manager:8.4.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_core_session_manager", "product": { "name": "communications_core_session_manager", "product_id": "CSAFPID-93777", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_core_session_manager:8.45:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_core_session_manager", "product": { "name": "communications_core_session_manager", "product_id": "CSAFPID-1672764", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_core_session_manager:9.1.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_core_session_manager", "product": { "name": "communications_core_session_manager", "product_id": "CSAFPID-93772", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_core_session_manager:9.15:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_data_model", "product": { "name": "communications_data_model", "product_id": "CSAFPID-764902", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_data_model:12.2.0.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_design_studio", "product": { "name": "communications_design_studio", "product_id": "CSAFPID-765372", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_design_studio:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_design_studio", "product": { "name": "communications_design_studio", "product_id": "CSAFPID-342799", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_design_studio:7.3.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_design_studio", "product": { "name": "communications_design_studio", "product_id": "CSAFPID-704412", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_design_studio:7.4.0.7.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_design_studio", "product": { "name": "communications_design_studio", "product_id": "CSAFPID-704411", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_design_studio:7.4.1.5.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_design_studio", "product": { "name": "communications_design_studio", "product_id": "CSAFPID-165544", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_design_studio:7.4.2.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_design_studio", "product": { "name": "communications_design_studio", "product_id": "CSAFPID-704410", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_design_studio:7.4.2.8.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_design_studio", "product": { "name": "communications_design_studio", "product_id": "CSAFPID-41183", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_design_studio:7.4.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_diameter_intelligence_hub", "product": { "name": "communications_diameter_intelligence_hub", "product_id": "CSAFPID-342802", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_diameter_intelligence_hub:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_diameter_intelligence_hub", "product": { "name": "communications_diameter_intelligence_hub", "product_id": "CSAFPID-764829", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_diameter_intelligence_hub:8.2.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_diameter_signaling_router", "product": { "name": "communications_diameter_signaling_router", "product_id": "CSAFPID-1503588", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_diameter_signaling_router:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_diameter_signaling_router", "product": { "name": "communications_diameter_signaling_router", "product_id": "CSAFPID-1892", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_diameter_signaling_router:8.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_diameter_signaling_router", "product": { "name": "communications_diameter_signaling_router", "product_id": "CSAFPID-1891", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_diameter_signaling_router:8.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_diameter_signaling_router", "product": { "name": "communications_diameter_signaling_router", "product_id": "CSAFPID-1888", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_diameter_signaling_router", "product": { "name": "communications_diameter_signaling_router", "product_id": "CSAFPID-1887", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_diameter_signaling_router", "product": { "name": "communications_diameter_signaling_router", "product_id": "CSAFPID-1889", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_diameter_signaling_router", "product": { "name": "communications_diameter_signaling_router", "product_id": "CSAFPID-1884", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_diameter_signaling_router:8.3.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_diameter_signaling_router", "product": { "name": "communications_diameter_signaling_router", "product_id": "CSAFPID-1885", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_diameter_signaling_router:8.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_diameter_signaling_router", "product": { "name": "communications_diameter_signaling_router", "product_id": "CSAFPID-1882", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_diameter_signaling_router:8.4.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_diameter_signaling_router", "product": { "name": "communications_diameter_signaling_router", "product_id": "CSAFPID-1881", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_diameter_signaling_router:8.4.0.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_diameter_signaling_router", "product": { "name": "communications_diameter_signaling_router", "product_id": "CSAFPID-1883", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_diameter_signaling_router:8.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_diameter_signaling_router", "product": { "name": "communications_diameter_signaling_router", "product_id": "CSAFPID-1879", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_diameter_signaling_router:8.5.0.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_diameter_signaling_router", "product": { "name": "communications_diameter_signaling_router", "product_id": "CSAFPID-1880", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_diameter_signaling_router:8.5.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_diameter_signaling_router", "product": { "name": "communications_diameter_signaling_router", "product_id": "CSAFPID-40293", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_diameter_signaling_router:8.6.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_diameter_signaling_router", "product": { "name": "communications_diameter_signaling_router", "product_id": "CSAFPID-1650826", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_diameter_signaling_router:8.6.0.4-8.6.0.6:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_diameter_signaling_router", "product": { "name": "communications_diameter_signaling_router", "product_id": "CSAFPID-1650830", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_diameter_signaling_router:8.6.0.4-8.6.0.8:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_diameter_signaling_router", "product": { "name": "communications_diameter_signaling_router", "product_id": "CSAFPID-611413", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_diameter_signaling_router:9.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_diameter_signaling_router", "product": { "name": "communications_diameter_signaling_router", "product_id": "CSAFPID-912551", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_diameter_signaling_router:_patches___9.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_diameter_signaling_router", "product": { "name": "communications_diameter_signaling_router", "product_id": "CSAFPID-912552", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_diameter_signaling_router:_platform___9.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_eagle_application_processor", "product": { "name": "communications_eagle_application_processor", "product_id": "CSAFPID-1673417", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_eagle_application_processor:17.0.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_eagle_application_processor", "product": { "name": "communications_eagle_application_processor", "product_id": "CSAFPID-765369", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_eagle_application_processor:all_supported_s:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_eagle_element_management_system", "product": { "name": "communications_eagle_element_management_system", "product_id": "CSAFPID-1503316", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_eagle_element_management_system:46.6.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_eagle_element_management_system", "product": { "name": "communications_eagle_element_management_system", "product_id": "CSAFPID-1503317", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_eagle_element_management_system:46.6.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_eagle_element_management_system", "product": { "name": "communications_eagle_element_management_system", "product_id": "CSAFPID-204528", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_eagle_element_management_system:46.6:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_eagle_ftp_table_base_retrieval", "product": { "name": "communications_eagle_ftp_table_base_retrieval", "product_id": "CSAFPID-204623", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_eagle_ftp_table_base_retrieval:4.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_eagle_lnp_application_processor", "product": { "name": "communications_eagle_lnp_application_processor", "product_id": "CSAFPID-352633", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_eagle_lnp_application_processor:10.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_eagle_lnp_application_processor", "product": { "name": "communications_eagle_lnp_application_processor", "product_id": "CSAFPID-352632", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_eagle_lnp_application_processor:10.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_eagle_software", "product": { "name": "communications_eagle_software", "product_id": "CSAFPID-765366", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_eagle_software:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_eagle_software", "product": { "name": "communications_eagle_software", "product_id": "CSAFPID-765365", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_eagle_software:46.7.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_elastic_charging_engine", "product": { "name": "communications_elastic_charging_engine", "product_id": "CSAFPID-764834", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_elastic_charging_engine:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_element_manager", "product": { "name": "communications_element_manager", "product_id": "CSAFPID-764242", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_element_manager:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_element_manager", "product": { "name": "communications_element_manager", "product_id": "CSAFPID-204597", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_element_manager:8.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_element_manager", "product": { "name": "communications_element_manager", "product_id": "CSAFPID-204580", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_element_manager:8.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_element_manager", "product": { "name": "communications_element_manager", "product_id": "CSAFPID-9226", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_element_manager:8.1.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_element_manager", "product": { "name": "communications_element_manager", "product_id": "CSAFPID-204589", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_element_manager:8.2.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_element_manager", "product": { "name": "communications_element_manager", "product_id": "CSAFPID-9070", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_element_manager:8.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_element_manager", "product": { "name": "communications_element_manager", "product_id": "CSAFPID-8845", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_element_manager:8.2.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_element_manager", "product": { "name": "communications_element_manager", "product_id": "CSAFPID-204624", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_element_manager:8.2.2.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_element_manager", "product": { "name": "communications_element_manager", "product_id": "CSAFPID-2286", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_element_manager:8.2.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_element_manager", "product": { "name": "communications_element_manager", "product_id": "CSAFPID-204464", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_element_manager:8.2.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_element_manager", "product": { "name": "communications_element_manager", "product_id": "CSAFPID-345038", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_element_manager:9.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_element_manager", "product": { "name": "communications_element_manager", "product_id": "CSAFPID-93629", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_element_manager:9.0.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_element_manager", "product": { "name": "communications_element_manager", "product_id": "CSAFPID-611422", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_element_manager:9.0.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_element_manager", "product": { "name": "communications_element_manager", "product_id": "CSAFPID-93630", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_element_manager:9.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_element_manager", "product": { "name": "communications_element_manager", "product_id": "CSAFPID-816780", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_element_manager:9.4.53:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_evolved_communications_application_server", "product": { "name": "communications_evolved_communications_application_server", "product_id": "CSAFPID-204645", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_evolved_communications_application_server:7.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_fraud_monitor", "product": { "name": "communications_fraud_monitor", "product_id": "CSAFPID-816781", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_fraud_monitor:5.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_fraud_monitor", "product": { "name": "communications_fraud_monitor", "product_id": "CSAFPID-816782", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_fraud_monitor:5.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_fraud_monitor", "product": { "name": "communications_fraud_monitor", "product_id": "CSAFPID-912553", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_fraud_monitor:5.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_instant_messaging_server", "product": { "name": "communications_instant_messaging_server", "product_id": "CSAFPID-207586", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_instant_messaging_server:10.0.1.5.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_instant_messaging_server", "product": { "name": "communications_instant_messaging_server", "product_id": "CSAFPID-234306", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_instant_messaging_server:10.0.1.6.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_instant_messaging_server", "product": { "name": "communications_instant_messaging_server", "product_id": "CSAFPID-219803", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_instant_messaging_server:10.0.1.7.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_instant_messaging_server", "product": { "name": "communications_instant_messaging_server", "product_id": "CSAFPID-387664", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_instant_messaging_server:8.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_interactive_session_recorder", "product": { "name": "communications_interactive_session_recorder", "product_id": "CSAFPID-1893", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_interactive_session_recorder:6.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_ip_service_activator", "product": { "name": "communications_ip_service_activator", "product_id": "CSAFPID-204622", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_ip_service_activator:7.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_ip_service_activator", "product": { "name": "communications_ip_service_activator", "product_id": "CSAFPID-219909", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_ip_service_activator:7.5.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_lsms", "product": { "name": "communications_lsms", "product_id": "CSAFPID-1673065", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_lsms:14.0.0.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_messaging_server", "product": { "name": "communications_messaging_server", "product_id": "CSAFPID-764835", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_messaging_server:8.1.0.20.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_messaging_server", "product": { "name": "communications_messaging_server", "product_id": "CSAFPID-375182", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_messaging_server:8.1.0.21.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_messaging_server", "product": { "name": "communications_messaging_server", "product_id": "CSAFPID-816351", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_messaging_server:8.1.0.24.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_messaging_server", "product": { "name": "communications_messaging_server", "product_id": "CSAFPID-41182", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_messaging_server:8.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_metasolv_solution", "product": { "name": "communications_metasolv_solution", "product_id": "CSAFPID-611595", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_metasolv_solution:6.3.1.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_metasolv_solution", "product": { "name": "communications_metasolv_solution", "product_id": "CSAFPID-226017", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_metasolv_solution:6.3.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_network_analytics_data_director", "product": { "name": "communications_network_analytics_data_director", "product_id": "CSAFPID-220167", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_network_analytics_data_director:23.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_network_analytics_data_director", "product": { "name": "communications_network_analytics_data_director", "product_id": "CSAFPID-816353", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_network_analytics_data_director:23.2.0.0.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_network_analytics_data_director", "product": { "name": "communications_network_analytics_data_director", "product_id": "CSAFPID-764243", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_network_analytics_data_director:23.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_network_analytics_data_director", "product": { "name": "communications_network_analytics_data_director", "product_id": "CSAFPID-816352", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_network_analytics_data_director:23.3.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_network_analytics_data_director", "product": { "name": "communications_network_analytics_data_director", "product_id": "CSAFPID-1503589", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_network_analytics_data_director:23.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_network_analytics_data_director", "product": { "name": "communications_network_analytics_data_director", "product_id": "CSAFPID-1503590", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_network_analytics_data_director:24.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_network_analytics_data_director", "product": { "name": "communications_network_analytics_data_director", "product_id": "CSAFPID-1673414", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_network_analytics_data_director:24.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_network_analytics_data_director", "product": { "name": "communications_network_analytics_data_director", "product_id": "CSAFPID-816783", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_network_analytics_data_director:_general___23.2.0.0.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_network_analytics_data_director", "product": { "name": "communications_network_analytics_data_director", "product_id": "CSAFPID-816786", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_network_analytics_data_director:_general___23.3.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_network_analytics_data_director", "product": { "name": "communications_network_analytics_data_director", "product_id": "CSAFPID-816784", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_network_analytics_data_director:_install_upgrade___23.2.0.0.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_network_analytics_data_director", "product": { "name": "communications_network_analytics_data_director", "product_id": "CSAFPID-816787", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_network_analytics_data_director:_install_upgrade___23.3.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_network_analytics_data_director", "product": { "name": "communications_network_analytics_data_director", "product_id": "CSAFPID-816785", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_network_analytics_data_director:_third_party___23.2.0.0.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_network_analytics_data_director", "product": { "name": "communications_network_analytics_data_director", "product_id": "CSAFPID-816788", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_network_analytics_data_director:_third_party___23.3.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_network_charging_and_control", "product": { "name": "communications_network_charging_and_control", "product_id": "CSAFPID-342803", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_network_charging_and_control:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_network_charging_and_control", "product": { "name": "communications_network_charging_and_control", "product_id": "CSAFPID-1650778", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_network_charging_and_control:12.0.1.0.0-12.0.6.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_network_charging_and_control", "product": { "name": "communications_network_charging_and_control", "product_id": "CSAFPID-1266", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_network_charging_and_control:12.0.6.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_network_charging_and_control", "product": { "name": "communications_network_charging_and_control", "product_id": "CSAFPID-764249", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_network_charging_and_control:12.0.6.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_network_charging_and_control", "product": { "name": "communications_network_charging_and_control", "product_id": "CSAFPID-816354", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_network_charging_and_control:15.0.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_network_charging_and_control", "product": { "name": "communications_network_charging_and_control", "product_id": "CSAFPID-204563", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_network_charging_and_control:6.0.1.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_network_integrity", "product": { "name": "communications_network_integrity", "product_id": "CSAFPID-220125", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_network_integrity:7.3.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_network_integrity", "product": { "name": "communications_network_integrity", "product_id": "CSAFPID-245244", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_network_integrity:7.3.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_network_integrity", "product": { "name": "communications_network_integrity", "product_id": "CSAFPID-219776", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_network_integrity:7.3.6.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_network_integrity", "product": { "name": "communications_network_integrity", "product_id": "CSAFPID-204554", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_network_integrity:7.3.6:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_offline_mediation_controller", "product": { "name": "communications_offline_mediation_controller", "product_id": "CSAFPID-765242", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_offline_mediation_controller:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_operations_monitor", "product": { "name": "communications_operations_monitor", "product_id": "CSAFPID-9489", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_operations_monitor:4.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_operations_monitor", "product": { "name": "communications_operations_monitor", "product_id": "CSAFPID-110249", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_operations_monitor:4.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_operations_monitor", "product": { "name": "communications_operations_monitor", "product_id": "CSAFPID-93781", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_operations_monitor:5.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_operations_monitor", "product": { "name": "communications_operations_monitor", "product_id": "CSAFPID-220132", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_operations_monitor:5.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_operations_monitor", "product": { "name": "communications_operations_monitor", "product_id": "CSAFPID-912079", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_operations_monitor:5.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_order_and_service_management", "product": { "name": "communications_order_and_service_management", "product_id": "CSAFPID-224791", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_order_and_service_management:7.3.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_order_and_service_management", "product": { "name": "communications_order_and_service_management", "product_id": "CSAFPID-219898", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_order_and_service_management:7.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_order_and_service_management", "product": { "name": "communications_order_and_service_management", "product_id": "CSAFPID-224790", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_order_and_service_management:7.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_order_and_service_management", "product": { "name": "communications_order_and_service_management", "product_id": "CSAFPID-221118", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_order_and_service_management:7.4.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_order_and_service_management", "product": { "name": "communications_order_and_service_management", "product_id": "CSAFPID-179774", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_order_and_service_management:7.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_order_and_service_management", "product": { "name": "communications_order_and_service_management", "product_id": "CSAFPID-1673496", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_order_and_service_management:7.5.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_performance_intelligence", "product": { "name": "communications_performance_intelligence", "product_id": "CSAFPID-1503591", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_performance_intelligence:10.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_performance_intelligence_center", "product": { "name": "communications_performance_intelligence_center", "product_id": "CSAFPID-1673485", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_performance_intelligence_center:prior_to_10.4.0.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_performance_intelligence_center__pic__software", "product": { "name": "communications_performance_intelligence_center__pic__software", "product_id": "CSAFPID-765367", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_performance_intelligence_center__pic__software:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_performance_intelligence_center__pic__software", "product": { "name": "communications_performance_intelligence_center__pic__software", "product_id": "CSAFPID-765368", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_performance_intelligence_center__pic__software:10.4.0.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_performance_intelligence_center__pic__software", "product": { "name": "communications_performance_intelligence_center__pic__software", "product_id": "CSAFPID-764830", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_performance_intelligence_center__pic__software:10.4.0.4.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_policy_management", "product": { "name": "communications_policy_management", "product_id": "CSAFPID-573035", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_policy_management:12.5.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_policy_management", "product": { "name": "communications_policy_management", "product_id": "CSAFPID-45192", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_policy_management:12.6.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_policy_management", "product": { "name": "communications_policy_management", "product_id": "CSAFPID-611406", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_policy_management:12.6.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_policy_management", "product": { "name": "communications_policy_management", "product_id": "CSAFPID-816789", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_policy_management:12.6.1.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_policy_management", "product": { "name": "communications_policy_management", "product_id": "CSAFPID-816790", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_policy_management:15.0.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_pricing_design_center", "product": { "name": "communications_pricing_design_center", "product_id": "CSAFPID-764738", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_pricing_design_center:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_pricing_design_center", "product": { "name": "communications_pricing_design_center", "product_id": "CSAFPID-204595", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_pricing_design_center:12.0.0.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_pricing_design_center", "product": { "name": "communications_pricing_design_center", "product_id": "CSAFPID-204590", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_pricing_design_center:12.0.0.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_pricing_design_center", "product": { "name": "communications_pricing_design_center", "product_id": "CSAFPID-816355", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_pricing_design_center:15.0.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_service_catalog_and_design", "product": { "name": "communications_service_catalog_and_design", "product_id": "CSAFPID-1503601", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_service_catalog_and_design:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_service_catalog_and_design", "product": { "name": "communications_service_catalog_and_design", "product_id": "CSAFPID-816359", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_service_catalog_and_design:7.4.0.7.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_service_catalog_and_design", "product": { "name": "communications_service_catalog_and_design", "product_id": "CSAFPID-816358", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_service_catalog_and_design:7.4.1.5.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_service_catalog_and_design", "product": { "name": "communications_service_catalog_and_design", "product_id": "CSAFPID-816357", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_service_catalog_and_design:7.4.2.8.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_service_catalog_and_design", "product": { "name": "communications_service_catalog_and_design", "product_id": "CSAFPID-912558", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_service_catalog_and_design:8.0.0.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_service_catalog_and_design", "product": { "name": "communications_service_catalog_and_design", "product_id": "CSAFPID-1503602", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_service_catalog_and_design:8.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_service_catalog_and_design", "product": { "name": "communications_service_catalog_and_design", "product_id": "CSAFPID-816795", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_service_catalog_and_design:_psr_designer___7.4.0.7.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_service_catalog_and_design", "product": { "name": "communications_service_catalog_and_design", "product_id": "CSAFPID-816796", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_service_catalog_and_design:_psr_designer___7.4.1.5.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_service_catalog_and_design", "product": { "name": "communications_service_catalog_and_design", "product_id": "CSAFPID-816797", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_service_catalog_and_design:_psr_designer___7.4.2.8.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_services_gatekeeper", "product": { "name": "communications_services_gatekeeper", "product_id": "CSAFPID-608630", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_services_gatekeeper:7.0.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_border_controller", "product": { "name": "communications_session_border_controller", "product_id": "CSAFPID-1503592", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_border_controller:4.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_border_controller", "product": { "name": "communications_session_border_controller", "product_id": "CSAFPID-1503593", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_border_controller:4.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_border_controller", "product": { "name": "communications_session_border_controller", "product_id": "CSAFPID-40294", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_border_controller:8.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_border_controller", "product": { "name": "communications_session_border_controller", "product_id": "CSAFPID-40292", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_border_controller:9.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_border_controller", "product": { "name": "communications_session_border_controller", "product_id": "CSAFPID-1672762", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_border_controller:9.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_border_controller", "product": { "name": "communications_session_border_controller", "product_id": "CSAFPID-40291", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_border_controller:9.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_border_controller", "product": { "name": "communications_session_border_controller", "product_id": "CSAFPID-1503594", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_border_controller:9.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_border_controller", "product": { "name": "communications_session_border_controller", "product_id": "CSAFPID-1503595", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_border_controller:9.3.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_report_manager", "product": { "name": "communications_session_report_manager", "product_id": "CSAFPID-342804", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_report_manager:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_report_manager", "product": { "name": "communications_session_report_manager", "product_id": "CSAFPID-704413", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_report_manager:-:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_report_manager", "product": { "name": "communications_session_report_manager", "product_id": "CSAFPID-2296", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_report_manager:8.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_report_manager", "product": { "name": "communications_session_report_manager", "product_id": "CSAFPID-166028", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_report_manager:8.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_report_manager", "product": { "name": "communications_session_report_manager", "product_id": "CSAFPID-2294", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_report_manager:8.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_report_manager", "product": { "name": "communications_session_report_manager", "product_id": "CSAFPID-2292", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_report_manager:8.1.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_report_manager", "product": { "name": "communications_session_report_manager", "product_id": "CSAFPID-2290", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_report_manager:8.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_report_manager", "product": { "name": "communications_session_report_manager", "product_id": "CSAFPID-2288", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_report_manager:8.2.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_report_manager", "product": { "name": "communications_session_report_manager", "product_id": "CSAFPID-2282", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_report_manager:8.2.2.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_report_manager", "product": { "name": "communications_session_report_manager", "product_id": "CSAFPID-2285", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_report_manager:8.2.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_report_manager", "product": { "name": "communications_session_report_manager", "product_id": "CSAFPID-2279", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_report_manager:8.2.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_report_manager", "product": { "name": "communications_session_report_manager", "product_id": "CSAFPID-204634", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_report_manager:8.2.5.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_report_manager", "product": { "name": "communications_session_report_manager", "product_id": "CSAFPID-345039", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_report_manager:9.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_report_manager", "product": { "name": "communications_session_report_manager", "product_id": "CSAFPID-93628", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_report_manager:9.0.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_report_manager", "product": { "name": "communications_session_report_manager", "product_id": "CSAFPID-611423", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_report_manager:9.0.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_report_manager", "product": { "name": "communications_session_report_manager", "product_id": "CSAFPID-93631", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_report_manager:9.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_report_manager", "product": { "name": "communications_session_report_manager", "product_id": "CSAFPID-816791", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_report_manager:9.4.53:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_route_manager", "product": { "name": "communications_session_route_manager", "product_id": "CSAFPID-342805", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_route_manager:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_route_manager", "product": { "name": "communications_session_route_manager", "product_id": "CSAFPID-704414", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_route_manager:-:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_route_manager", "product": { "name": "communications_session_route_manager", "product_id": "CSAFPID-166027", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_route_manager:8.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_route_manager", "product": { "name": "communications_session_route_manager", "product_id": "CSAFPID-2295", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_route_manager:8.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_route_manager", "product": { "name": "communications_session_route_manager", "product_id": "CSAFPID-2293", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_route_manager:8.1.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_route_manager", "product": { "name": "communications_session_route_manager", "product_id": "CSAFPID-2289", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_route_manager:8.2.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_route_manager", "product": { "name": "communications_session_route_manager", "product_id": "CSAFPID-2291", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_route_manager:8.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_route_manager", "product": { "name": "communications_session_route_manager", "product_id": "CSAFPID-2287", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_route_manager:8.2.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_route_manager", "product": { "name": "communications_session_route_manager", "product_id": "CSAFPID-2283", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_route_manager:8.2.2.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_route_manager", "product": { "name": "communications_session_route_manager", "product_id": "CSAFPID-2284", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_route_manager:8.2.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_route_manager", "product": { "name": "communications_session_route_manager", "product_id": "CSAFPID-2280", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_route_manager:8.2.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_route_manager", "product": { "name": "communications_session_route_manager", "product_id": "CSAFPID-2281", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_route_manager:8.2.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_route_manager", "product": { "name": "communications_session_route_manager", "product_id": "CSAFPID-220414", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_route_manager:8.2.5.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_route_manager", "product": { "name": "communications_session_route_manager", "product_id": "CSAFPID-204607", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_route_manager:8.2.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_router", "product": { "name": "communications_session_router", "product_id": "CSAFPID-764780", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_router:9.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_session_router", "product": { "name": "communications_session_router", "product_id": "CSAFPID-764781", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_session_router:9.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_subscriber-aware_load_balancer", "product": { "name": "communications_subscriber-aware_load_balancer", "product_id": "CSAFPID-93775", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_subscriber-aware_load_balancer:9.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_subscriber-aware_load_balancer", "product": { "name": "communications_subscriber-aware_load_balancer", "product_id": "CSAFPID-93774", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_subscriber-aware_load_balancer:9.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_unified_assurance", "product": { "name": "communications_unified_assurance", "product_id": "CSAFPID-240600", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_unified_assurance:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_unified_assurance", "product": { "name": "communications_unified_assurance", "product_id": "CSAFPID-1673382", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_unified_assurance:5.5.0-5.5.22:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_unified_assurance", "product": { "name": "communications_unified_assurance", "product_id": "CSAFPID-78764", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_unified_assurance:5.5.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_unified_assurance", "product": { "name": "communications_unified_assurance", "product_id": "CSAFPID-78763", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_unified_assurance:5.5.10:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_unified_assurance", "product": { "name": "communications_unified_assurance", "product_id": "CSAFPID-1673070", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_unified_assurance:5.5.22:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_unified_assurance", "product": { "name": "communications_unified_assurance", "product_id": "CSAFPID-1673381", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_unified_assurance:6.0.0-6.0.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_unified_assurance", "product": { "name": "communications_unified_assurance", "product_id": "CSAFPID-1650731", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_unified_assurance:6.0.0-6.0.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_unified_assurance", "product": { "name": "communications_unified_assurance", "product_id": "CSAFPID-1673530", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_unified_assurance:6.0.0-6.0.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_unified_assurance", "product": { "name": "communications_unified_assurance", "product_id": "CSAFPID-764901", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_unified_assurance:6.0.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_unified_assurance", "product": { "name": "communications_unified_assurance", "product_id": "CSAFPID-78762", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_unified_assurance:6.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_unified_assurance", "product": { "name": "communications_unified_assurance", "product_id": "CSAFPID-78761", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_unified_assurance:6.0.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_unified_assurance", "product": { "name": "communications_unified_assurance", "product_id": "CSAFPID-614089", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_unified_assurance:6.0.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_unified_assurance", "product": { "name": "communications_unified_assurance", "product_id": "CSAFPID-1673068", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_unified_assurance:6.0.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_unified_inventory_management", "product": { "name": "communications_unified_inventory_management", "product_id": "CSAFPID-764739", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_unified_inventory_management:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_unified_inventory_management", "product": { "name": "communications_unified_inventory_management", "product_id": "CSAFPID-204614", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_unified_inventory_management", "product": { "name": "communications_unified_inventory_management", "product_id": "CSAFPID-8984", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_unified_inventory_management", "product": { "name": "communications_unified_inventory_management", "product_id": "CSAFPID-204510", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_unified_inventory_management", "product": { "name": "communications_unified_inventory_management", "product_id": "CSAFPID-204569", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_unified_inventory_management", "product": { "name": "communications_unified_inventory_management", "product_id": "CSAFPID-219826", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_unified_inventory_management:7.5.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_unified_inventory_management", "product": { "name": "communications_unified_inventory_management", "product_id": "CSAFPID-912073", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_unified_inventory_management:7.5.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_unified_session_manager", "product": { "name": "communications_unified_session_manager", "product_id": "CSAFPID-110243", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_unified_session_manager:8.2.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_unified_session_manager", "product": { "name": "communications_unified_session_manager", "product_id": "CSAFPID-205759", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_unified_session_manager:8.4.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_user_data_repository", "product": { "name": "communications_user_data_repository", "product_id": "CSAFPID-1503596", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_user_data_repository:12.11.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_user_data_repository", "product": { "name": "communications_user_data_repository", "product_id": "CSAFPID-1503597", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_user_data_repository:12.11.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_user_data_repository", "product": { "name": "communications_user_data_repository", "product_id": "CSAFPID-1503598", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_user_data_repository:12.11.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_user_data_repository", "product": { "name": "communications_user_data_repository", "product_id": "CSAFPID-764900", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_user_data_repository:12.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_user_data_repository", "product": { "name": "communications_user_data_repository", "product_id": "CSAFPID-76994", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_user_data_repository:12.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_user_data_repository", "product": { "name": "communications_user_data_repository", "product_id": "CSAFPID-568240", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_user_data_repository:12.6.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_user_data_repository", "product": { "name": "communications_user_data_repository", "product_id": "CSAFPID-764782", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_user_data_repository:12.6.1.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_user_data_repository", "product": { "name": "communications_user_data_repository", "product_id": "CSAFPID-355340", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_user_data_repository:12.6.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_user_data_repository", "product": { "name": "communications_user_data_repository", "product_id": "CSAFPID-912080", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_user_data_repository:14.0.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_user_data_repository", "product": { "name": "communications_user_data_repository", "product_id": "CSAFPID-1673481", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_user_data_repository:14.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_webrtc_session_controller", "product": { "name": "communications_webrtc_session_controller", "product_id": "CSAFPID-912554", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_webrtc_session_controller:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_webrtc_session_controller", "product": { "name": "communications_webrtc_session_controller", "product_id": "CSAFPID-611408", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_webrtc_session_controller:7.2.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_webrtc_session_controller", "product": { "name": "communications_webrtc_session_controller", "product_id": "CSAFPID-703515", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_webrtc_session_controller:7.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_webrtc_session_controller", "product": { "name": "communications_webrtc_session_controller", "product_id": "CSAFPID-611407", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_webrtc_session_controller:7.2.1.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "communications_webrtc_session_controller", "product": { "name": "communications_webrtc_session_controller", "product_id": "CSAFPID-204456", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_webrtc_session_controller:7.2.1:*:*:*:*:*:*:*" } } } ], "category": "vendor", "name": "oracle" } ] }, "vulnerabilities": [ { "cve": "CVE-2021-37137", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" } ], "product_status": { "known_affected": [ "CSAFPID-41182", "CSAFPID-209546", "CSAFPID-40608", "CSAFPID-180216", "CSAFPID-93547", "CSAFPID-180217", "CSAFPID-2310", "CSAFPID-40612", "CSAFPID-391501", "CSAFPID-440102", "CSAFPID-41516", "CSAFPID-41515", "CSAFPID-764237", "CSAFPID-45182", "CSAFPID-45181", "CSAFPID-45186", "CSAFPID-45185", "CSAFPID-90018", "CSAFPID-94290", "CSAFPID-260394", "CSAFPID-216017", "CSAFPID-764240", "CSAFPID-90021", "CSAFPID-94292", "CSAFPID-218028", "CSAFPID-94291", "CSAFPID-493443", "CSAFPID-224796", "CSAFPID-90019", "CSAFPID-90016", "CSAFPID-93777", "CSAFPID-93772", "CSAFPID-40293", "CSAFPID-345038", "CSAFPID-93629", "CSAFPID-93781", "CSAFPID-45192", "CSAFPID-608630", "CSAFPID-40292", "CSAFPID-40291", "CSAFPID-345039", "CSAFPID-93628", "CSAFPID-764780", "CSAFPID-764781", "CSAFPID-93775", "CSAFPID-93774", "CSAFPID-764782", "CSAFPID-342793", "CSAFPID-1261", "CSAFPID-204622", "CSAFPID-219909", "CSAFPID-342803", "CSAFPID-204563", "CSAFPID-221118", "CSAFPID-240600", "CSAFPID-8984", "CSAFPID-204510", "CSAFPID-204569", "CSAFPID-219826", "CSAFPID-1899", "CSAFPID-41111", "CSAFPID-40299", "CSAFPID-187447", "CSAFPID-1900", "CSAFPID-40301", "CSAFPID-180194", "CSAFPID-40298", "CSAFPID-41112", "CSAFPID-41110", "CSAFPID-41113", "CSAFPID-180193", "CSAFPID-1898", "CSAFPID-40300", "CSAFPID-611587", "CSAFPID-40297", "CSAFPID-110244", "CSAFPID-110242", "CSAFPID-9489", "CSAFPID-110249", "CSAFPID-40294", "CSAFPID-110243", "CSAFPID-204629", "CSAFPID-765241", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-41183", "CSAFPID-207586", "CSAFPID-765242", "CSAFPID-205759", "CSAFPID-1893", "CSAFPID-765365", "CSAFPID-765366", "CSAFPID-342804", "CSAFPID-342805", "CSAFPID-204456", "CSAFPID-1882", "CSAFPID-573035", "CSAFPID-204645", "CSAFPID-765367", "CSAFPID-765368", "CSAFPID-764242", "CSAFPID-76994", "CSAFPID-204623", "CSAFPID-352633", "CSAFPID-352632", "CSAFPID-765369", "CSAFPID-204528", "CSAFPID-342802", "CSAFPID-40610", "CSAFPID-40611", "CSAFPID-40609", "CSAFPID-180198", "CSAFPID-180196", "CSAFPID-180201", "CSAFPID-180202", "CSAFPID-40613", "CSAFPID-180199", "CSAFPID-93546", "CSAFPID-180195", "CSAFPID-180200", "CSAFPID-765371", "CSAFPID-89545", "CSAFPID-180215", "CSAFPID-180197", "CSAFPID-204639", "CSAFPID-204627", "CSAFPID-226017", "CSAFPID-219898", "CSAFPID-179774", "CSAFPID-342799", "CSAFPID-765372", "CSAFPID-220125", "CSAFPID-245244", "CSAFPID-204554", "CSAFPID-764739", "CSAFPID-204614", "CSAFPID-345031", "CSAFPID-204635", "CSAFPID-204595", "CSAFPID-204590", "CSAFPID-224787", "CSAFPID-1673381", "CSAFPID-1673382", "CSAFPID-1674617", "CSAFPID-1674618", "CSAFPID-1674619", "CSAFPID-1674620", "CSAFPID-1674621", "CSAFPID-1674622", "CSAFPID-1674623", "CSAFPID-1674624", "CSAFPID-1674625", "CSAFPID-1674626", "CSAFPID-1674627", "CSAFPID-1674628" ] }, "references": [ { "category": "self", "summary": "CVE-2021-37137", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2021/CVE-2021-37137.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-41182", "CSAFPID-209546", "CSAFPID-40608", "CSAFPID-180216", "CSAFPID-93547", "CSAFPID-180217", "CSAFPID-2310", "CSAFPID-40612", "CSAFPID-391501", "CSAFPID-440102", "CSAFPID-41516", "CSAFPID-41515", "CSAFPID-764237", "CSAFPID-45182", "CSAFPID-45181", "CSAFPID-45186", "CSAFPID-45185", "CSAFPID-90018", "CSAFPID-94290", "CSAFPID-260394", "CSAFPID-216017", "CSAFPID-764240", "CSAFPID-90021", "CSAFPID-94292", "CSAFPID-218028", "CSAFPID-94291", "CSAFPID-493443", "CSAFPID-224796", "CSAFPID-90019", "CSAFPID-90016", "CSAFPID-93777", "CSAFPID-93772", "CSAFPID-40293", "CSAFPID-345038", "CSAFPID-93629", "CSAFPID-93781", "CSAFPID-45192", "CSAFPID-608630", "CSAFPID-40292", "CSAFPID-40291", "CSAFPID-345039", "CSAFPID-93628", "CSAFPID-764780", "CSAFPID-764781", "CSAFPID-93775", "CSAFPID-93774", "CSAFPID-764782", "CSAFPID-342793", "CSAFPID-1261", "CSAFPID-204622", "CSAFPID-219909", "CSAFPID-342803", "CSAFPID-204563", "CSAFPID-221118", "CSAFPID-240600", "CSAFPID-8984", "CSAFPID-204510", "CSAFPID-204569", "CSAFPID-219826", "CSAFPID-1899", "CSAFPID-41111", "CSAFPID-40299", "CSAFPID-187447", "CSAFPID-1900", "CSAFPID-40301", "CSAFPID-180194", "CSAFPID-40298", "CSAFPID-41112", "CSAFPID-41110", "CSAFPID-41113", "CSAFPID-180193", "CSAFPID-1898", "CSAFPID-40300", "CSAFPID-611587", "CSAFPID-40297", "CSAFPID-110244", "CSAFPID-110242", "CSAFPID-9489", "CSAFPID-110249", "CSAFPID-40294", "CSAFPID-110243", "CSAFPID-204629", "CSAFPID-765241", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-41183", "CSAFPID-207586", "CSAFPID-765242", "CSAFPID-205759", "CSAFPID-1893", "CSAFPID-765365", "CSAFPID-765366", "CSAFPID-342804", "CSAFPID-342805", "CSAFPID-204456", "CSAFPID-1882", "CSAFPID-573035", "CSAFPID-204645", "CSAFPID-765367", "CSAFPID-765368", "CSAFPID-764242", "CSAFPID-76994", "CSAFPID-204623", "CSAFPID-352633", "CSAFPID-352632", "CSAFPID-765369", "CSAFPID-204528", "CSAFPID-342802", "CSAFPID-40610", "CSAFPID-40611", "CSAFPID-40609", "CSAFPID-180198", "CSAFPID-180196", "CSAFPID-180201", "CSAFPID-180202", "CSAFPID-40613", "CSAFPID-180199", "CSAFPID-93546", "CSAFPID-180195", "CSAFPID-180200", "CSAFPID-765371", "CSAFPID-89545", "CSAFPID-180215", "CSAFPID-180197", "CSAFPID-204639", "CSAFPID-204627", "CSAFPID-226017", "CSAFPID-219898", "CSAFPID-179774", "CSAFPID-342799", "CSAFPID-765372", "CSAFPID-220125", "CSAFPID-245244", "CSAFPID-204554", "CSAFPID-764739", "CSAFPID-204614", "CSAFPID-345031", "CSAFPID-204635", "CSAFPID-204595", "CSAFPID-204590", "CSAFPID-224787", "CSAFPID-1673381", "CSAFPID-1673382", "CSAFPID-1674617", "CSAFPID-1674618", "CSAFPID-1674619", "CSAFPID-1674620", "CSAFPID-1674621", "CSAFPID-1674622", "CSAFPID-1674623", "CSAFPID-1674624", "CSAFPID-1674625", "CSAFPID-1674626", "CSAFPID-1674627", "CSAFPID-1674628" ] } ], "title": "CVE-2021-37137" }, { "cve": "CVE-2022-2068", "cwe": { "id": "CWE-78", "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)" }, "notes": [ { "category": "other", "text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)", "title": "CWE-78" }, { "category": "other", "text": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)", "title": "CWE-77" } ], "product_status": { "known_affected": [ "CSAFPID-40949", "CSAFPID-391501", "CSAFPID-440102", "CSAFPID-41516", "CSAFPID-41515", "CSAFPID-764237", "CSAFPID-45182", "CSAFPID-45181", "CSAFPID-45186", "CSAFPID-45185", "CSAFPID-90018", "CSAFPID-94290", "CSAFPID-260394", "CSAFPID-216017", "CSAFPID-764240", "CSAFPID-90021", "CSAFPID-94292", "CSAFPID-218028", "CSAFPID-94291", "CSAFPID-493443", "CSAFPID-224796", "CSAFPID-90019", "CSAFPID-90016", "CSAFPID-93777", "CSAFPID-93772", "CSAFPID-40293", "CSAFPID-345038", "CSAFPID-93629", "CSAFPID-93781", "CSAFPID-45192", "CSAFPID-608630", "CSAFPID-40292", "CSAFPID-40291", "CSAFPID-345039", "CSAFPID-93628", "CSAFPID-764780", "CSAFPID-764781", "CSAFPID-93775", "CSAFPID-93774", "CSAFPID-764782", "CSAFPID-342793", "CSAFPID-1261", "CSAFPID-204622", "CSAFPID-219909", "CSAFPID-342803", "CSAFPID-204563", "CSAFPID-221118", "CSAFPID-240600", "CSAFPID-8984", "CSAFPID-204510", "CSAFPID-204569", "CSAFPID-219826", "CSAFPID-40294", "CSAFPID-93631", "CSAFPID-764900", "CSAFPID-568240", "CSAFPID-355340", "CSAFPID-703515", "CSAFPID-204456", "CSAFPID-764735", "CSAFPID-204635", "CSAFPID-41183", "CSAFPID-234306", "CSAFPID-41182", "CSAFPID-226017", "CSAFPID-219898", "CSAFPID-179774", "CSAFPID-764738", "CSAFPID-764901", "CSAFPID-764902", "CSAFPID-220547", "CSAFPID-187447", "CSAFPID-760687", "CSAFPID-40947", "CSAFPID-2044", "CSAFPID-449747", "CSAFPID-40301", "CSAFPID-449746", "CSAFPID-40298", "CSAFPID-223527", "CSAFPID-760688", "CSAFPID-93636", "CSAFPID-40300", "CSAFPID-93653", "CSAFPID-642000", "CSAFPID-642002", "CSAFPID-642001", "CSAFPID-165576", "CSAFPID-764899", "CSAFPID-40948", "CSAFPID-426842", "CSAFPID-93630", "CSAFPID-204645", "CSAFPID-1893", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2022-2068", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-2068.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C", "version": "3.1" }, "products": [ "CSAFPID-40949", "CSAFPID-391501", "CSAFPID-440102", "CSAFPID-41516", "CSAFPID-41515", "CSAFPID-764237", "CSAFPID-45182", "CSAFPID-45181", "CSAFPID-45186", "CSAFPID-45185", "CSAFPID-90018", "CSAFPID-94290", "CSAFPID-260394", "CSAFPID-216017", "CSAFPID-764240", "CSAFPID-90021", "CSAFPID-94292", "CSAFPID-218028", "CSAFPID-94291", "CSAFPID-493443", "CSAFPID-224796", "CSAFPID-90019", "CSAFPID-90016", "CSAFPID-93777", "CSAFPID-93772", "CSAFPID-40293", "CSAFPID-345038", "CSAFPID-93629", "CSAFPID-93781", "CSAFPID-45192", "CSAFPID-608630", "CSAFPID-40292", "CSAFPID-40291", "CSAFPID-345039", "CSAFPID-93628", "CSAFPID-764780", "CSAFPID-764781", "CSAFPID-93775", "CSAFPID-93774", "CSAFPID-764782", "CSAFPID-342793", "CSAFPID-1261", "CSAFPID-204622", "CSAFPID-219909", "CSAFPID-342803", "CSAFPID-204563", "CSAFPID-221118", "CSAFPID-240600", "CSAFPID-8984", "CSAFPID-204510", "CSAFPID-204569", "CSAFPID-219826", "CSAFPID-40294", "CSAFPID-93631", "CSAFPID-764900", "CSAFPID-568240", "CSAFPID-355340", "CSAFPID-703515", "CSAFPID-204456", "CSAFPID-764735", "CSAFPID-204635", "CSAFPID-41183", "CSAFPID-234306", "CSAFPID-41182", "CSAFPID-226017", "CSAFPID-219898", "CSAFPID-179774", "CSAFPID-764738", "CSAFPID-764901", "CSAFPID-764902", "CSAFPID-220547", "CSAFPID-187447", "CSAFPID-760687", "CSAFPID-40947", "CSAFPID-2044", "CSAFPID-449747", "CSAFPID-40301", "CSAFPID-449746", "CSAFPID-40298", "CSAFPID-223527", "CSAFPID-760688", "CSAFPID-93636", "CSAFPID-40300", "CSAFPID-93653", "CSAFPID-642000", "CSAFPID-642002", "CSAFPID-642001", "CSAFPID-165576", "CSAFPID-764899", "CSAFPID-40948", "CSAFPID-426842", "CSAFPID-93630", "CSAFPID-204645", "CSAFPID-1893", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] } ], "title": "CVE-2022-2068" }, { "cve": "CVE-2022-2601", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "other", "text": "Out-of-bounds Write", "title": "CWE-787" }, { "category": "other", "text": "Heap-based Buffer Overflow", "title": "CWE-122" } ], "product_status": { "known_affected": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2022-2601", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-2601.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.6, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] } ], "title": "CVE-2022-2601" }, { "cve": "CVE-2022-23437", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)" }, "notes": [ { "category": "other", "text": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)", "title": "CWE-835" } ], "product_status": { "known_affected": [ "CSAFPID-204629", "CSAFPID-704410", "CSAFPID-704411", "CSAFPID-704412", "CSAFPID-226017", "CSAFPID-179774", "CSAFPID-219898", "CSAFPID-219826", "CSAFPID-204569", "CSAFPID-204510", "CSAFPID-220057", "CSAFPID-220055", "CSAFPID-220909", "CSAFPID-45184", "CSAFPID-45182", "CSAFPID-220559", "CSAFPID-220558", "CSAFPID-220327", "CSAFPID-220325", "CSAFPID-219838", "CSAFPID-220056", "CSAFPID-223511", "CSAFPID-216017", "CSAFPID-220889", "CSAFPID-220918", "CSAFPID-90020", "CSAFPID-90015", "CSAFPID-220133", "CSAFPID-220561", "CSAFPID-90021", "CSAFPID-220881", "CSAFPID-94291", "CSAFPID-220910", "CSAFPID-220324", "CSAFPID-224796", "CSAFPID-224795", "CSAFPID-220326", "CSAFPID-764734", "CSAFPID-40293", "CSAFPID-220167", "CSAFPID-93781", "CSAFPID-220132", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-764736", "CSAFPID-764737", "CSAFPID-224793", "CSAFPID-342793", "CSAFPID-1265", "CSAFPID-219803", "CSAFPID-375182", "CSAFPID-342803", "CSAFPID-1266", "CSAFPID-219776", "CSAFPID-224791", "CSAFPID-224790", "CSAFPID-221118", "CSAFPID-764738", "CSAFPID-240600", "CSAFPID-764739", "CSAFPID-391501", "CSAFPID-440102", "CSAFPID-41516", "CSAFPID-41515", "CSAFPID-764237", "CSAFPID-45181", "CSAFPID-45186", "CSAFPID-45185", "CSAFPID-90018", "CSAFPID-94290", "CSAFPID-260394", "CSAFPID-764240", "CSAFPID-94292", "CSAFPID-218028", "CSAFPID-493443", "CSAFPID-90019", "CSAFPID-90016", "CSAFPID-93777", "CSAFPID-93772", "CSAFPID-345038", "CSAFPID-93629", "CSAFPID-45192", "CSAFPID-608630", "CSAFPID-40292", "CSAFPID-40291", "CSAFPID-345039", "CSAFPID-93628", "CSAFPID-764780", "CSAFPID-764781", "CSAFPID-93775", "CSAFPID-93774", "CSAFPID-764782", "CSAFPID-1261", "CSAFPID-204622", "CSAFPID-219909", "CSAFPID-204563", "CSAFPID-8984", "CSAFPID-220548", "CSAFPID-608629", "CSAFPID-93784", "CSAFPID-41111", "CSAFPID-1685", "CSAFPID-493445", "CSAFPID-294401", "CSAFPID-220547", "CSAFPID-764824", "CSAFPID-220459", "CSAFPID-764825", "CSAFPID-93635", "CSAFPID-503534", "CSAFPID-503493", "CSAFPID-493444", "CSAFPID-93633", "CSAFPID-260395", "CSAFPID-260393", "CSAFPID-220468", "CSAFPID-93636", "CSAFPID-93634", "CSAFPID-589926", "CSAFPID-179780", "CSAFPID-589925", "CSAFPID-179779", "CSAFPID-764826", "CSAFPID-764827", "CSAFPID-764828", "CSAFPID-764829", "CSAFPID-764830", "CSAFPID-220190", "CSAFPID-220189", "CSAFPID-764833", "CSAFPID-41183", "CSAFPID-764834", "CSAFPID-234306", "CSAFPID-764835", "CSAFPID-187447", "CSAFPID-760687", "CSAFPID-40947", "CSAFPID-2044", "CSAFPID-449747", "CSAFPID-40301", "CSAFPID-449746", "CSAFPID-40298", "CSAFPID-223527", "CSAFPID-760688", "CSAFPID-40300", "CSAFPID-93653", "CSAFPID-40949", "CSAFPID-642000", "CSAFPID-642002", "CSAFPID-642001", "CSAFPID-165576", "CSAFPID-764899", "CSAFPID-40948", "CSAFPID-426842", "CSAFPID-93630", "CSAFPID-204645", "CSAFPID-1893", "CSAFPID-40294", "CSAFPID-93631", "CSAFPID-764900", "CSAFPID-568240", "CSAFPID-355340", "CSAFPID-703515", "CSAFPID-204456", "CSAFPID-204635", "CSAFPID-41182", "CSAFPID-764901", "CSAFPID-764902", "CSAFPID-1899", "CSAFPID-40299", "CSAFPID-1900", "CSAFPID-180194", "CSAFPID-41112", "CSAFPID-41110", "CSAFPID-41113", "CSAFPID-180193", "CSAFPID-1898", "CSAFPID-611587", "CSAFPID-40297", "CSAFPID-110244", "CSAFPID-110242", "CSAFPID-9489", "CSAFPID-110249", "CSAFPID-110243", "CSAFPID-765241", "CSAFPID-209546", "CSAFPID-207586", "CSAFPID-765242", "CSAFPID-205759", "CSAFPID-765365", "CSAFPID-765366", "CSAFPID-342804", "CSAFPID-342805", "CSAFPID-1882", "CSAFPID-573035", "CSAFPID-765367", "CSAFPID-765368", "CSAFPID-764242", "CSAFPID-76994", "CSAFPID-204623", "CSAFPID-352633", "CSAFPID-352632", "CSAFPID-765369", "CSAFPID-204528", "CSAFPID-342802", "CSAFPID-40610", "CSAFPID-40611", "CSAFPID-40609", "CSAFPID-180198", "CSAFPID-180217", "CSAFPID-180196", "CSAFPID-40612", "CSAFPID-180201", "CSAFPID-180216", "CSAFPID-180202", "CSAFPID-40613", "CSAFPID-40608", "CSAFPID-180199", "CSAFPID-93546", "CSAFPID-180195", "CSAFPID-2310", "CSAFPID-93547", "CSAFPID-180200", "CSAFPID-765371", "CSAFPID-89545", "CSAFPID-180215", "CSAFPID-180197", "CSAFPID-204639", "CSAFPID-204627", "CSAFPID-342799", "CSAFPID-765372", "CSAFPID-220125", "CSAFPID-245244", "CSAFPID-204554", "CSAFPID-204614", "CSAFPID-345031", "CSAFPID-204595", "CSAFPID-204590", "CSAFPID-224787", "CSAFPID-1673065", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2022-23437", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-23437.json" } ], "title": "CVE-2022-23437" }, { "cve": "CVE-2022-36760", "cwe": { "id": "CWE-444", "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)" }, "notes": [ { "category": "other", "text": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)", "title": "CWE-444" } ], "product_status": { "known_affected": [ "CSAFPID-220057", "CSAFPID-220055", "CSAFPID-220909", "CSAFPID-45184", "CSAFPID-45182", "CSAFPID-220559", "CSAFPID-220558", "CSAFPID-220327", "CSAFPID-220325", "CSAFPID-219838", "CSAFPID-220056", "CSAFPID-223511", "CSAFPID-216017", "CSAFPID-220889", "CSAFPID-220918", "CSAFPID-90020", "CSAFPID-90015", "CSAFPID-220133", "CSAFPID-220561", "CSAFPID-90021", "CSAFPID-220881", "CSAFPID-94291", "CSAFPID-220910", "CSAFPID-220324", "CSAFPID-224796", "CSAFPID-224795", "CSAFPID-220326", "CSAFPID-764734", "CSAFPID-40293", "CSAFPID-220167", "CSAFPID-93781", "CSAFPID-220132", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-764736", "CSAFPID-764737", "CSAFPID-224793", "CSAFPID-342793", "CSAFPID-1265", "CSAFPID-704412", "CSAFPID-704411", "CSAFPID-704410", "CSAFPID-219803", "CSAFPID-375182", "CSAFPID-342803", "CSAFPID-1266", "CSAFPID-219776", "CSAFPID-224791", "CSAFPID-224790", "CSAFPID-221118", "CSAFPID-764738", "CSAFPID-240600", "CSAFPID-764739", "CSAFPID-204510", "CSAFPID-204569", "CSAFPID-219826", "CSAFPID-391501", "CSAFPID-440102", "CSAFPID-41516", "CSAFPID-41515", "CSAFPID-764237", "CSAFPID-45181", "CSAFPID-45186", "CSAFPID-45185", "CSAFPID-90018", "CSAFPID-94290", "CSAFPID-260394", "CSAFPID-764240", "CSAFPID-94292", "CSAFPID-218028", "CSAFPID-493443", "CSAFPID-90019", "CSAFPID-90016", "CSAFPID-93777", "CSAFPID-93772", "CSAFPID-345038", "CSAFPID-93629", "CSAFPID-45192", "CSAFPID-608630", "CSAFPID-40292", "CSAFPID-40291", "CSAFPID-345039", "CSAFPID-93628", "CSAFPID-764780", "CSAFPID-764781", "CSAFPID-93775", "CSAFPID-93774", "CSAFPID-764782", "CSAFPID-1261", "CSAFPID-204622", "CSAFPID-219909", "CSAFPID-204563", "CSAFPID-8984", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2022-36760", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-36760.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-220057", "CSAFPID-220055", "CSAFPID-220909", "CSAFPID-45184", "CSAFPID-45182", "CSAFPID-220559", "CSAFPID-220558", "CSAFPID-220327", "CSAFPID-220325", "CSAFPID-219838", "CSAFPID-220056", "CSAFPID-223511", "CSAFPID-216017", "CSAFPID-220889", "CSAFPID-220918", "CSAFPID-90020", "CSAFPID-90015", "CSAFPID-220133", "CSAFPID-220561", "CSAFPID-90021", "CSAFPID-220881", "CSAFPID-94291", "CSAFPID-220910", "CSAFPID-220324", "CSAFPID-224796", "CSAFPID-224795", "CSAFPID-220326", "CSAFPID-764734", "CSAFPID-40293", "CSAFPID-220167", "CSAFPID-93781", "CSAFPID-220132", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-764736", "CSAFPID-764737", "CSAFPID-224793", "CSAFPID-342793", "CSAFPID-1265", "CSAFPID-704412", "CSAFPID-704411", "CSAFPID-704410", "CSAFPID-219803", "CSAFPID-375182", "CSAFPID-342803", "CSAFPID-1266", "CSAFPID-219776", "CSAFPID-224791", "CSAFPID-224790", "CSAFPID-221118", "CSAFPID-764738", "CSAFPID-240600", "CSAFPID-764739", "CSAFPID-204510", "CSAFPID-204569", "CSAFPID-219826", "CSAFPID-391501", "CSAFPID-440102", "CSAFPID-41516", "CSAFPID-41515", "CSAFPID-764237", "CSAFPID-45181", "CSAFPID-45186", "CSAFPID-45185", "CSAFPID-90018", "CSAFPID-94290", "CSAFPID-260394", "CSAFPID-764240", "CSAFPID-94292", "CSAFPID-218028", "CSAFPID-493443", "CSAFPID-90019", "CSAFPID-90016", "CSAFPID-93777", "CSAFPID-93772", "CSAFPID-345038", "CSAFPID-93629", "CSAFPID-45192", "CSAFPID-608630", "CSAFPID-40292", "CSAFPID-40291", "CSAFPID-345039", "CSAFPID-93628", "CSAFPID-764780", "CSAFPID-764781", "CSAFPID-93775", "CSAFPID-93774", "CSAFPID-764782", "CSAFPID-1261", "CSAFPID-204622", "CSAFPID-219909", "CSAFPID-204563", "CSAFPID-8984", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] } ], "title": "CVE-2022-36760" }, { "cve": "CVE-2023-2953", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "other", "text": "Improper Restriction of Operations within the Bounds of a Memory Buffer", "title": "CWE-119" }, { "category": "other", "text": "NULL Pointer Dereference", "title": "CWE-476" } ], "product_status": { "known_affected": [ "CSAFPID-1673389", "CSAFPID-1673390", "CSAFPID-1673391", "CSAFPID-1673392", "CSAFPID-1673393", "CSAFPID-1673394", "CSAFPID-1673395", "CSAFPID-1673396", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2023-2953", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-2953.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673389", "CSAFPID-1673390", "CSAFPID-1673391", "CSAFPID-1673392", "CSAFPID-1673393", "CSAFPID-1673394", "CSAFPID-1673395", "CSAFPID-1673396", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] } ], "title": "CVE-2023-2953" }, { "cve": "CVE-2023-3635", "cwe": { "id": "CWE-195", "name": "Signed to Unsigned Conversion Error" }, "notes": [ { "category": "other", "text": "Signed to Unsigned Conversion Error", "title": "CWE-195" }, { "category": "other", "text": "Uncaught Exception", "title": "CWE-248" } ], "product_status": { "known_affected": [ "CSAFPID-94291", "CSAFPID-40293", "CSAFPID-204622", "CSAFPID-1265", "CSAFPID-1261", "CSAFPID-1266", "CSAFPID-8984", "CSAFPID-1673399", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-912085", "CSAFPID-912068", "CSAFPID-912076", "CSAFPID-912539", "CSAFPID-912540", "CSAFPID-912541", "CSAFPID-912542", "CSAFPID-912543", "CSAFPID-912101", "CSAFPID-912544", "CSAFPID-912077", "CSAFPID-912545", "CSAFPID-912546", "CSAFPID-912547", "CSAFPID-219909", "CSAFPID-220558", "CSAFPID-221118", "CSAFPID-224790", "CSAFPID-240600", "CSAFPID-342804", "CSAFPID-611387", "CSAFPID-611401", "CSAFPID-611406", "CSAFPID-611407", "CSAFPID-611408", "CSAFPID-611413", "CSAFPID-611595", "CSAFPID-204510", "CSAFPID-204563", "CSAFPID-204569", "CSAFPID-219803", "CSAFPID-219838", "CSAFPID-224793", "CSAFPID-342793", "CSAFPID-342803", "CSAFPID-614513", "CSAFPID-614514", "CSAFPID-614515", "CSAFPID-614516", "CSAFPID-614517", "CSAFPID-618156", "CSAFPID-643776", "CSAFPID-764237", "CSAFPID-764238", "CSAFPID-764239", "CSAFPID-764240", "CSAFPID-764241", "CSAFPID-764242", "CSAFPID-764243", "CSAFPID-764247", "CSAFPID-764248", "CSAFPID-764249", "CSAFPID-816346", "CSAFPID-816347", "CSAFPID-816348", "CSAFPID-816349", "CSAFPID-816350", "CSAFPID-816351", "CSAFPID-816352", "CSAFPID-816353", "CSAFPID-816354", "CSAFPID-816355", "CSAFPID-816357", "CSAFPID-816358", "CSAFPID-816359", "CSAFPID-816765", "CSAFPID-816766", "CSAFPID-816767", "CSAFPID-816768", "CSAFPID-816769", "CSAFPID-816770", "CSAFPID-816771", "CSAFPID-816772", "CSAFPID-816773", "CSAFPID-816774", "CSAFPID-816775", "CSAFPID-816776", "CSAFPID-816777", "CSAFPID-816778", "CSAFPID-816779", "CSAFPID-816780", "CSAFPID-816781", "CSAFPID-816782", "CSAFPID-816783", "CSAFPID-816784", "CSAFPID-816785", "CSAFPID-816786", "CSAFPID-816787", "CSAFPID-816788", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-816791", "CSAFPID-816792", "CSAFPID-816793", "CSAFPID-816794", "CSAFPID-816795", "CSAFPID-816796", "CSAFPID-816797", "CSAFPID-764735", "CSAFPID-764738", "CSAFPID-912073", "CSAFPID-912078", "CSAFPID-912079", "CSAFPID-912080", "CSAFPID-90016", "CSAFPID-93781", "CSAFPID-219776", "CSAFPID-219826", "CSAFPID-220132", "CSAFPID-224795", "CSAFPID-912102", "CSAFPID-912548", "CSAFPID-912549", "CSAFPID-912550", "CSAFPID-912551", "CSAFPID-912552", "CSAFPID-912553", "CSAFPID-912554", "CSAFPID-912556", "CSAFPID-912557", "CSAFPID-912558", "CSAFPID-764739", "CSAFPID-764826", "CSAFPID-765242" ] }, "references": [ { "category": "self", "summary": "CVE-2023-3635", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-3635.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-94291", "CSAFPID-40293", "CSAFPID-204622", "CSAFPID-1265", "CSAFPID-1261", "CSAFPID-1266", "CSAFPID-8984", "CSAFPID-1673399", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-912085", "CSAFPID-912068", "CSAFPID-912076", "CSAFPID-912539", "CSAFPID-912540", "CSAFPID-912541", "CSAFPID-912542", "CSAFPID-912543", "CSAFPID-912101", "CSAFPID-912544", "CSAFPID-912077", "CSAFPID-912545", "CSAFPID-912546", "CSAFPID-912547", "CSAFPID-219909", "CSAFPID-220558", "CSAFPID-221118", "CSAFPID-224790", "CSAFPID-240600", "CSAFPID-342804", "CSAFPID-611387", "CSAFPID-611401", "CSAFPID-611406", "CSAFPID-611407", "CSAFPID-611408", "CSAFPID-611413", "CSAFPID-611595", "CSAFPID-204510", "CSAFPID-204563", "CSAFPID-204569", "CSAFPID-219803", "CSAFPID-219838", "CSAFPID-224793", "CSAFPID-342793", "CSAFPID-342803", "CSAFPID-614513", "CSAFPID-614514", "CSAFPID-614515", "CSAFPID-614516", "CSAFPID-614517", "CSAFPID-618156", "CSAFPID-643776", "CSAFPID-764237", "CSAFPID-764238", "CSAFPID-764239", "CSAFPID-764240", "CSAFPID-764241", "CSAFPID-764242", "CSAFPID-764243", "CSAFPID-764247", "CSAFPID-764248", "CSAFPID-764249", "CSAFPID-816346", "CSAFPID-816347", "CSAFPID-816348", "CSAFPID-816349", "CSAFPID-816350", "CSAFPID-816351", "CSAFPID-816352", "CSAFPID-816353", "CSAFPID-816354", "CSAFPID-816355", "CSAFPID-816357", "CSAFPID-816358", "CSAFPID-816359", "CSAFPID-816765", "CSAFPID-816766", "CSAFPID-816767", "CSAFPID-816768", "CSAFPID-816769", "CSAFPID-816770", "CSAFPID-816771", "CSAFPID-816772", "CSAFPID-816773", "CSAFPID-816774", "CSAFPID-816775", "CSAFPID-816776", "CSAFPID-816777", "CSAFPID-816778", "CSAFPID-816779", "CSAFPID-816780", "CSAFPID-816781", "CSAFPID-816782", "CSAFPID-816783", "CSAFPID-816784", "CSAFPID-816785", "CSAFPID-816786", "CSAFPID-816787", "CSAFPID-816788", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-816791", "CSAFPID-816792", "CSAFPID-816793", "CSAFPID-816794", "CSAFPID-816795", "CSAFPID-816796", "CSAFPID-816797", "CSAFPID-764735", "CSAFPID-764738", "CSAFPID-912073", "CSAFPID-912078", "CSAFPID-912079", "CSAFPID-912080", "CSAFPID-90016", "CSAFPID-93781", "CSAFPID-219776", "CSAFPID-219826", "CSAFPID-220132", "CSAFPID-224795", "CSAFPID-912102", "CSAFPID-912548", "CSAFPID-912549", "CSAFPID-912550", "CSAFPID-912551", "CSAFPID-912552", "CSAFPID-912553", "CSAFPID-912554", "CSAFPID-912556", "CSAFPID-912557", "CSAFPID-912558", "CSAFPID-764739", "CSAFPID-764826", "CSAFPID-765242" ] } ], "title": "CVE-2023-3635" }, { "cve": "CVE-2023-4043", "cwe": { "id": "CWE-834", "name": "Excessive Iteration" }, "notes": [ { "category": "other", "text": "Excessive Iteration", "title": "CWE-834" }, { "category": "other", "text": "Improper Input Validation", "title": "CWE-20" } ], "product_status": { "known_affected": [ "CSAFPID-816765", "CSAFPID-816766", "CSAFPID-816767", "CSAFPID-816768", "CSAFPID-816769", "CSAFPID-816770", "CSAFPID-816771", "CSAFPID-816772", "CSAFPID-219838", "CSAFPID-611387", "CSAFPID-816773", "CSAFPID-816774", "CSAFPID-816775", "CSAFPID-816346", "CSAFPID-816776", "CSAFPID-816348", "CSAFPID-816777", "CSAFPID-816347", "CSAFPID-94291", "CSAFPID-816778", "CSAFPID-614517", "CSAFPID-816779", "CSAFPID-816349", "CSAFPID-40293", "CSAFPID-611413", "CSAFPID-764242", "CSAFPID-816780", "CSAFPID-816781", "CSAFPID-816782", "CSAFPID-816783", "CSAFPID-816784", "CSAFPID-816785", "CSAFPID-816353", "CSAFPID-816786", "CSAFPID-816787", "CSAFPID-816788", "CSAFPID-816352", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-342804", "CSAFPID-816791", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-224793", "CSAFPID-816794", "CSAFPID-342793", "CSAFPID-1265", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-204622", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-912068", "CSAFPID-912076", "CSAFPID-912539", "CSAFPID-912540", "CSAFPID-912541", "CSAFPID-912542", "CSAFPID-912543", "CSAFPID-912101", "CSAFPID-912544", "CSAFPID-912077", "CSAFPID-912545", "CSAFPID-764240", "CSAFPID-912546", "CSAFPID-912547", "CSAFPID-224795", "CSAFPID-912548", "CSAFPID-912102", "CSAFPID-912549", "CSAFPID-764826", "CSAFPID-90016", "CSAFPID-912078", "CSAFPID-912550", "CSAFPID-912551", "CSAFPID-912552", "CSAFPID-912553", "CSAFPID-93781", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-912080", "CSAFPID-912554", "CSAFPID-912556", "CSAFPID-912557", "CSAFPID-219776", "CSAFPID-765242", "CSAFPID-1266", "CSAFPID-8984", "CSAFPID-204510", "CSAFPID-204563", "CSAFPID-204569", "CSAFPID-219803", "CSAFPID-219909", "CSAFPID-221118", "CSAFPID-224790", "CSAFPID-240600", "CSAFPID-342803", "CSAFPID-611595", "CSAFPID-764738", "CSAFPID-816351", "CSAFPID-816354", "CSAFPID-816355", "CSAFPID-816357", "CSAFPID-816358", "CSAFPID-816359", "CSAFPID-816795", "CSAFPID-816796", "CSAFPID-816797", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-1503582", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-1503591", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-219826", "CSAFPID-764739", "CSAFPID-912073", "CSAFPID-912558" ] }, "references": [ { "category": "self", "summary": "CVE-2023-4043", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-4043.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-816765", "CSAFPID-816766", "CSAFPID-816767", "CSAFPID-816768", "CSAFPID-816769", "CSAFPID-816770", "CSAFPID-816771", "CSAFPID-816772", "CSAFPID-219838", "CSAFPID-611387", "CSAFPID-816773", "CSAFPID-816774", "CSAFPID-816775", "CSAFPID-816346", "CSAFPID-816776", "CSAFPID-816348", "CSAFPID-816777", "CSAFPID-816347", "CSAFPID-94291", "CSAFPID-816778", "CSAFPID-614517", "CSAFPID-816779", "CSAFPID-816349", "CSAFPID-40293", "CSAFPID-611413", "CSAFPID-764242", "CSAFPID-816780", "CSAFPID-816781", "CSAFPID-816782", "CSAFPID-816783", "CSAFPID-816784", "CSAFPID-816785", "CSAFPID-816353", "CSAFPID-816786", "CSAFPID-816787", "CSAFPID-816788", "CSAFPID-816352", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-342804", "CSAFPID-816791", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-224793", "CSAFPID-816794", "CSAFPID-342793", "CSAFPID-1265", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-204622", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-912068", "CSAFPID-912076", "CSAFPID-912539", "CSAFPID-912540", "CSAFPID-912541", "CSAFPID-912542", "CSAFPID-912543", "CSAFPID-912101", "CSAFPID-912544", "CSAFPID-912077", "CSAFPID-912545", "CSAFPID-764240", "CSAFPID-912546", "CSAFPID-912547", "CSAFPID-224795", "CSAFPID-912548", "CSAFPID-912102", "CSAFPID-912549", "CSAFPID-764826", "CSAFPID-90016", "CSAFPID-912078", "CSAFPID-912550", "CSAFPID-912551", "CSAFPID-912552", "CSAFPID-912553", "CSAFPID-93781", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-912080", "CSAFPID-912554", "CSAFPID-912556", "CSAFPID-912557", "CSAFPID-219776", "CSAFPID-765242", "CSAFPID-1266", "CSAFPID-8984", "CSAFPID-204510", "CSAFPID-204563", "CSAFPID-204569", "CSAFPID-219803", "CSAFPID-219909", "CSAFPID-221118", "CSAFPID-224790", "CSAFPID-240600", "CSAFPID-342803", "CSAFPID-611595", "CSAFPID-764738", "CSAFPID-816351", "CSAFPID-816354", "CSAFPID-816355", "CSAFPID-816357", "CSAFPID-816358", "CSAFPID-816359", "CSAFPID-816795", "CSAFPID-816796", "CSAFPID-816797", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-1503582", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-1503591", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-219826", "CSAFPID-764739", "CSAFPID-912073", "CSAFPID-912558" ] } ], "title": "CVE-2023-4043" }, { "cve": "CVE-2023-5685", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" } ], "product_status": { "known_affected": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1650752", "CSAFPID-1650751", "CSAFPID-1673389", "CSAFPID-1673390", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-912101", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-764240", "CSAFPID-912547", "CSAFPID-1503582", "CSAFPID-912549", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-764242", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-342804", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-912556", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600", "CSAFPID-204510", "CSAFPID-204569" ] }, "references": [ { "category": "self", "summary": "CVE-2023-5685", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-5685.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1650752", "CSAFPID-1650751", "CSAFPID-1673389", "CSAFPID-1673390", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-912101", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-764240", "CSAFPID-912547", "CSAFPID-1503582", "CSAFPID-912549", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-764242", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-342804", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-912556", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600", "CSAFPID-204510", "CSAFPID-204569" ] } ], "title": "CVE-2023-5685" }, { "cve": "CVE-2023-6597", "cwe": { "id": "CWE-61", "name": "UNIX Symbolic Link (Symlink) Following" }, "notes": [ { "category": "other", "text": "UNIX Symbolic Link (Symlink) Following", "title": "CWE-61" } ], "product_status": { "known_affected": [ "CSAFPID-1673395", "CSAFPID-1673420", "CSAFPID-1673421", "CSAFPID-1673396", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-912101", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-764240", "CSAFPID-912547", "CSAFPID-1503582", "CSAFPID-912549", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-764242", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-342804", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-912556", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600", "CSAFPID-204510", "CSAFPID-204569" ] }, "references": [ { "category": "self", "summary": "CVE-2023-6597", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-6597.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N", "version": "3.1" }, "products": [ "CSAFPID-1673395", "CSAFPID-1673420", "CSAFPID-1673421", "CSAFPID-1673396", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-912101", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-764240", "CSAFPID-912547", "CSAFPID-1503582", "CSAFPID-912549", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-764242", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-342804", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-912556", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600", "CSAFPID-204510", "CSAFPID-204569" ] } ], "title": "CVE-2023-6597" }, { "cve": "CVE-2023-6816", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "other", "text": "Improper Restriction of Operations within the Bounds of a Memory Buffer", "title": "CWE-119" }, { "category": "other", "text": "Out-of-bounds Write", "title": "CWE-787" } ], "product_status": { "known_affected": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2023-6816", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-6816.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] } ], "title": "CVE-2023-6816" }, { "cve": "CVE-2023-38408", "cwe": { "id": "CWE-94", "name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)" }, "notes": [ { "category": "other", "text": "Improper Control of Generation of Code (\u0027Code Injection\u0027)", "title": "CWE-94" }, { "category": "other", "text": "Improper Input Validation", "title": "CWE-20" } ], "product_status": { "known_affected": [ "CSAFPID-45182", "CSAFPID-40293", "CSAFPID-611406", "CSAFPID-764237", "CSAFPID-220558", "CSAFPID-764238", "CSAFPID-764239", "CSAFPID-614513", "CSAFPID-643776", "CSAFPID-611387", "CSAFPID-618156", "CSAFPID-614516", "CSAFPID-614515", "CSAFPID-614514", "CSAFPID-764240", "CSAFPID-94291", "CSAFPID-611401", "CSAFPID-614517", "CSAFPID-764241", "CSAFPID-611413", "CSAFPID-764242", "CSAFPID-764243", "CSAFPID-342804", "CSAFPID-611408", "CSAFPID-611407", "CSAFPID-764247", "CSAFPID-764248", "CSAFPID-204622", "CSAFPID-219909", "CSAFPID-611595", "CSAFPID-764249", "CSAFPID-224790", "CSAFPID-221118", "CSAFPID-240600", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2023-38408", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-38408.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-45182", "CSAFPID-40293", "CSAFPID-611406", "CSAFPID-764237", "CSAFPID-220558", "CSAFPID-764238", "CSAFPID-764239", "CSAFPID-614513", "CSAFPID-643776", "CSAFPID-611387", "CSAFPID-618156", "CSAFPID-614516", "CSAFPID-614515", "CSAFPID-614514", "CSAFPID-764240", "CSAFPID-94291", "CSAFPID-611401", "CSAFPID-614517", "CSAFPID-764241", "CSAFPID-611413", "CSAFPID-764242", "CSAFPID-764243", "CSAFPID-342804", "CSAFPID-611408", "CSAFPID-611407", "CSAFPID-764247", "CSAFPID-764248", "CSAFPID-204622", "CSAFPID-219909", "CSAFPID-611595", "CSAFPID-764249", "CSAFPID-224790", "CSAFPID-221118", "CSAFPID-240600", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] } ], "title": "CVE-2023-38408" }, { "cve": "CVE-2023-43642", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "other", "text": "Allocation of Resources Without Limits or Throttling", "title": "CWE-770" } ], "product_status": { "known_affected": [ "CSAFPID-40293", "CSAFPID-1265", "CSAFPID-1261", "CSAFPID-1266", "CSAFPID-8984", "CSAFPID-1673395", "CSAFPID-94291", "CSAFPID-204510", "CSAFPID-204563", "CSAFPID-204569", "CSAFPID-204622", "CSAFPID-219803", "CSAFPID-219838", "CSAFPID-219909", "CSAFPID-221118", "CSAFPID-224790", "CSAFPID-224793", "CSAFPID-240600", "CSAFPID-342793", "CSAFPID-342803", "CSAFPID-342804", "CSAFPID-611387", "CSAFPID-611413", "CSAFPID-611595", "CSAFPID-614517", "CSAFPID-764242", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-764738", "CSAFPID-816346", "CSAFPID-816347", "CSAFPID-816348", "CSAFPID-816349", "CSAFPID-816350", "CSAFPID-816351", "CSAFPID-816352", "CSAFPID-816353", "CSAFPID-816354", "CSAFPID-816355", "CSAFPID-816357", "CSAFPID-816358", "CSAFPID-816359", "CSAFPID-816765", "CSAFPID-816766", "CSAFPID-816767", "CSAFPID-816768", "CSAFPID-816769", "CSAFPID-816770", "CSAFPID-816771", "CSAFPID-816772", "CSAFPID-816773", "CSAFPID-816774", "CSAFPID-816775", "CSAFPID-816776", "CSAFPID-816777", "CSAFPID-816778", "CSAFPID-816779", "CSAFPID-816780", "CSAFPID-816781", "CSAFPID-816782", "CSAFPID-816783", "CSAFPID-816784", "CSAFPID-816785", "CSAFPID-816786", "CSAFPID-816787", "CSAFPID-816788", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-816791", "CSAFPID-816792", "CSAFPID-816793", "CSAFPID-816794", "CSAFPID-816795", "CSAFPID-816796", "CSAFPID-816797" ] }, "references": [ { "category": "self", "summary": "CVE-2023-43642", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-43642.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-40293", "CSAFPID-1265", "CSAFPID-1261", "CSAFPID-1266", "CSAFPID-8984", "CSAFPID-1673395", "CSAFPID-94291", "CSAFPID-204510", "CSAFPID-204563", "CSAFPID-204569", "CSAFPID-204622", "CSAFPID-219803", "CSAFPID-219838", "CSAFPID-219909", "CSAFPID-221118", "CSAFPID-224790", "CSAFPID-224793", "CSAFPID-240600", "CSAFPID-342793", "CSAFPID-342803", "CSAFPID-342804", "CSAFPID-611387", "CSAFPID-611413", "CSAFPID-611595", "CSAFPID-614517", "CSAFPID-764242", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-764738", "CSAFPID-816346", "CSAFPID-816347", "CSAFPID-816348", "CSAFPID-816349", "CSAFPID-816350", "CSAFPID-816351", "CSAFPID-816352", "CSAFPID-816353", "CSAFPID-816354", "CSAFPID-816355", "CSAFPID-816357", "CSAFPID-816358", "CSAFPID-816359", "CSAFPID-816765", "CSAFPID-816766", "CSAFPID-816767", "CSAFPID-816768", "CSAFPID-816769", "CSAFPID-816770", "CSAFPID-816771", "CSAFPID-816772", "CSAFPID-816773", "CSAFPID-816774", "CSAFPID-816775", "CSAFPID-816776", "CSAFPID-816777", "CSAFPID-816778", "CSAFPID-816779", "CSAFPID-816780", "CSAFPID-816781", "CSAFPID-816782", "CSAFPID-816783", "CSAFPID-816784", "CSAFPID-816785", "CSAFPID-816786", "CSAFPID-816787", "CSAFPID-816788", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-816791", "CSAFPID-816792", "CSAFPID-816793", "CSAFPID-816794", "CSAFPID-816795", "CSAFPID-816796", "CSAFPID-816797" ] } ], "title": "CVE-2023-43642" }, { "cve": "CVE-2023-46136", "cwe": { "id": "CWE-407", "name": "Inefficient Algorithmic Complexity" }, "notes": [ { "category": "other", "text": "Inefficient Algorithmic Complexity", "title": "CWE-407" }, { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" } ], "product_status": { "known_affected": [ "CSAFPID-1673411", "CSAFPID-912549", "CSAFPID-1673412", "CSAFPID-1673413", "CSAFPID-1673414", "CSAFPID-1673396", "CSAFPID-1503590", "CSAFPID-1673393", "CSAFPID-1673395", "CSAFPID-220132", "CSAFPID-1503585", "CSAFPID-1673392", "CSAFPID-1503589", "CSAFPID-1673415", "CSAFPID-1673416", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2023-46136", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-46136.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.0, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673411", "CSAFPID-912549", "CSAFPID-1673412", "CSAFPID-1673413", "CSAFPID-1673414", "CSAFPID-1673396", "CSAFPID-1503590", "CSAFPID-1673393", "CSAFPID-1673395", "CSAFPID-220132", "CSAFPID-1503585", "CSAFPID-1673392", "CSAFPID-1503589", "CSAFPID-1673415", "CSAFPID-1673416", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] } ], "title": "CVE-2023-46136" }, { "cve": "CVE-2023-48795", "cwe": { "id": "CWE-222", "name": "Truncation of Security-relevant Information" }, "notes": [ { "category": "other", "text": "Truncation of Security-relevant Information", "title": "CWE-222" } ], "product_status": { "known_affected": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1650752", "CSAFPID-816765", "CSAFPID-816766", "CSAFPID-816767", "CSAFPID-816768", "CSAFPID-816769", "CSAFPID-816770", "CSAFPID-816771", "CSAFPID-816772", "CSAFPID-219838", "CSAFPID-611387", "CSAFPID-816773", "CSAFPID-816774", "CSAFPID-816775", "CSAFPID-816346", "CSAFPID-816776", "CSAFPID-816348", "CSAFPID-816777", "CSAFPID-816347", "CSAFPID-94291", "CSAFPID-816778", "CSAFPID-614517", "CSAFPID-816779", "CSAFPID-816349", "CSAFPID-40293", "CSAFPID-764242", "CSAFPID-816780", "CSAFPID-816781", "CSAFPID-816782", "CSAFPID-816783", "CSAFPID-816784", "CSAFPID-816785", "CSAFPID-816353", "CSAFPID-816786", "CSAFPID-816352", "CSAFPID-342804", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-224793", "CSAFPID-342793", "CSAFPID-1265", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-204622", "CSAFPID-219909", "CSAFPID-219803", "CSAFPID-816351", "CSAFPID-611595", "CSAFPID-342803", "CSAFPID-1266", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-224790", "CSAFPID-221118", "CSAFPID-1673417", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-1670429", "CSAFPID-1670430", "CSAFPID-1670431", "CSAFPID-1670432", "CSAFPID-1670433", "CSAFPID-1670434", "CSAFPID-1670435", "CSAFPID-1670436", "CSAFPID-1670437", "CSAFPID-1670438", "CSAFPID-1670439", "CSAFPID-1670440", "CSAFPID-1670441", "CSAFPID-1670442", "CSAFPID-912076", "CSAFPID-912077", "CSAFPID-912078", "CSAFPID-90016", "CSAFPID-764826", "CSAFPID-345038", "CSAFPID-912079", "CSAFPID-220132", "CSAFPID-93781", "CSAFPID-345039", "CSAFPID-912080", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-912068", "CSAFPID-912539", "CSAFPID-912540", "CSAFPID-912541", "CSAFPID-912542", "CSAFPID-912543", "CSAFPID-912101", "CSAFPID-912544", "CSAFPID-912545", "CSAFPID-764240", "CSAFPID-912546", "CSAFPID-912547", "CSAFPID-224795", "CSAFPID-912548", "CSAFPID-611413", "CSAFPID-240600", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-816357", "CSAFPID-816358", "CSAFPID-816359", "CSAFPID-816787", "CSAFPID-816788", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-816791", "CSAFPID-816792", "CSAFPID-816793", "CSAFPID-816794", "CSAFPID-816795", "CSAFPID-816796", "CSAFPID-816797", "CSAFPID-8984", "CSAFPID-204510", "CSAFPID-204569", "CSAFPID-219776", "CSAFPID-219826", "CSAFPID-764739", "CSAFPID-765242", "CSAFPID-912073", "CSAFPID-912102", "CSAFPID-912549", "CSAFPID-912550", "CSAFPID-912551", "CSAFPID-912552", "CSAFPID-912553", "CSAFPID-912554", "CSAFPID-912556", "CSAFPID-912557", "CSAFPID-912558", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-1503582", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-1503591", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-1503601", "CSAFPID-1503602" ] }, "references": [ { "category": "self", "summary": "CVE-2023-48795", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-48795.json" } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1650752", "CSAFPID-816765", "CSAFPID-816766", "CSAFPID-816767", "CSAFPID-816768", "CSAFPID-816769", "CSAFPID-816770", "CSAFPID-816771", "CSAFPID-816772", "CSAFPID-219838", "CSAFPID-611387", "CSAFPID-816773", "CSAFPID-816774", "CSAFPID-816775", "CSAFPID-816346", "CSAFPID-816776", "CSAFPID-816348", "CSAFPID-816777", "CSAFPID-816347", "CSAFPID-94291", "CSAFPID-816778", "CSAFPID-614517", "CSAFPID-816779", "CSAFPID-816349", "CSAFPID-40293", "CSAFPID-764242", "CSAFPID-816780", "CSAFPID-816781", "CSAFPID-816782", "CSAFPID-816783", "CSAFPID-816784", "CSAFPID-816785", "CSAFPID-816353", "CSAFPID-816786", "CSAFPID-816352", "CSAFPID-342804", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-224793", "CSAFPID-342793", "CSAFPID-1265", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-204622", "CSAFPID-219909", "CSAFPID-219803", "CSAFPID-816351", "CSAFPID-611595", "CSAFPID-342803", "CSAFPID-1266", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-224790", "CSAFPID-221118", "CSAFPID-1673417", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-1670429", "CSAFPID-1670430", "CSAFPID-1670431", "CSAFPID-1670432", "CSAFPID-1670433", "CSAFPID-1670434", "CSAFPID-1670435", "CSAFPID-1670436", "CSAFPID-1670437", "CSAFPID-1670438", "CSAFPID-1670439", "CSAFPID-1670440", "CSAFPID-1670441", "CSAFPID-1670442", "CSAFPID-912076", "CSAFPID-912077", "CSAFPID-912078", "CSAFPID-90016", "CSAFPID-764826", "CSAFPID-345038", "CSAFPID-912079", "CSAFPID-220132", "CSAFPID-93781", "CSAFPID-345039", "CSAFPID-912080", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-912068", "CSAFPID-912539", "CSAFPID-912540", "CSAFPID-912541", "CSAFPID-912542", "CSAFPID-912543", "CSAFPID-912101", "CSAFPID-912544", "CSAFPID-912545", "CSAFPID-764240", "CSAFPID-912546", "CSAFPID-912547", "CSAFPID-224795", "CSAFPID-912548", "CSAFPID-611413", "CSAFPID-240600", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-816357", "CSAFPID-816358", "CSAFPID-816359", "CSAFPID-816787", "CSAFPID-816788", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-816791", "CSAFPID-816792", "CSAFPID-816793", "CSAFPID-816794", "CSAFPID-816795", "CSAFPID-816796", "CSAFPID-816797", "CSAFPID-8984", "CSAFPID-204510", "CSAFPID-204569", "CSAFPID-219776", "CSAFPID-219826", "CSAFPID-764739", "CSAFPID-765242", "CSAFPID-912073", "CSAFPID-912102", "CSAFPID-912549", "CSAFPID-912550", "CSAFPID-912551", "CSAFPID-912552", "CSAFPID-912553", "CSAFPID-912554", "CSAFPID-912556", "CSAFPID-912557", "CSAFPID-912558", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-1503582", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-1503591", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-1503601", "CSAFPID-1503602" ] } ], "title": "CVE-2023-48795" }, { "cve": "CVE-2023-51775", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" } ], "product_status": { "known_affected": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1650751", "CSAFPID-1673395", "CSAFPID-1673396", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-1670429", "CSAFPID-1670430", "CSAFPID-1670431", "CSAFPID-1670432", "CSAFPID-1670433", "CSAFPID-1670434", "CSAFPID-1670435", "CSAFPID-1670436", "CSAFPID-1670437", "CSAFPID-1670438", "CSAFPID-1670439", "CSAFPID-1670440", "CSAFPID-1670441", "CSAFPID-1670442", "CSAFPID-90016", "CSAFPID-93781", "CSAFPID-204510", "CSAFPID-204569", "CSAFPID-219776", "CSAFPID-219826", "CSAFPID-220132", "CSAFPID-224795", "CSAFPID-342804", "CSAFPID-611387", "CSAFPID-611413", "CSAFPID-614517", "CSAFPID-764237", "CSAFPID-764240", "CSAFPID-764242", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-764739", "CSAFPID-764826", "CSAFPID-765242", "CSAFPID-816348", "CSAFPID-816773", "CSAFPID-816781", "CSAFPID-816782", "CSAFPID-912068", "CSAFPID-912073", "CSAFPID-912076", "CSAFPID-912077", "CSAFPID-912078", "CSAFPID-912079", "CSAFPID-912080", "CSAFPID-912085", "CSAFPID-912101", "CSAFPID-912102", "CSAFPID-912539", "CSAFPID-912540", "CSAFPID-912541", "CSAFPID-912542", "CSAFPID-912543", "CSAFPID-912544", "CSAFPID-912545", "CSAFPID-912546", "CSAFPID-912547", "CSAFPID-912548", "CSAFPID-912549", "CSAFPID-912550", "CSAFPID-912551", "CSAFPID-912552", "CSAFPID-912553", "CSAFPID-912554", "CSAFPID-912556", "CSAFPID-912557", "CSAFPID-912558", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-1503582", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600" ] }, "references": [ { "category": "self", "summary": "CVE-2023-51775", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-51775.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1650751", "CSAFPID-1673395", "CSAFPID-1673396", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-1670429", "CSAFPID-1670430", "CSAFPID-1670431", "CSAFPID-1670432", "CSAFPID-1670433", "CSAFPID-1670434", "CSAFPID-1670435", "CSAFPID-1670436", "CSAFPID-1670437", "CSAFPID-1670438", "CSAFPID-1670439", "CSAFPID-1670440", "CSAFPID-1670441", "CSAFPID-1670442", "CSAFPID-90016", "CSAFPID-93781", "CSAFPID-204510", "CSAFPID-204569", "CSAFPID-219776", "CSAFPID-219826", "CSAFPID-220132", "CSAFPID-224795", "CSAFPID-342804", "CSAFPID-611387", "CSAFPID-611413", "CSAFPID-614517", "CSAFPID-764237", "CSAFPID-764240", "CSAFPID-764242", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-764739", "CSAFPID-764826", "CSAFPID-765242", "CSAFPID-816348", "CSAFPID-816773", "CSAFPID-816781", "CSAFPID-816782", "CSAFPID-912068", "CSAFPID-912073", "CSAFPID-912076", "CSAFPID-912077", "CSAFPID-912078", "CSAFPID-912079", "CSAFPID-912080", "CSAFPID-912085", "CSAFPID-912101", "CSAFPID-912102", "CSAFPID-912539", "CSAFPID-912540", "CSAFPID-912541", "CSAFPID-912542", "CSAFPID-912543", "CSAFPID-912544", "CSAFPID-912545", "CSAFPID-912546", "CSAFPID-912547", "CSAFPID-912548", "CSAFPID-912549", "CSAFPID-912550", "CSAFPID-912551", "CSAFPID-912552", "CSAFPID-912553", "CSAFPID-912554", "CSAFPID-912556", "CSAFPID-912557", "CSAFPID-912558", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-1503582", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600" ] } ], "title": "CVE-2023-51775" }, { "cve": "CVE-2023-52428", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" } ], "product_status": { "known_affected": [ "CSAFPID-1673395", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-912068", "CSAFPID-912076", "CSAFPID-611387", "CSAFPID-912539", "CSAFPID-816773", "CSAFPID-912540", "CSAFPID-912541", "CSAFPID-912542", "CSAFPID-912543", "CSAFPID-912101", "CSAFPID-912544", "CSAFPID-912077", "CSAFPID-816348", "CSAFPID-90016", "CSAFPID-93781", "CSAFPID-204510", "CSAFPID-204569", "CSAFPID-219776", "CSAFPID-219826", "CSAFPID-220132", "CSAFPID-224795", "CSAFPID-342804", "CSAFPID-611413", "CSAFPID-614517", "CSAFPID-764240", "CSAFPID-764242", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-764739", "CSAFPID-764826", "CSAFPID-765242", "CSAFPID-816781", "CSAFPID-816782", "CSAFPID-912073", "CSAFPID-912078", "CSAFPID-912079", "CSAFPID-912080", "CSAFPID-912102", "CSAFPID-912545", "CSAFPID-912546", "CSAFPID-912547", "CSAFPID-912548", "CSAFPID-912549", "CSAFPID-912550", "CSAFPID-912551", "CSAFPID-912552", "CSAFPID-912553", "CSAFPID-912554", "CSAFPID-912556", "CSAFPID-912557", "CSAFPID-912558", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-1503582", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600" ] }, "references": [ { "category": "self", "summary": "CVE-2023-52428", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-52428.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673395", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-912068", "CSAFPID-912076", "CSAFPID-611387", "CSAFPID-912539", "CSAFPID-816773", "CSAFPID-912540", "CSAFPID-912541", "CSAFPID-912542", "CSAFPID-912543", "CSAFPID-912101", "CSAFPID-912544", "CSAFPID-912077", "CSAFPID-816348", "CSAFPID-90016", "CSAFPID-93781", "CSAFPID-204510", "CSAFPID-204569", "CSAFPID-219776", "CSAFPID-219826", "CSAFPID-220132", "CSAFPID-224795", "CSAFPID-342804", "CSAFPID-611413", "CSAFPID-614517", "CSAFPID-764240", "CSAFPID-764242", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-764739", "CSAFPID-764826", "CSAFPID-765242", "CSAFPID-816781", "CSAFPID-816782", "CSAFPID-912073", "CSAFPID-912078", "CSAFPID-912079", "CSAFPID-912080", "CSAFPID-912102", "CSAFPID-912545", "CSAFPID-912546", "CSAFPID-912547", "CSAFPID-912548", "CSAFPID-912549", "CSAFPID-912550", "CSAFPID-912551", "CSAFPID-912552", "CSAFPID-912553", "CSAFPID-912554", "CSAFPID-912556", "CSAFPID-912557", "CSAFPID-912558", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-1503582", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600" ] } ], "title": "CVE-2023-52428" }, { "cve": "CVE-2024-0450", "cwe": { "id": "CWE-450", "name": "Multiple Interpretations of UI Input" }, "notes": [ { "category": "other", "text": "Multiple Interpretations of UI Input", "title": "CWE-450" }, { "category": "other", "text": "Asymmetric Resource Consumption (Amplification)", "title": "CWE-405" } ], "product_status": { "known_affected": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1673420", "CSAFPID-1673421", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-912101", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-764240", "CSAFPID-912547", "CSAFPID-1503582", "CSAFPID-912549", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-764242", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-342804", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-912556", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600", "CSAFPID-204510", "CSAFPID-204569" ] }, "references": [ { "category": "self", "summary": "CVE-2024-0450", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-0450.json" } ], "scores": [ { "cvss_v3": { "baseScore": 6.2, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1673420", "CSAFPID-1673421", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-912101", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-764240", "CSAFPID-912547", "CSAFPID-1503582", "CSAFPID-912549", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-764242", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-342804", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-912556", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600", "CSAFPID-204510", "CSAFPID-204569" ] } ], "title": "CVE-2024-0450" }, { "cve": "CVE-2024-2398", "cwe": { "id": "CWE-772", "name": "Missing Release of Resource after Effective Lifetime" }, "notes": [ { "category": "other", "text": "Missing Release of Resource after Effective Lifetime", "title": "CWE-772" }, { "category": "other", "text": "Missing Release of Memory after Effective Lifetime", "title": "CWE-401" } ], "product_status": { "known_affected": [ "CSAFPID-1673389", "CSAFPID-1673390", "CSAFPID-1673399", "CSAFPID-1673391", "CSAFPID-1673394", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2024-2398", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-2398.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.6, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L", "version": "3.1" }, "products": [ "CSAFPID-1673389", "CSAFPID-1673390", "CSAFPID-1673399", "CSAFPID-1673391", "CSAFPID-1673394", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] } ], "title": "CVE-2024-2398" }, { "cve": "CVE-2024-4577", "cwe": { "id": "CWE-88", "name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)" }, "notes": [ { "category": "other", "text": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)", "title": "CWE-88" }, { "category": "other", "text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)", "title": "CWE-78" } ], "product_status": { "known_affected": [ "CSAFPID-1650731", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2024-4577", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-4577.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1650731", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] } ], "title": "CVE-2024-4577" }, { "cve": "CVE-2024-4603", "cwe": { "id": "CWE-606", "name": "Unchecked Input for Loop Condition" }, "notes": [ { "category": "other", "text": "Unchecked Input for Loop Condition", "title": "CWE-606" } ], "product_status": { "known_affected": [ "CSAFPID-1673391", "CSAFPID-1673394", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-912101", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-764240", "CSAFPID-912547", "CSAFPID-1503582", "CSAFPID-912549", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-764242", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-342804", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-912556", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600", "CSAFPID-204510", "CSAFPID-204569" ] }, "references": [ { "category": "self", "summary": "CVE-2024-4603", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-4603.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673391", "CSAFPID-1673394", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-912101", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-764240", "CSAFPID-912547", "CSAFPID-1503582", "CSAFPID-912549", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-764242", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-342804", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-912556", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600", "CSAFPID-204510", "CSAFPID-204569" ] } ], "title": "CVE-2024-4603" }, { "cve": "CVE-2024-5585", "cwe": { "id": "CWE-116", "name": "Improper Encoding or Escaping of Output" }, "notes": [ { "category": "other", "text": "Improper Encoding or Escaping of Output", "title": "CWE-116" }, { "category": "other", "text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)", "title": "CWE-78" }, { "category": "other", "text": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)", "title": "CWE-88" } ], "product_status": { "known_affected": [ "CSAFPID-1650731", "CSAFPID-1674617", "CSAFPID-1674618", "CSAFPID-1674619", "CSAFPID-1674620", "CSAFPID-1674621", "CSAFPID-1674622", "CSAFPID-1674623", "CSAFPID-1674624", "CSAFPID-1674625", "CSAFPID-1674626", "CSAFPID-1674627", "CSAFPID-1674628" ] }, "references": [ { "category": "self", "summary": "CVE-2024-5585", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-5585.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1650731", "CSAFPID-1674617", "CSAFPID-1674618", "CSAFPID-1674619", "CSAFPID-1674620", "CSAFPID-1674621", "CSAFPID-1674622", "CSAFPID-1674623", "CSAFPID-1674624", "CSAFPID-1674625", "CSAFPID-1674626", "CSAFPID-1674627", "CSAFPID-1674628" ] } ], "title": "CVE-2024-5585" }, { "cve": "CVE-2024-5971", "cwe": { "id": "CWE-674", "name": "Uncontrolled Recursion" }, "notes": [ { "category": "other", "text": "Uncontrolled Recursion", "title": "CWE-674" } ], "product_status": { "known_affected": [ "CSAFPID-1673395", "CSAFPID-1673389", "CSAFPID-1673390", "CSAFPID-1673399", "CSAFPID-1673526", "CSAFPID-1673413", "CSAFPID-1673396", "CSAFPID-1673415", "CSAFPID-1673501", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2024-5971", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-5971.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673395", "CSAFPID-1673389", "CSAFPID-1673390", "CSAFPID-1673399", "CSAFPID-1673526", "CSAFPID-1673413", "CSAFPID-1673396", "CSAFPID-1673415", "CSAFPID-1673501", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] } ], "title": "CVE-2024-5971" }, { "cve": "CVE-2024-6162", "cwe": { "id": "CWE-404", "name": "Improper Resource Shutdown or Release" }, "notes": [ { "category": "other", "text": "Improper Resource Shutdown or Release", "title": "CWE-404" }, { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" } ], "product_status": { "known_affected": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1650752", "CSAFPID-1650751", "CSAFPID-1673526", "CSAFPID-1673399", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-912101", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-764240", "CSAFPID-912547", "CSAFPID-1503582", "CSAFPID-912549", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-764242", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-342804", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-912556", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600", "CSAFPID-204510", "CSAFPID-204569" ] }, "references": [ { "category": "self", "summary": "CVE-2024-6162", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-6162.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1650752", "CSAFPID-1650751", "CSAFPID-1673526", "CSAFPID-1673399", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-912101", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-764240", "CSAFPID-912547", "CSAFPID-1503582", "CSAFPID-912549", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-764242", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-342804", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-912556", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600", "CSAFPID-204510", "CSAFPID-204569" ] } ], "title": "CVE-2024-6162" }, { "cve": "CVE-2024-6387", "cwe": { "id": "CWE-362", "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)" }, "notes": [ { "category": "other", "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)", "title": "CWE-362" }, { "category": "other", "text": "Signal Handler Race Condition", "title": "CWE-364" } ], "product_status": { "known_affected": [ "CSAFPID-1503595", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2024-6387", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-6387.json" } ], "title": "CVE-2024-6387" }, { "cve": "CVE-2024-7254", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "notes": [ { "category": "other", "text": "Improper Input Validation", "title": "CWE-20" }, { "category": "other", "text": "Uncontrolled Recursion", "title": "CWE-674" } ], "product_status": { "known_affected": [ "CSAFPID-912549", "CSAFPID-1672767", "CSAFPID-1503585", "CSAFPID-1673391", "CSAFPID-1673394", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2024-7254", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-7254.json" } ], "title": "CVE-2024-7254" }, { "cve": "CVE-2024-7264", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "other", "text": "Out-of-bounds Read", "title": "CWE-125" }, { "category": "other", "text": "Improper Input Validation", "title": "CWE-20" } ], "product_status": { "known_affected": [ "CSAFPID-1673530", "CSAFPID-1673382", "CSAFPID-1674617", "CSAFPID-1674618", "CSAFPID-1674619", "CSAFPID-1674620", "CSAFPID-1674621", "CSAFPID-1674622", "CSAFPID-1674623", "CSAFPID-1674624", "CSAFPID-1674625", "CSAFPID-1674626", "CSAFPID-1674627", "CSAFPID-1674628" ] }, "references": [ { "category": "self", "summary": "CVE-2024-7264", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-7264.json" } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673530", "CSAFPID-1673382", "CSAFPID-1674617", "CSAFPID-1674618", "CSAFPID-1674619", "CSAFPID-1674620", "CSAFPID-1674621", "CSAFPID-1674622", "CSAFPID-1674623", "CSAFPID-1674624", "CSAFPID-1674625", "CSAFPID-1674626", "CSAFPID-1674627", "CSAFPID-1674628" ] } ], "title": "CVE-2024-7264" }, { "cve": "CVE-2024-22020", "product_status": { "known_affected": [ "CSAFPID-912101", "CSAFPID-1673473", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2024-22020", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-22020.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-912101", "CSAFPID-1673473", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] } ], "title": "CVE-2024-22020" }, { "cve": "CVE-2024-22201", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" } ], "product_status": { "known_affected": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1673475", "CSAFPID-1670429", "CSAFPID-1670430", "CSAFPID-1670431", "CSAFPID-1670432", "CSAFPID-1670433", "CSAFPID-1670434", "CSAFPID-1670435", "CSAFPID-1670436", "CSAFPID-1670437", "CSAFPID-1670438", "CSAFPID-1670439", "CSAFPID-1670440", "CSAFPID-1670441", "CSAFPID-1670442", "CSAFPID-912068", "CSAFPID-912073", "CSAFPID-912076", "CSAFPID-912077", "CSAFPID-912078", "CSAFPID-912079", "CSAFPID-912080", "CSAFPID-912085", "CSAFPID-912101", "CSAFPID-912102", "CSAFPID-912539", "CSAFPID-912540", "CSAFPID-912541", "CSAFPID-912542", "CSAFPID-912543", "CSAFPID-912544", "CSAFPID-912545", "CSAFPID-912546", "CSAFPID-912547", "CSAFPID-912548", "CSAFPID-1674617", "CSAFPID-1674618", "CSAFPID-1674619", "CSAFPID-1674620", "CSAFPID-1674621", "CSAFPID-1674622", "CSAFPID-1674623", "CSAFPID-1674624", "CSAFPID-1674625", "CSAFPID-1674626", "CSAFPID-1674627", "CSAFPID-1674628", "CSAFPID-90016", "CSAFPID-93781", "CSAFPID-220132", "CSAFPID-219776", "CSAFPID-204510", "CSAFPID-204569", "CSAFPID-219826", "CSAFPID-224795", "CSAFPID-912549", "CSAFPID-912550", "CSAFPID-912551", "CSAFPID-912552", "CSAFPID-912553", "CSAFPID-912554", "CSAFPID-912556", "CSAFPID-912557", "CSAFPID-912558", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-342804", "CSAFPID-611387", "CSAFPID-611413", "CSAFPID-614517", "CSAFPID-764237", "CSAFPID-764240", "CSAFPID-764242", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-764739", "CSAFPID-764826", "CSAFPID-765242", "CSAFPID-816348", "CSAFPID-816773", "CSAFPID-816781", "CSAFPID-816782", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-1503582", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600" ] }, "references": [ { "category": "self", "summary": "CVE-2024-22201", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-22201.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1673475", "CSAFPID-1670429", "CSAFPID-1670430", "CSAFPID-1670431", "CSAFPID-1670432", "CSAFPID-1670433", "CSAFPID-1670434", "CSAFPID-1670435", "CSAFPID-1670436", "CSAFPID-1670437", "CSAFPID-1670438", "CSAFPID-1670439", "CSAFPID-1670440", "CSAFPID-1670441", "CSAFPID-1670442", "CSAFPID-912068", "CSAFPID-912073", "CSAFPID-912076", "CSAFPID-912077", "CSAFPID-912078", "CSAFPID-912079", "CSAFPID-912080", "CSAFPID-912085", "CSAFPID-912101", "CSAFPID-912102", "CSAFPID-912539", "CSAFPID-912540", "CSAFPID-912541", "CSAFPID-912542", "CSAFPID-912543", "CSAFPID-912544", "CSAFPID-912545", "CSAFPID-912546", "CSAFPID-912547", "CSAFPID-912548", "CSAFPID-1674617", "CSAFPID-1674618", "CSAFPID-1674619", "CSAFPID-1674620", "CSAFPID-1674621", "CSAFPID-1674622", "CSAFPID-1674623", "CSAFPID-1674624", "CSAFPID-1674625", "CSAFPID-1674626", "CSAFPID-1674627", "CSAFPID-1674628", "CSAFPID-90016", "CSAFPID-93781", "CSAFPID-220132", "CSAFPID-219776", "CSAFPID-204510", "CSAFPID-204569", "CSAFPID-219826", "CSAFPID-224795", "CSAFPID-912549", "CSAFPID-912550", "CSAFPID-912551", "CSAFPID-912552", "CSAFPID-912553", "CSAFPID-912554", "CSAFPID-912556", "CSAFPID-912557", "CSAFPID-912558", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-342804", "CSAFPID-611387", "CSAFPID-611413", "CSAFPID-614517", "CSAFPID-764237", "CSAFPID-764240", "CSAFPID-764242", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-764739", "CSAFPID-764826", "CSAFPID-765242", "CSAFPID-816348", "CSAFPID-816773", "CSAFPID-816781", "CSAFPID-816782", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-1503582", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600" ] } ], "title": "CVE-2024-22201" }, { "cve": "CVE-2024-22257", "cwe": { "id": "CWE-284", "name": "Improper Access Control" }, "notes": [ { "category": "other", "text": "Improper Access Control", "title": "CWE-284" } ], "product_status": { "known_affected": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1673420", "CSAFPID-1673421", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-1670429", "CSAFPID-1670430", "CSAFPID-1670431", "CSAFPID-1670432", "CSAFPID-1670433", "CSAFPID-1670434", "CSAFPID-1670435", "CSAFPID-1670436", "CSAFPID-1670437", "CSAFPID-1670438", "CSAFPID-1670439", "CSAFPID-1670440", "CSAFPID-1670441", "CSAFPID-1670442", "CSAFPID-764237", "CSAFPID-912068", "CSAFPID-912076", "CSAFPID-611387", "CSAFPID-816773", "CSAFPID-912077", "CSAFPID-816348", "CSAFPID-764240", "CSAFPID-614517", "CSAFPID-224795", "CSAFPID-764826", "CSAFPID-90016", "CSAFPID-912078", "CSAFPID-611413", "CSAFPID-764242", "CSAFPID-816781", "CSAFPID-816782", "CSAFPID-93781", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-342804", "CSAFPID-912080", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-219776", "CSAFPID-765242", "CSAFPID-764739", "CSAFPID-204510", "CSAFPID-204569", "CSAFPID-219826", "CSAFPID-912073", "CSAFPID-912085", "CSAFPID-912101", "CSAFPID-912102", "CSAFPID-912539", "CSAFPID-912540", "CSAFPID-912541", "CSAFPID-912542", "CSAFPID-912543", "CSAFPID-912544", "CSAFPID-912545", "CSAFPID-912546", "CSAFPID-912547", "CSAFPID-912548", "CSAFPID-912549", "CSAFPID-912550", "CSAFPID-912551", "CSAFPID-912552", "CSAFPID-912553", "CSAFPID-912554", "CSAFPID-912556", "CSAFPID-912557", "CSAFPID-912558", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-1503582", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600" ] }, "references": [ { "category": "self", "summary": "CVE-2024-22257", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-22257.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.2, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "version": "3.1" }, "products": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1673420", "CSAFPID-1673421", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-1670429", "CSAFPID-1670430", "CSAFPID-1670431", "CSAFPID-1670432", "CSAFPID-1670433", "CSAFPID-1670434", "CSAFPID-1670435", "CSAFPID-1670436", "CSAFPID-1670437", "CSAFPID-1670438", "CSAFPID-1670439", "CSAFPID-1670440", "CSAFPID-1670441", "CSAFPID-1670442", "CSAFPID-764237", "CSAFPID-912068", "CSAFPID-912076", "CSAFPID-611387", "CSAFPID-816773", "CSAFPID-912077", "CSAFPID-816348", "CSAFPID-764240", "CSAFPID-614517", "CSAFPID-224795", "CSAFPID-764826", "CSAFPID-90016", "CSAFPID-912078", "CSAFPID-611413", "CSAFPID-764242", "CSAFPID-816781", "CSAFPID-816782", "CSAFPID-93781", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-342804", "CSAFPID-912080", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-219776", "CSAFPID-765242", "CSAFPID-764739", "CSAFPID-204510", "CSAFPID-204569", "CSAFPID-219826", "CSAFPID-912073", "CSAFPID-912085", "CSAFPID-912101", "CSAFPID-912102", "CSAFPID-912539", "CSAFPID-912540", "CSAFPID-912541", "CSAFPID-912542", "CSAFPID-912543", "CSAFPID-912544", "CSAFPID-912545", "CSAFPID-912546", "CSAFPID-912547", "CSAFPID-912548", "CSAFPID-912549", "CSAFPID-912550", "CSAFPID-912551", "CSAFPID-912552", "CSAFPID-912553", "CSAFPID-912554", "CSAFPID-912556", "CSAFPID-912557", "CSAFPID-912558", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-1503582", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600" ] } ], "title": "CVE-2024-22257" }, { "cve": "CVE-2024-22262", "cwe": { "id": "CWE-601", "name": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)" }, "notes": [ { "category": "other", "text": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)", "title": "CWE-601" } ], "product_status": { "known_affected": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1650752", "CSAFPID-1650820", "CSAFPID-1650751", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-912101", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-764240", "CSAFPID-912547", "CSAFPID-1503582", "CSAFPID-912549", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-764242", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-342804", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-912556", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600", "CSAFPID-204510", "CSAFPID-204569" ] }, "references": [ { "category": "self", "summary": "CVE-2024-22262", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-22262.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1650752", "CSAFPID-1650820", "CSAFPID-1650751", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-912101", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-764240", "CSAFPID-912547", "CSAFPID-1503582", "CSAFPID-912549", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-764242", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-342804", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-912556", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600", "CSAFPID-204510", "CSAFPID-204569" ] } ], "title": "CVE-2024-22262" }, { "cve": "CVE-2024-23672", "cwe": { "id": "CWE-459", "name": "Incomplete Cleanup" }, "notes": [ { "category": "other", "text": "Incomplete Cleanup", "title": "CWE-459" } ], "product_status": { "known_affected": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1650826", "CSAFPID-1650731", "CSAFPID-1673382", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-912068", "CSAFPID-912076", "CSAFPID-611387", "CSAFPID-912539", "CSAFPID-816773", "CSAFPID-912540", "CSAFPID-912541", "CSAFPID-912542", "CSAFPID-912543", "CSAFPID-912101", "CSAFPID-912544", "CSAFPID-912077", "CSAFPID-816348", "CSAFPID-912545", "CSAFPID-764240", "CSAFPID-912546", "CSAFPID-614517", "CSAFPID-912547", "CSAFPID-224795", "CSAFPID-912548", "CSAFPID-912102", "CSAFPID-912549", "CSAFPID-764826", "CSAFPID-90016", "CSAFPID-912078", "CSAFPID-912550", "CSAFPID-912551", "CSAFPID-912552", "CSAFPID-611413", "CSAFPID-764242", "CSAFPID-816781", "CSAFPID-816782", "CSAFPID-912553", "CSAFPID-93781", "CSAFPID-204510", "CSAFPID-204569", "CSAFPID-219776", "CSAFPID-219826", "CSAFPID-220132", "CSAFPID-342804", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-764739", "CSAFPID-765242", "CSAFPID-912073", "CSAFPID-912079", "CSAFPID-912080", "CSAFPID-912554", "CSAFPID-912556", "CSAFPID-912557", "CSAFPID-912558", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-1503582", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600" ] }, "references": [ { "category": "self", "summary": "CVE-2024-23672", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-23672.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1650826", "CSAFPID-1650731", "CSAFPID-1673382", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-912068", "CSAFPID-912076", "CSAFPID-611387", "CSAFPID-912539", "CSAFPID-816773", "CSAFPID-912540", "CSAFPID-912541", "CSAFPID-912542", "CSAFPID-912543", "CSAFPID-912101", "CSAFPID-912544", "CSAFPID-912077", "CSAFPID-816348", "CSAFPID-912545", "CSAFPID-764240", "CSAFPID-912546", "CSAFPID-614517", "CSAFPID-912547", "CSAFPID-224795", "CSAFPID-912548", "CSAFPID-912102", "CSAFPID-912549", "CSAFPID-764826", "CSAFPID-90016", "CSAFPID-912078", "CSAFPID-912550", "CSAFPID-912551", "CSAFPID-912552", "CSAFPID-611413", "CSAFPID-764242", "CSAFPID-816781", "CSAFPID-816782", "CSAFPID-912553", "CSAFPID-93781", "CSAFPID-204510", "CSAFPID-204569", "CSAFPID-219776", "CSAFPID-219826", "CSAFPID-220132", "CSAFPID-342804", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-764739", "CSAFPID-765242", "CSAFPID-912073", "CSAFPID-912079", "CSAFPID-912080", "CSAFPID-912554", "CSAFPID-912556", "CSAFPID-912557", "CSAFPID-912558", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-1503582", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600" ] } ], "title": "CVE-2024-23672" }, { "cve": "CVE-2024-23807", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "other", "text": "Use After Free", "title": "CWE-416" } ], "product_status": { "known_affected": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1650734", "CSAFPID-1650830", "CSAFPID-1650777", "CSAFPID-204622", "CSAFPID-219909", "CSAFPID-1650778", "CSAFPID-41182", "CSAFPID-1674617", "CSAFPID-1674618", "CSAFPID-1674619", "CSAFPID-1674620", "CSAFPID-1674621", "CSAFPID-1674622", "CSAFPID-1674623", "CSAFPID-1674624", "CSAFPID-1674625", "CSAFPID-1674626", "CSAFPID-1674627", "CSAFPID-1674628", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-912101", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-764240", "CSAFPID-912547", "CSAFPID-1503582", "CSAFPID-912549", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-764242", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-342804", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-912556", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600", "CSAFPID-204510", "CSAFPID-204569" ] }, "references": [ { "category": "self", "summary": "CVE-2024-23807", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-23807.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1650734", "CSAFPID-1650830", "CSAFPID-1650777", "CSAFPID-204622", "CSAFPID-219909", "CSAFPID-1650778", "CSAFPID-41182", "CSAFPID-1674617", "CSAFPID-1674618", "CSAFPID-1674619", "CSAFPID-1674620", "CSAFPID-1674621", "CSAFPID-1674622", "CSAFPID-1674623", "CSAFPID-1674624", "CSAFPID-1674625", "CSAFPID-1674626", "CSAFPID-1674627", "CSAFPID-1674628", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-912101", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-764240", "CSAFPID-912547", "CSAFPID-1503582", "CSAFPID-912549", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-764242", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-342804", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-912556", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600", "CSAFPID-204510", "CSAFPID-204569" ] } ], "title": "CVE-2024-23807" }, { "cve": "CVE-2024-24549", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "notes": [ { "category": "other", "text": "Improper Input Validation", "title": "CWE-20" } ], "product_status": { "known_affected": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1650826", "CSAFPID-1673382", "CSAFPID-1650731", "CSAFPID-1674617", "CSAFPID-1674618", "CSAFPID-1674619", "CSAFPID-1674620", "CSAFPID-1674621", "CSAFPID-1674622", "CSAFPID-1674623", "CSAFPID-1674624", "CSAFPID-1674625", "CSAFPID-1674626", "CSAFPID-1674627", "CSAFPID-1674628", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-912068", "CSAFPID-912076", "CSAFPID-611387", "CSAFPID-816773", "CSAFPID-912077", "CSAFPID-816348", "CSAFPID-764240", "CSAFPID-614517", "CSAFPID-224795", "CSAFPID-764826", "CSAFPID-90016", "CSAFPID-912078", "CSAFPID-611413", "CSAFPID-764242", "CSAFPID-816781", "CSAFPID-816782", "CSAFPID-93781", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-342804", "CSAFPID-912080", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-219776", "CSAFPID-765242", "CSAFPID-764739", "CSAFPID-204510", "CSAFPID-204569", "CSAFPID-219826", "CSAFPID-912073", "CSAFPID-912101", "CSAFPID-912102", "CSAFPID-912539", "CSAFPID-912540", "CSAFPID-912541", "CSAFPID-912542", "CSAFPID-912543", "CSAFPID-912544", "CSAFPID-912545", "CSAFPID-912546", "CSAFPID-912547", "CSAFPID-912548", "CSAFPID-912549", "CSAFPID-912550", "CSAFPID-912551", "CSAFPID-912552", "CSAFPID-912553", "CSAFPID-912554", "CSAFPID-912556", "CSAFPID-912557", "CSAFPID-912558", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-1503582", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600" ] }, "references": [ { "category": "self", "summary": "CVE-2024-24549", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-24549.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1650826", "CSAFPID-1673382", "CSAFPID-1650731", "CSAFPID-1674617", "CSAFPID-1674618", "CSAFPID-1674619", "CSAFPID-1674620", "CSAFPID-1674621", "CSAFPID-1674622", "CSAFPID-1674623", "CSAFPID-1674624", "CSAFPID-1674625", "CSAFPID-1674626", "CSAFPID-1674627", "CSAFPID-1674628", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-912068", "CSAFPID-912076", "CSAFPID-611387", "CSAFPID-816773", "CSAFPID-912077", "CSAFPID-816348", "CSAFPID-764240", "CSAFPID-614517", "CSAFPID-224795", "CSAFPID-764826", "CSAFPID-90016", "CSAFPID-912078", "CSAFPID-611413", "CSAFPID-764242", "CSAFPID-816781", "CSAFPID-816782", "CSAFPID-93781", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-342804", "CSAFPID-912080", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-219776", "CSAFPID-765242", "CSAFPID-764739", "CSAFPID-204510", "CSAFPID-204569", "CSAFPID-219826", "CSAFPID-912073", "CSAFPID-912101", "CSAFPID-912102", "CSAFPID-912539", "CSAFPID-912540", "CSAFPID-912541", "CSAFPID-912542", "CSAFPID-912543", "CSAFPID-912544", "CSAFPID-912545", "CSAFPID-912546", "CSAFPID-912547", "CSAFPID-912548", "CSAFPID-912549", "CSAFPID-912550", "CSAFPID-912551", "CSAFPID-912552", "CSAFPID-912553", "CSAFPID-912554", "CSAFPID-912556", "CSAFPID-912557", "CSAFPID-912558", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-1503582", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600" ] } ], "title": "CVE-2024-24549" }, { "cve": "CVE-2024-25062", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "other", "text": "Use After Free", "title": "CWE-416" } ], "product_status": { "known_affected": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1650751", "CSAFPID-1650752", "CSAFPID-1673481", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-1670429", "CSAFPID-1670430", "CSAFPID-1670431", "CSAFPID-1670432", "CSAFPID-1670433", "CSAFPID-1670434", "CSAFPID-1670435", "CSAFPID-1670436", "CSAFPID-1670437", "CSAFPID-1670438", "CSAFPID-1670439", "CSAFPID-1670440", "CSAFPID-1670441", "CSAFPID-1670442", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-912068", "CSAFPID-912076", "CSAFPID-611387", "CSAFPID-912539", "CSAFPID-816773", "CSAFPID-912540", "CSAFPID-912541", "CSAFPID-912542", "CSAFPID-912543", "CSAFPID-912101", "CSAFPID-912544", "CSAFPID-912077", "CSAFPID-816348", "CSAFPID-912545", "CSAFPID-764240", "CSAFPID-912546", "CSAFPID-614517", "CSAFPID-912547", "CSAFPID-224795", "CSAFPID-912548", "CSAFPID-912102", "CSAFPID-912549", "CSAFPID-764826", "CSAFPID-90016", "CSAFPID-912078", "CSAFPID-912550", "CSAFPID-912551", "CSAFPID-912552", "CSAFPID-611413", "CSAFPID-764242", "CSAFPID-816781", "CSAFPID-816782", "CSAFPID-912553", "CSAFPID-93781", "CSAFPID-204510", "CSAFPID-204569", "CSAFPID-219776", "CSAFPID-219826", "CSAFPID-220132", "CSAFPID-342804", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-764739", "CSAFPID-765242", "CSAFPID-912073", "CSAFPID-912079", "CSAFPID-912080", "CSAFPID-912554", "CSAFPID-912556", "CSAFPID-912557", "CSAFPID-912558", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-1503582", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600" ] }, "references": [ { "category": "self", "summary": "CVE-2024-25062", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-25062.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1650751", "CSAFPID-1650752", "CSAFPID-1673481", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-1670429", "CSAFPID-1670430", "CSAFPID-1670431", "CSAFPID-1670432", "CSAFPID-1670433", "CSAFPID-1670434", "CSAFPID-1670435", "CSAFPID-1670436", "CSAFPID-1670437", "CSAFPID-1670438", "CSAFPID-1670439", "CSAFPID-1670440", "CSAFPID-1670441", "CSAFPID-1670442", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-912068", "CSAFPID-912076", "CSAFPID-611387", "CSAFPID-912539", "CSAFPID-816773", "CSAFPID-912540", "CSAFPID-912541", "CSAFPID-912542", "CSAFPID-912543", "CSAFPID-912101", "CSAFPID-912544", "CSAFPID-912077", "CSAFPID-816348", "CSAFPID-912545", "CSAFPID-764240", "CSAFPID-912546", "CSAFPID-614517", "CSAFPID-912547", "CSAFPID-224795", "CSAFPID-912548", "CSAFPID-912102", "CSAFPID-912549", "CSAFPID-764826", "CSAFPID-90016", "CSAFPID-912078", "CSAFPID-912550", "CSAFPID-912551", "CSAFPID-912552", "CSAFPID-611413", "CSAFPID-764242", "CSAFPID-816781", "CSAFPID-816782", "CSAFPID-912553", "CSAFPID-93781", "CSAFPID-204510", "CSAFPID-204569", "CSAFPID-219776", "CSAFPID-219826", "CSAFPID-220132", "CSAFPID-342804", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-764739", "CSAFPID-765242", "CSAFPID-912073", "CSAFPID-912079", "CSAFPID-912080", "CSAFPID-912554", "CSAFPID-912556", "CSAFPID-912557", "CSAFPID-912558", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-1503582", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600" ] } ], "title": "CVE-2024-25062" }, { "cve": "CVE-2024-25638", "cwe": { "id": "CWE-345", "name": "Insufficient Verification of Data Authenticity" }, "notes": [ { "category": "other", "text": "Insufficient Verification of Data Authenticity", "title": "CWE-345" }, { "category": "other", "text": "Acceptance of Extraneous Untrusted Data With Trusted Data", "title": "CWE-349" } ], "product_status": { "known_affected": [ "CSAFPID-912549", "CSAFPID-1672767", "CSAFPID-1503585", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2024-25638", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-25638.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.9, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L", "version": "3.1" }, "products": [ "CSAFPID-912549", "CSAFPID-1672767", "CSAFPID-1503585", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] } ], "title": "CVE-2024-25638" }, { "cve": "CVE-2024-26308", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "other", "text": "Allocation of Resources Without Limits or Throttling", "title": "CWE-770" } ], "product_status": { "known_affected": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1673389", "CSAFPID-1673390", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-1670429", "CSAFPID-1670430", "CSAFPID-1670431", "CSAFPID-1670432", "CSAFPID-1670433", "CSAFPID-1670434", "CSAFPID-1670435", "CSAFPID-1670436", "CSAFPID-1670437", "CSAFPID-1670438", "CSAFPID-1670439", "CSAFPID-1670440", "CSAFPID-1670441", "CSAFPID-1670442", "CSAFPID-90016", "CSAFPID-93781", "CSAFPID-204510", "CSAFPID-204569", "CSAFPID-219776", "CSAFPID-219826", "CSAFPID-220132", "CSAFPID-224795", "CSAFPID-342804", "CSAFPID-611387", "CSAFPID-611413", "CSAFPID-614517", "CSAFPID-764237", "CSAFPID-764240", "CSAFPID-764242", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-764739", "CSAFPID-764826", "CSAFPID-765242", "CSAFPID-816348", "CSAFPID-816773", "CSAFPID-816781", "CSAFPID-816782", "CSAFPID-912068", "CSAFPID-912073", "CSAFPID-912076", "CSAFPID-912077", "CSAFPID-912078", "CSAFPID-912079", "CSAFPID-912080", "CSAFPID-912085", "CSAFPID-912101", "CSAFPID-912102", "CSAFPID-912539", "CSAFPID-912540", "CSAFPID-912541", "CSAFPID-912542", "CSAFPID-912543", "CSAFPID-912544", "CSAFPID-912545", "CSAFPID-912546", "CSAFPID-912547", "CSAFPID-912548", "CSAFPID-912549", "CSAFPID-912550", "CSAFPID-912551", "CSAFPID-912552", "CSAFPID-912553", "CSAFPID-912554", "CSAFPID-912556", "CSAFPID-912557", "CSAFPID-912558", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-1503582", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600" ] }, "references": [ { "category": "self", "summary": "CVE-2024-26308", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-26308.json" } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1673389", "CSAFPID-1673390", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-1670429", "CSAFPID-1670430", "CSAFPID-1670431", "CSAFPID-1670432", "CSAFPID-1670433", "CSAFPID-1670434", "CSAFPID-1670435", "CSAFPID-1670436", "CSAFPID-1670437", "CSAFPID-1670438", "CSAFPID-1670439", "CSAFPID-1670440", "CSAFPID-1670441", "CSAFPID-1670442", "CSAFPID-90016", "CSAFPID-93781", "CSAFPID-204510", "CSAFPID-204569", "CSAFPID-219776", "CSAFPID-219826", "CSAFPID-220132", "CSAFPID-224795", "CSAFPID-342804", "CSAFPID-611387", "CSAFPID-611413", "CSAFPID-614517", "CSAFPID-764237", "CSAFPID-764240", "CSAFPID-764242", "CSAFPID-764247", "CSAFPID-764735", "CSAFPID-764739", "CSAFPID-764826", "CSAFPID-765242", "CSAFPID-816348", "CSAFPID-816773", "CSAFPID-816781", "CSAFPID-816782", "CSAFPID-912068", "CSAFPID-912073", "CSAFPID-912076", "CSAFPID-912077", "CSAFPID-912078", "CSAFPID-912079", "CSAFPID-912080", "CSAFPID-912085", "CSAFPID-912101", "CSAFPID-912102", "CSAFPID-912539", "CSAFPID-912540", "CSAFPID-912541", "CSAFPID-912542", "CSAFPID-912543", "CSAFPID-912544", "CSAFPID-912545", "CSAFPID-912546", "CSAFPID-912547", "CSAFPID-912548", "CSAFPID-912549", "CSAFPID-912550", "CSAFPID-912551", "CSAFPID-912552", "CSAFPID-912553", "CSAFPID-912554", "CSAFPID-912556", "CSAFPID-912557", "CSAFPID-912558", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-1503582", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600" ] } ], "title": "CVE-2024-26308" }, { "cve": "CVE-2024-28182", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" }, { "category": "other", "text": "Improper Resource Shutdown or Release", "title": "CWE-404" }, { "category": "other", "text": "Detection of Error Condition Without Action", "title": "CWE-390" }, { "category": "other", "text": "Allocation of Resources Without Limits or Throttling", "title": "CWE-770" } ], "product_status": { "known_affected": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1673414", "CSAFPID-1673396", "CSAFPID-1673485", "CSAFPID-1673393", "CSAFPID-1673394", "CSAFPID-1673389", "CSAFPID-1672767", "CSAFPID-1673391", "CSAFPID-1673392", "CSAFPID-1673415", "CSAFPID-1673390", "CSAFPID-1673413", "CSAFPID-1673395", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-912101", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-764240", "CSAFPID-912547", "CSAFPID-1503582", "CSAFPID-912549", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-764242", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-342804", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-912556", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600", "CSAFPID-204510", "CSAFPID-204569" ] }, "references": [ { "category": "self", "summary": "CVE-2024-28182", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-28182.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1673414", "CSAFPID-1673396", "CSAFPID-1673485", "CSAFPID-1673393", "CSAFPID-1673394", "CSAFPID-1673389", "CSAFPID-1672767", "CSAFPID-1673391", "CSAFPID-1673392", "CSAFPID-1673415", "CSAFPID-1673390", "CSAFPID-1673413", "CSAFPID-1673395", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-912101", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-764240", "CSAFPID-912547", "CSAFPID-1503582", "CSAFPID-912549", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-764242", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-342804", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-912556", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600", "CSAFPID-204510", "CSAFPID-204569" ] } ], "title": "CVE-2024-28182" }, { "cve": "CVE-2024-28849", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "other", "text": "Exposure of Sensitive Information to an Unauthorized Actor", "title": "CWE-200" } ], "product_status": { "known_affected": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1673414", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-912101", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-764240", "CSAFPID-912547", "CSAFPID-1503582", "CSAFPID-912549", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-764242", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-342804", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-912556", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600", "CSAFPID-204510", "CSAFPID-204569" ] }, "references": [ { "category": "self", "summary": "CVE-2024-28849", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-28849.json" } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1673414", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-912101", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-764240", "CSAFPID-912547", "CSAFPID-1503582", "CSAFPID-912549", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-764242", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-342804", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-912556", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600", "CSAFPID-204510", "CSAFPID-204569" ] } ], "title": "CVE-2024-28849" }, { "cve": "CVE-2024-29025", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "other", "text": "Allocation of Resources Without Limits or Throttling", "title": "CWE-770" } ], "product_status": { "known_affected": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1650752", "CSAFPID-1650751", "CSAFPID-1673494", "CSAFPID-1673420", "CSAFPID-1673421", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-912101", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-764240", "CSAFPID-912547", "CSAFPID-1503582", "CSAFPID-912549", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-764242", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-342804", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-912556", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600", "CSAFPID-204510", "CSAFPID-204569" ] }, "references": [ { "category": "self", "summary": "CVE-2024-29025", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-29025.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.3, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.1" }, "products": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1635310", "CSAFPID-1635311", "CSAFPID-1635312", "CSAFPID-1635313", "CSAFPID-1635314", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635317", "CSAFPID-1635318", "CSAFPID-1635319", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1635322", "CSAFPID-1635323", "CSAFPID-1635324", "CSAFPID-1635325", "CSAFPID-1635326", "CSAFPID-1635327", "CSAFPID-1635328", "CSAFPID-1635329", "CSAFPID-1650752", "CSAFPID-1650751", "CSAFPID-1673494", "CSAFPID-1673420", "CSAFPID-1673421", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1674636", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-912101", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-764240", "CSAFPID-912547", "CSAFPID-1503582", "CSAFPID-912549", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-764242", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-342804", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-912556", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600", "CSAFPID-204510", "CSAFPID-204569" ] } ], "title": "CVE-2024-29025" }, { "cve": "CVE-2024-29133", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "other", "text": "Out-of-bounds Write", "title": "CWE-787" } ], "product_status": { "known_affected": [ "CSAFPID-1650820", "CSAFPID-224790", "CSAFPID-221118", "CSAFPID-1673496", "CSAFPID-1674617", "CSAFPID-1674618", "CSAFPID-1674619", "CSAFPID-1674620", "CSAFPID-1674621", "CSAFPID-1674622", "CSAFPID-1674623", "CSAFPID-1674624", "CSAFPID-1674625", "CSAFPID-1674626", "CSAFPID-1674627", "CSAFPID-1674628", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-912101", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-764240", "CSAFPID-912547", "CSAFPID-1503582", "CSAFPID-912549", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-764242", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-342804", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-912556", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600", "CSAFPID-204510", "CSAFPID-204569" ] }, "references": [ { "category": "self", "summary": "CVE-2024-29133", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-29133.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.3, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.1" }, "products": [ "CSAFPID-1650820", "CSAFPID-224790", "CSAFPID-221118", "CSAFPID-1673496", "CSAFPID-1674617", "CSAFPID-1674618", "CSAFPID-1674619", "CSAFPID-1674620", "CSAFPID-1674621", "CSAFPID-1674622", "CSAFPID-1674623", "CSAFPID-1674624", "CSAFPID-1674625", "CSAFPID-1674626", "CSAFPID-1674627", "CSAFPID-1674628", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-912101", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-764240", "CSAFPID-912547", "CSAFPID-1503582", "CSAFPID-912549", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-764242", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-342804", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-912556", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600", "CSAFPID-204510", "CSAFPID-204569" ] } ], "title": "CVE-2024-29133" }, { "cve": "CVE-2024-29736", "cwe": { "id": "CWE-918", "name": "Server-Side Request Forgery (SSRF)" }, "notes": [ { "category": "other", "text": "Server-Side Request Forgery (SSRF)", "title": "CWE-918" } ], "product_status": { "known_affected": [ "CSAFPID-1673399", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2024-29736", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-29736.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "CSAFPID-1673399", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] } ], "title": "CVE-2024-29736" }, { "cve": "CVE-2024-29857", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" }, { "category": "other", "text": "Improper Input Validation", "title": "CWE-20" }, { "category": "other", "text": "Out-of-bounds Read", "title": "CWE-125" } ], "product_status": { "known_affected": [ "CSAFPID-1673413", "CSAFPID-1673415", "CSAFPID-1673501", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-912101", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-764240", "CSAFPID-912547", "CSAFPID-1503582", "CSAFPID-912549", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-764242", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-342804", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-912556", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600", "CSAFPID-204510", "CSAFPID-204569" ] }, "references": [ { "category": "self", "summary": "CVE-2024-29857", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-29857.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673413", "CSAFPID-1673415", "CSAFPID-1673501", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646", "CSAFPID-220055", "CSAFPID-1503577", "CSAFPID-764237", "CSAFPID-912085", "CSAFPID-1503578", "CSAFPID-1503579", "CSAFPID-1503580", "CSAFPID-912101", "CSAFPID-1503581", "CSAFPID-1503322", "CSAFPID-912069", "CSAFPID-764240", "CSAFPID-912547", "CSAFPID-1503582", "CSAFPID-912549", "CSAFPID-1503583", "CSAFPID-1503584", "CSAFPID-1503585", "CSAFPID-1503586", "CSAFPID-1503587", "CSAFPID-1503588", "CSAFPID-1503316", "CSAFPID-1503317", "CSAFPID-764242", "CSAFPID-1503589", "CSAFPID-1503590", "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1503591", "CSAFPID-816789", "CSAFPID-816790", "CSAFPID-1503592", "CSAFPID-1503593", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-342804", "CSAFPID-1503596", "CSAFPID-1503597", "CSAFPID-1503598", "CSAFPID-816792", "CSAFPID-764247", "CSAFPID-912556", "CSAFPID-764735", "CSAFPID-816793", "CSAFPID-1503599", "CSAFPID-1503600", "CSAFPID-342793", "CSAFPID-816350", "CSAFPID-1261", "CSAFPID-342803", "CSAFPID-816354", "CSAFPID-204563", "CSAFPID-764738", "CSAFPID-816355", "CSAFPID-1503601", "CSAFPID-1503602", "CSAFPID-240600", "CSAFPID-204510", "CSAFPID-204569" ] } ], "title": "CVE-2024-29857" }, { "cve": "CVE-2024-30251", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)" }, "notes": [ { "category": "other", "text": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)", "title": "CWE-835" } ], "product_status": { "known_affected": [ "CSAFPID-912079", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2024-30251", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-30251.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-912079", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] } ], "title": "CVE-2024-30251" }, { "cve": "CVE-2024-31080", "cwe": { "id": "CWE-126", "name": "Buffer Over-read" }, "notes": [ { "category": "other", "text": "Buffer Over-read", "title": "CWE-126" }, { "category": "other", "text": "Heap-based Buffer Overflow", "title": "CWE-122" } ], "product_status": { "known_affected": [ "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2024-31080", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-31080.json" } ], "title": "CVE-2024-31080" }, { "cve": "CVE-2024-31744", "cwe": { "id": "CWE-404", "name": "Improper Resource Shutdown or Release" }, "notes": [ { "category": "other", "text": "Improper Resource Shutdown or Release", "title": "CWE-404" } ], "product_status": { "known_affected": [ "CSAFPID-1673395", "CSAFPID-1673392", "CSAFPID-1673393", "CSAFPID-1673396", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2024-31744", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-31744.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673395", "CSAFPID-1673392", "CSAFPID-1673393", "CSAFPID-1673396", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] } ], "title": "CVE-2024-31744" }, { "cve": "CVE-2024-32760", "cwe": { "id": "CWE-404", "name": "Improper Resource Shutdown or Release" }, "notes": [ { "category": "other", "text": "Improper Resource Shutdown or Release", "title": "CWE-404" }, { "category": "other", "text": "Out-of-bounds Write", "title": "CWE-787" } ], "product_status": { "known_affected": [ "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2024-32760", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-32760.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-220132", "CSAFPID-912079", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] } ], "title": "CVE-2024-32760" }, { "cve": "CVE-2024-33602", "cwe": { "id": "CWE-466", "name": "Return of Pointer Value Outside of Expected Range" }, "notes": [ { "category": "other", "text": "Return of Pointer Value Outside of Expected Range", "title": "CWE-466" }, { "category": "other", "text": "Improper Check or Handling of Exceptional Conditions", "title": "CWE-703" } ], "product_status": { "known_affected": [ "CSAFPID-912549", "CSAFPID-1673396", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-1672762", "CSAFPID-1673395", "CSAFPID-1672764", "CSAFPID-1672767", "CSAFPID-1503585", "CSAFPID-1673494", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2024-33602", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-33602.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.6, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L", "version": "3.1" }, "products": [ "CSAFPID-912549", "CSAFPID-1673396", "CSAFPID-1503594", "CSAFPID-1503595", "CSAFPID-1672762", "CSAFPID-1673395", "CSAFPID-1672764", "CSAFPID-1672767", "CSAFPID-1503585", "CSAFPID-1673494", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] } ], "title": "CVE-2024-33602" }, { "cve": "CVE-2024-34750", "cwe": { "id": "CWE-755", "name": "Improper Handling of Exceptional Conditions" }, "notes": [ { "category": "other", "text": "Improper Handling of Exceptional Conditions", "title": "CWE-755" }, { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" } ], "product_status": { "known_affected": [ "CSAFPID-1673481", "CSAFPID-1503596", "CSAFPID-1673420", "CSAFPID-1673421", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2024-34750", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-34750.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673481", "CSAFPID-1503596", "CSAFPID-1673420", "CSAFPID-1673421", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] } ], "title": "CVE-2024-34750" }, { "cve": "CVE-2024-37371", "cwe": { "id": "CWE-130", "name": "Improper Handling of Length Parameter Inconsistency" }, "notes": [ { "category": "other", "text": "Improper Handling of Length Parameter Inconsistency", "title": "CWE-130" } ], "product_status": { "known_affected": [ "CSAFPID-912549", "CSAFPID-1673413", "CSAFPID-1673414", "CSAFPID-1673396", "CSAFPID-1503590", "CSAFPID-1673393", "CSAFPID-1673395", "CSAFPID-1673399", "CSAFPID-1672767", "CSAFPID-1503585", "CSAFPID-1673392", "CSAFPID-1503589", "CSAFPID-1673415", "CSAFPID-1673389", "CSAFPID-1673390", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2024-37371", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-37371.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-912549", "CSAFPID-1673413", "CSAFPID-1673414", "CSAFPID-1673396", "CSAFPID-1503590", "CSAFPID-1673393", "CSAFPID-1673395", "CSAFPID-1673399", "CSAFPID-1672767", "CSAFPID-1503585", "CSAFPID-1673392", "CSAFPID-1503589", "CSAFPID-1673415", "CSAFPID-1673389", "CSAFPID-1673390", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] } ], "title": "CVE-2024-37371" }, { "cve": "CVE-2024-37891", "cwe": { "id": "CWE-669", "name": "Incorrect Resource Transfer Between Spheres" }, "notes": [ { "category": "other", "text": "Incorrect Resource Transfer Between Spheres", "title": "CWE-669" } ], "product_status": { "known_affected": [ "CSAFPID-1673395", "CSAFPID-1673396", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2024-37891", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-37891.json" } ], "scores": [ { "cvss_v3": { "baseScore": 4.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "CSAFPID-1673395", "CSAFPID-1673396", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] } ], "title": "CVE-2024-37891" }, { "cve": "CVE-2024-38816", "cwe": { "id": "CWE-22", "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)" }, "notes": [ { "category": "other", "text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)", "title": "CWE-22" } ], "product_status": { "known_affected": [ "CSAFPID-1673420", "CSAFPID-1673421", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2024-38816", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38816.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "CSAFPID-1673420", "CSAFPID-1673421", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] } ], "title": "CVE-2024-38816" }, { "cve": "CVE-2024-39689", "cwe": { "id": "CWE-345", "name": "Insufficient Verification of Data Authenticity" }, "notes": [ { "category": "other", "text": "Insufficient Verification of Data Authenticity", "title": "CWE-345" } ], "product_status": { "known_affected": [ "CSAFPID-1673395", "CSAFPID-1673396", "CSAFPID-1673392", "CSAFPID-1673393" ] }, "references": [ { "category": "self", "summary": "CVE-2024-39689", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-39689.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "CSAFPID-1673395", "CSAFPID-1673396", "CSAFPID-1673392", "CSAFPID-1673393" ] } ], "title": "CVE-2024-39689" }, { "cve": "CVE-2024-40898", "cwe": { "id": "CWE-918", "name": "Server-Side Request Forgery (SSRF)" }, "notes": [ { "category": "other", "text": "Server-Side Request Forgery (SSRF)", "title": "CWE-918" } ], "product_status": { "known_affected": [ "CSAFPID-1673516", "CSAFPID-1673411", "CSAFPID-1673412", "CSAFPID-1650731", "CSAFPID-1673382", "CSAFPID-1674617", "CSAFPID-1674618", "CSAFPID-1674619", "CSAFPID-1674620", "CSAFPID-1674621", "CSAFPID-1674622", "CSAFPID-1674623", "CSAFPID-1674624", "CSAFPID-1674625", "CSAFPID-1674626", "CSAFPID-1674627", "CSAFPID-1674628", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2024-40898", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40898.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "CSAFPID-1673516", "CSAFPID-1673411", "CSAFPID-1673412", "CSAFPID-1650731", "CSAFPID-1673382", "CSAFPID-1674617", "CSAFPID-1674618", "CSAFPID-1674619", "CSAFPID-1674620", "CSAFPID-1674621", "CSAFPID-1674622", "CSAFPID-1674623", "CSAFPID-1674624", "CSAFPID-1674625", "CSAFPID-1674626", "CSAFPID-1674627", "CSAFPID-1674628", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] } ], "title": "CVE-2024-40898" }, { "cve": "CVE-2024-41817", "cwe": { "id": "CWE-427", "name": "Uncontrolled Search Path Element" }, "notes": [ { "category": "other", "text": "Uncontrolled Search Path Element", "title": "CWE-427" } ], "product_status": { "known_affected": [ "CSAFPID-1673382", "CSAFPID-1650731", "CSAFPID-1674617", "CSAFPID-1674618", "CSAFPID-1674619", "CSAFPID-1674620", "CSAFPID-1674621", "CSAFPID-1674622", "CSAFPID-1674623", "CSAFPID-1674624", "CSAFPID-1674626", "CSAFPID-1674627", "CSAFPID-1674628", "CSAFPID-1674625" ] }, "references": [ { "category": "self", "summary": "CVE-2024-41817", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-41817.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673382", "CSAFPID-1650731", "CSAFPID-1674617", "CSAFPID-1674618", "CSAFPID-1674619", "CSAFPID-1674620", "CSAFPID-1674621", "CSAFPID-1674622", "CSAFPID-1674623", "CSAFPID-1674624", "CSAFPID-1674626", "CSAFPID-1674627", "CSAFPID-1674628", "CSAFPID-1674625" ] } ], "title": "CVE-2024-41817" }, { "cve": "CVE-2024-43044", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "other", "text": "Exposure of Sensitive Information to an Unauthorized Actor", "title": "CWE-200" }, { "category": "other", "text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)", "title": "CWE-22" }, { "category": "other", "text": "Improper Check for Unusual or Exceptional Conditions", "title": "CWE-754" } ], "product_status": { "known_affected": [ "CSAFPID-1673395", "CSAFPID-1673411", "CSAFPID-1673412", "CSAFPID-1673413", "CSAFPID-1673396", "CSAFPID-1673392", "CSAFPID-1673494", "CSAFPID-1673393", "CSAFPID-1673415", "CSAFPID-1673416", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2024-43044", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-43044.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.0, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673395", "CSAFPID-1673411", "CSAFPID-1673412", "CSAFPID-1673413", "CSAFPID-1673396", "CSAFPID-1673392", "CSAFPID-1673494", "CSAFPID-1673393", "CSAFPID-1673415", "CSAFPID-1673416", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] } ], "title": "CVE-2024-43044" }, { "cve": "CVE-2024-45492", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "other", "text": "Integer Overflow or Wraparound", "title": "CWE-190" } ], "product_status": { "known_affected": [ "CSAFPID-1673382", "CSAFPID-1673399", "CSAFPID-1650731", "CSAFPID-1673517", "CSAFPID-1673396", "CSAFPID-1674617", "CSAFPID-1674618", "CSAFPID-1674619", "CSAFPID-1674620", "CSAFPID-1674621", "CSAFPID-1674622", "CSAFPID-1674623", "CSAFPID-1674624", "CSAFPID-1674625", "CSAFPID-1674626", "CSAFPID-1674627", "CSAFPID-1674628", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] }, "references": [ { "category": "self", "summary": "CVE-2024-45492", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-45492.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673382", "CSAFPID-1673399", "CSAFPID-1650731", "CSAFPID-1673517", "CSAFPID-1673396", "CSAFPID-1674617", "CSAFPID-1674618", "CSAFPID-1674619", "CSAFPID-1674620", "CSAFPID-1674621", "CSAFPID-1674622", "CSAFPID-1674623", "CSAFPID-1674624", "CSAFPID-1674625", "CSAFPID-1674626", "CSAFPID-1674627", "CSAFPID-1674628", "CSAFPID-1635305", "CSAFPID-1635306", "CSAFPID-1635307", "CSAFPID-1635308", "CSAFPID-1635309", "CSAFPID-1670434", "CSAFPID-1674629", "CSAFPID-1635315", "CSAFPID-1635316", "CSAFPID-1635318", "CSAFPID-1674630", "CSAFPID-1674631", "CSAFPID-1674632", "CSAFPID-1674633", "CSAFPID-1674634", "CSAFPID-1674635", "CSAFPID-1635323", "CSAFPID-1674636", "CSAFPID-1635324", "CSAFPID-1674637", "CSAFPID-1674638", "CSAFPID-1674639", "CSAFPID-1674640", "CSAFPID-1674641", "CSAFPID-1674642", "CSAFPID-1635320", "CSAFPID-1635321", "CSAFPID-1674643", "CSAFPID-1674644", "CSAFPID-1674645", "CSAFPID-1674646" ] } ], "title": "CVE-2024-45492" } ] }
ncsc-2024-0411
Vulnerability from csaf_ncscnl
Notes
{ "document": { "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "nl", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." }, { "category": "description", "text": "Oracle heeft kwetsbaarheden verholpen in diverse Database producten en subsystemen, zoals de Core database, Application Express, Autonomous Health Framework, Essbase, GoldenGate, SQL Developer en Secure Backup.", "title": "Feiten" }, { "category": "description", "text": "Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorie\u00ebn schade:\n\n- Denial-of-Service (DoS)\n- Manipuleren van data\n- Toegang tot gevoelige gegevens", "title": "Interpretaties" }, { "category": "description", "text": "Oracle heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.", "title": "Oplossingen" }, { "category": "general", "text": "medium", "title": "Kans" }, { "category": "general", "text": "high", "title": "Schade" }, { "category": "general", "text": "Improper Handling of Length Parameter Inconsistency", "title": "CWE-130" }, { "category": "general", "text": "Observable Timing Discrepancy", "title": "CWE-208" }, { "category": "general", "text": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)", "title": "CWE-776" }, { "category": "general", "text": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)", "title": "CWE-88" }, { "category": "general", "text": "Improper Handling of Exceptional Conditions", "title": "CWE-755" }, { "category": "general", "text": "Excessive Iteration", "title": "CWE-834" }, { "category": "general", "text": "Inefficient Algorithmic Complexity", "title": "CWE-407" }, { "category": "general", "text": "Improper Handling of Case Sensitivity", "title": "CWE-178" }, { "category": "general", "text": "Incorrect Permission Assignment for Critical Resource", "title": "CWE-732" }, { "category": "general", "text": "Double Free", "title": "CWE-415" }, { "category": "general", "text": "Missing Encryption of Sensitive Data", "title": "CWE-311" }, { "category": "general", "text": "Uncontrolled Search Path Element", "title": "CWE-427" }, { "category": "general", "text": "Encoding Error", "title": "CWE-172" }, { "category": "general", "text": "Integer Overflow to Buffer Overflow", "title": "CWE-680" }, { "category": "general", "text": "Untrusted Search Path", "title": "CWE-426" }, { "category": "general", "text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)", "title": "CWE-843" }, { "category": "general", "text": "Improper Encoding or Escaping of Output", "title": "CWE-116" }, { "category": "general", "text": "Insufficient Verification of Data Authenticity", "title": "CWE-345" }, { "category": "general", "text": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)", "title": "CWE-77" }, { "category": "general", "text": "Observable Discrepancy", "title": "CWE-203" }, { "category": "general", "text": "Integer Overflow or Wraparound", "title": "CWE-190" }, { "category": "general", "text": "Files or Directories Accessible to External Parties", "title": "CWE-552" }, { "category": "general", "text": "Authorization Bypass Through User-Controlled Key", "title": "CWE-639" }, { "category": "general", "text": "Out-of-bounds Read", "title": "CWE-125" }, { "category": "general", "text": "Improper Resource Shutdown or Release", "title": "CWE-404" }, { "category": "general", "text": "CWE-275", "title": "CWE-275" }, { "category": "general", "text": "Improper Access Control", "title": "CWE-284" }, { "category": "general", "text": "Improper Restriction of Operations within the Bounds of a Memory Buffer", "title": "CWE-119" }, { "category": "general", "text": "Inefficient Regular Expression Complexity", "title": "CWE-1333" }, { "category": "general", "text": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)", "title": "CWE-1321" }, { "category": "general", "text": "Use After Free", "title": "CWE-416" }, { "category": "general", "text": "Missing Release of Memory after Effective Lifetime", "title": "CWE-401" }, { "category": "general", "text": "NULL Pointer Dereference", "title": "CWE-476" }, { "category": "general", "text": "Improper Certificate Validation", "title": "CWE-295" }, { "category": "general", "text": "Exposure of Resource to Wrong Sphere", "title": "CWE-668" }, { "category": "general", "text": "Inclusion of Functionality from Untrusted Control Sphere", "title": "CWE-829" }, { "category": "general", "text": "Use of a Broken or Risky Cryptographic Algorithm", "title": "CWE-327" }, { "category": "general", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" }, { "category": "general", "text": "Allocation of Resources Without Limits or Throttling", "title": "CWE-770" }, { "category": "general", "text": "Deserialization of Untrusted Data", "title": "CWE-502" }, { "category": "general", "text": "Server-Side Request Forgery (SSRF)", "title": "CWE-918" }, { "category": "general", "text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)", "title": "CWE-78" }, { "category": "general", "text": "Out-of-bounds Write", "title": "CWE-787" }, { "category": "general", "text": "Exposure of Sensitive Information to an Unauthorized Actor", "title": "CWE-200" }, { "category": "general", "text": "Heap-based Buffer Overflow", "title": "CWE-122" }, { "category": "general", "text": "Stack-based Buffer Overflow", "title": "CWE-121" }, { "category": "general", "text": "Incorrect Conversion between Numeric Types", "title": "CWE-681" }, { "category": "general", "text": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)", "title": "CWE-835" }, { "category": "general", "text": "Improper Privilege Management", "title": "CWE-269" }, { "category": "general", "text": "Improper Input Validation", "title": "CWE-20" }, { "category": "general", "text": "Improper Neutralization of Alternate XSS Syntax", "title": "CWE-87" }, { "category": "general", "text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)", "title": "CWE-79" }, { "category": "general", "text": "CWE-18", "title": "CWE-18" }, { "category": "general", "text": "Covert Timing Channel", "title": "CWE-385" }, { "category": "general", "text": "Unchecked Input for Loop Condition", "title": "CWE-606" }, { "category": "general", "text": "Integer Coercion Error", "title": "CWE-192" }, { "category": "general", "text": "Detection of Error Condition Without Action", "title": "CWE-390" }, { "category": "general", "text": "Improperly Controlled Sequential Memory Allocation", "title": "CWE-1325" }, { "category": "general", "text": "Truncation of Security-relevant Information", "title": "CWE-222" }, { "category": "general", "text": "Incorrect Calculation of Buffer Size", "title": "CWE-131" }, { "category": "general", "text": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)", "title": "CWE-59" }, { "category": "general", "text": "Missing Critical Step in Authentication", "title": "CWE-304" } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "Nationaal Cyber Security Centrum", "namespace": "https://www.ncsc.nl/" }, "references": [ { "category": "external", "summary": "Reference - cveprojectv5; hkcert; nvd; oracle; redhat", "url": "https://www.oracle.com/security-alerts/cpuoct2024.html" } ], "title": "Kwetsbaarheden verholpen in Oracle Database producten", "tracking": { "current_release_date": "2024-10-17T13:15:19.595269Z", "id": "NCSC-2024-0411", "initial_release_date": "2024-10-17T13:15:19.595269Z", "revision_history": [ { "date": "2024-10-17T13:15:19.595269Z", "number": "0", "summary": "Initiele versie" } ], "status": "final", "version": "1.0.0" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_name", "name": "database_-_grid", "product": { "name": "database_-_grid", "product_id": "CSAFPID-1673504", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_-_grid:19.3-19.24:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_-_grid", "product": { "name": "database_-_grid", "product_id": "CSAFPID-1673506", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_-_grid:21.3-21.15:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_-_core", "product": { "name": "database_-_core", "product_id": "CSAFPID-1673386", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_-_core:19.3-19.24:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_-_core", "product": { "name": "database_-_core", "product_id": "CSAFPID-1673385", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_-_core:21.3-21.15:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_-_core", "product": { "name": "database_-_core", "product_id": "CSAFPID-1673442", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_-_core:23.4-23.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_-_security", "product": { "name": "database_-_security", "product_id": "CSAFPID-1673507", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_-_security:19.3-19.24:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_-_security", "product": { "name": "database_-_security", "product_id": "CSAFPID-1673509", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_-_security:21.3-21.15:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_-_security", "product": { "name": "database_-_security", "product_id": "CSAFPID-1673508", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_-_security:23.4-23.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "spatial_and_graph_mapviewer", "product": { "name": "spatial_and_graph_mapviewer", "product_id": "CSAFPID-912561", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:spatial_and_graph_mapviewer:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "spatial_and_graph", "product": { "name": "spatial_and_graph", "product_id": "CSAFPID-764250", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:spatial_and_graph:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "spatial_and_graph", "product": { "name": "spatial_and_graph", "product_id": "CSAFPID-1673511", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:spatial_and_graph:19.3-19.24:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "spatial_and_graph", "product": { "name": "spatial_and_graph", "product_id": "CSAFPID-1673512", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:spatial_and_graph:21.3-21.15:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "spatial_and_graph", "product": { "name": "spatial_and_graph", "product_id": "CSAFPID-816800", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:spatial_and_graph:23.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "spatial_and_graph", "product": { "name": "spatial_and_graph", "product_id": "CSAFPID-1673529", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:spatial_and_graph:23.4-23.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "fleet_patching_and_provisioning_-_micronaut", "product": { "name": "fleet_patching_and_provisioning_-_micronaut", "product_id": "CSAFPID-1673492", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:fleet_patching_and_provisioning_-_micronaut:23.4-23.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "fleet_patching_and_provisioning", "product": { "name": "fleet_patching_and_provisioning", "product_id": "CSAFPID-1503603", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:fleet_patching_and_provisioning:23.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_-_xml_database", "product": { "name": "database_-_xml_database", "product_id": "CSAFPID-1673445", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_-_xml_database:19.3-19.24:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_-_xml_database", "product": { "name": "database_-_xml_database", "product_id": "CSAFPID-1673443", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_-_xml_database:21.3-21.15:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_-_xml_database", "product": { "name": "database_-_xml_database", "product_id": "CSAFPID-1673444", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_-_xml_database:23.4-23.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_-_java_vm", "product": { "name": "database_-_java_vm", "product_id": "CSAFPID-1673451", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_-_java_vm:19.3-19.24:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_-_java_vm", "product": { "name": "database_-_java_vm", "product_id": "CSAFPID-1673450", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_-_java_vm:21.3-21.15:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_-_java_vm", "product": { "name": "database_-_java_vm", "product_id": "CSAFPID-1673452", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_-_java_vm:23.4-23.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "autonomous_health_framework", "product": { "name": "autonomous_health_framework", "product_id": "CSAFPID-816798", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:autonomous_health_framework:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "autonomous_health_framework", "product": { "name": "autonomous_health_framework", "product_id": "CSAFPID-816799", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:autonomous_health_framework:23.10:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "autonomous_health_framework", "product": { "name": "autonomous_health_framework", "product_id": "CSAFPID-1673525", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:autonomous_health_framework:prior_to_24.9:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "graalvm_for_jdk", "product": { "name": "graalvm_for_jdk", "product_id": "CSAFPID-912046", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:graalvm_for_jdk:17.0.10:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "graalvm_for_jdk", "product": { "name": "graalvm_for_jdk", "product_id": "CSAFPID-1503299", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:graalvm_for_jdk:17.0.11:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "graalvm_for_jdk", "product": { "name": "graalvm_for_jdk", "product_id": "CSAFPID-816855", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:graalvm_for_jdk:17.0.9:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "graalvm_for_jdk", "product": { "name": "graalvm_for_jdk", "product_id": "CSAFPID-816361", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:graalvm_for_jdk:21.0.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "graalvm_for_jdk", "product": { "name": "graalvm_for_jdk", "product_id": "CSAFPID-912045", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:graalvm_for_jdk:21.0.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "graalvm_for_jdk", "product": { "name": "graalvm_for_jdk", "product_id": "CSAFPID-1503302", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:graalvm_for_jdk:21.0.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "graalvm_for_jdk", "product": { "name": "graalvm_for_jdk", "product_id": "CSAFPID-912044", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:graalvm_for_jdk:22:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "graalvm_for_jdk", "product": { "name": "graalvm_for_jdk", "product_id": "CSAFPID-1503306", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:graalvm_for_jdk:22.0.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "graalvm_for_jdk", "product": { "name": "graalvm_for_jdk", "product_id": "CSAFPID-816852", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:graalvm_for_jdk:graalvm_enterprise_edition20.3.12:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "graalvm_for_jdk", "product": { "name": "graalvm_for_jdk", "product_id": "CSAFPID-912600", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:graalvm_for_jdk:graalvm_enterprise_edition20.3.13:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "graalvm_for_jdk", "product": { "name": "graalvm_for_jdk", "product_id": "CSAFPID-816853", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:graalvm_for_jdk:graalvm_enterprise_edition21.3.8:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "graalvm_for_jdk", "product": { "name": "graalvm_for_jdk", "product_id": "CSAFPID-912601", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:graalvm_for_jdk:graalvm_enterprise_edition21.3.9:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "graalvm_for_jdk", "product": { "name": "graalvm_for_jdk", "product_id": "CSAFPID-816854", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:graalvm_for_jdk:graalvm_enterprise_edition22.3.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sqlcl", "product": { "name": "sqlcl", "product_id": "CSAFPID-816801", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:sqlcl:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sqlcl", "product": { "name": "sqlcl", "product_id": "CSAFPID-1673405", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:sqlcl:23.4-23.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "application_express_administration", "product": { "name": "application_express_administration", "product_id": "CSAFPID-764731", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:application_express_administration:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "application_express_customers_plugin", "product": { "name": "application_express_customers_plugin", "product_id": "CSAFPID-764732", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:application_express_customers_plugin:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "application_express_team_calendar_plugin", "product": { "name": "application_express_team_calendar_plugin", "product_id": "CSAFPID-764733", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:application_express_team_calendar_plugin:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "application_express", "product": { "name": "application_express", "product_id": "CSAFPID-266119", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:application_express:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "application_express", "product": { "name": "application_express", "product_id": "CSAFPID-1673510", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:application_express:23.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "application_express", "product": { "name": "application_express", "product_id": "CSAFPID-1503575", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:application_express:23.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "application_express", "product": { "name": "application_express", "product_id": "CSAFPID-1673188", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:application_express:24.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "autonomous_health_framework", "product": { "name": "autonomous_health_framework", "product_id": "CSAFPID-765238", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:autonomous_health_framework:19c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "autonomous_health_framework", "product": { "name": "autonomous_health_framework", "product_id": "CSAFPID-765239", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:autonomous_health_framework:21c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "blockchain_platform", "product": { "name": "blockchain_platform", "product_id": "CSAFPID-764779", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:blockchain_platform:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "blockchain_platform", "product": { "name": "blockchain_platform", "product_id": "CSAFPID-89587", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:blockchain_platform:21.1.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "essbase", "product": { "name": "essbase", "product_id": "CSAFPID-765259", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:essbase:_security_and_provisioning___21.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "essbase", "product": { "name": "essbase", "product_id": "CSAFPID-187448", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:essbase:21.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "essbase", "product": { "name": "essbase", "product_id": "CSAFPID-94075", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:essbase:21.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "essbase", "product": { "name": "essbase", "product_id": "CSAFPID-220886", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:essbase:21.4.3.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "essbase", "product": { "name": "essbase", "product_id": "CSAFPID-611394", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:essbase:21.5.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "essbase", "product": { "name": "essbase", "product_id": "CSAFPID-816317", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:essbase:21.5.3.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "essbase", "product": { "name": "essbase", "product_id": "CSAFPID-912567", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:essbase:21.5.4.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "essbase", "product": { "name": "essbase", "product_id": "CSAFPID-1503612", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:essbase:21.5.6:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "essbase", "product": { "name": "essbase", "product_id": "CSAFPID-1673479", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:essbase:21.6:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "oracle_essbase", "product": { "name": "oracle_essbase", "product_id": "CSAFPID-1650506", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:oracle_essbase:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "goldengate_big_data_and_application_adapters", "product": { "name": "goldengate_big_data_and_application_adapters", "product_id": "CSAFPID-816845", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "goldengate_big_data_and_application_adapters", "product": { "name": "goldengate_big_data_and_application_adapters", "product_id": "CSAFPID-1650825", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "goldengate_big_data_and_application_adapters", "product": { "name": "goldengate_big_data_and_application_adapters", "product_id": "CSAFPID-1673404", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.9:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "goldengate_big_data_and_application_adapters", "product": { "name": "goldengate_big_data_and_application_adapters", "product_id": "CSAFPID-1650831", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3-21.14.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "goldengate_big_data", "product": { "name": "goldengate_big_data", "product_id": "CSAFPID-764274", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:goldengate_big_data:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "goldengate_stream_analytics", "product": { "name": "goldengate_stream_analytics", "product_id": "CSAFPID-764752", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:goldengate_stream_analytics:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "goldengate_stream_analytics", "product": { "name": "goldengate_stream_analytics", "product_id": "CSAFPID-1673384", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.9:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "goldengate_stream_analytics", "product": { "name": "goldengate_stream_analytics", "product_id": "CSAFPID-220192", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "goldengate_stream_analytics", "product": { "name": "goldengate_stream_analytics", "product_id": "CSAFPID-220193", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.7:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "goldengate_studio", "product": { "name": "goldengate_studio", "product_id": "CSAFPID-816846", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:goldengate_studio:12.2.0.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "goldengate_studio", "product": { "name": "goldengate_studio", "product_id": "CSAFPID-611390", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:goldengate_studio:12.2.1.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "goldengate_studio", "product": { "name": "goldengate_studio", "product_id": "CSAFPID-764803", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:goldengate_studio:fusion_middleware_12.2.1.4.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "goldengate_veridata", "product": { "name": "goldengate_veridata", "product_id": "CSAFPID-764275", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:goldengate_veridata:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "goldengate", "product": { "name": "goldengate", "product_id": "CSAFPID-342816", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:goldengate:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "goldengate", "product": { "name": "goldengate", "product_id": "CSAFPID-1650767", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.23.0.0.240716:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "goldengate", "product": { "name": "goldengate", "product_id": "CSAFPID-485902", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:goldengate:19.1.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "goldengate", "product": { "name": "goldengate", "product_id": "CSAFPID-1503736", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:goldengate:19.23.0.0.240716:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "goldengate", "product": { "name": "goldengate", "product_id": "CSAFPID-219912", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:goldengate:19c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "goldengate", "product": { "name": "goldengate", "product_id": "CSAFPID-1503739", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:goldengate:21.14:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "goldengate", "product": { "name": "goldengate", "product_id": "CSAFPID-1650765", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:goldengate:21.3-21.14:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "goldengate", "product": { "name": "goldengate", "product_id": "CSAFPID-1503738", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:goldengate:21.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "oracle_goldengate_stream_analytics", "product": { "name": "oracle_goldengate_stream_analytics", "product_id": "CSAFPID-1650515", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:oracle_goldengate_stream_analytics:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "management_pack_for__goldengate", "product": { "name": "management_pack_for__goldengate", "product_id": "CSAFPID-764861", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:management_pack_for__goldengate:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "management_pack_for__goldengate", "product": { "name": "management_pack_for__goldengate", "product_id": "CSAFPID-1503640", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:management_pack_for__goldengate:12.2.1.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "oracle_goldengate_studio", "product": { "name": "oracle_goldengate_studio", "product_id": "CSAFPID-1650835", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:oracle_goldengate_studio:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "oracle_goldengate", "product": { "name": "oracle_goldengate", "product_id": "CSAFPID-1650575", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:oracle_goldengate:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "nosql_database", "product": { "name": "nosql_database", "product_id": "CSAFPID-764813", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:nosql_database:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "nosql_database", "product": { "name": "nosql_database", "product_id": "CSAFPID-1503661", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:nosql_database:1.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "nosql_database", "product": { "name": "nosql_database", "product_id": "CSAFPID-1503663", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:nosql_database:1.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "nosql_database", "product": { "name": "nosql_database", "product_id": "CSAFPID-1673497", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "nosql_database", "product": { "name": "nosql_database", "product_id": "CSAFPID-764764", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:nosql_database:19.5.33:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "nosql_database", "product": { "name": "nosql_database", "product_id": "CSAFPID-764765", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:nosql_database:20.3.28:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "nosql_database", "product": { "name": "nosql_database", "product_id": "CSAFPID-1673491", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:nosql_database:20.3.40:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "nosql_database", "product": { "name": "nosql_database", "product_id": "CSAFPID-764766", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:nosql_database:21.2.55:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "nosql_database", "product": { "name": "nosql_database", "product_id": "CSAFPID-1673495", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:nosql_database:21.2.71:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "nosql_database", "product": { "name": "nosql_database", "product_id": "CSAFPID-764767", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:nosql_database:22.3.26:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "nosql_database", "product": { "name": "nosql_database", "product_id": "CSAFPID-1673493", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:nosql_database:22.3.45:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "nosql_database", "product": { "name": "nosql_database", "product_id": "CSAFPID-1673489", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:nosql_database:23.3.33:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "nosql_database", "product": { "name": "nosql_database", "product_id": "CSAFPID-1673488", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:nosql_database:24.1.17:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "nosql_database", "product": { "name": "nosql_database", "product_id": "CSAFPID-1650757", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:nosql_database:prior_to_19.5.42:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "nosql_database", "product": { "name": "nosql_database", "product_id": "CSAFPID-1650758", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:nosql_database:prior_to_20.3.40:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "nosql_database", "product": { "name": "nosql_database", "product_id": "CSAFPID-1650761", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:nosql_database:prior_to_21.2.27:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "nosql_database", "product": { "name": "nosql_database", "product_id": "CSAFPID-1650760", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:nosql_database:prior_to_22.3.46:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "nosql_database", "product": { "name": "nosql_database", "product_id": "CSAFPID-1650759", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:nosql_database:prior_to_23.3.32:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "oracle_nosql_database", "product": { "name": "oracle_nosql_database", "product_id": "CSAFPID-1650584", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:oracle_nosql_database:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "oracle_secure_backup", "product": { "name": "oracle_secure_backup", "product_id": "CSAFPID-1650563", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:oracle_secure_backup:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "secure_backup", "product": { "name": "secure_backup", "product_id": "CSAFPID-667692", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:secure_backup:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "secure_backup", "product": { "name": "secure_backup", "product_id": "CSAFPID-345049", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:secure_backup:18.1.0.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "secure_backup", "product": { "name": "secure_backup", "product_id": "CSAFPID-611417", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:secure_backup:18.1.0.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "secure_backup", "product": { "name": "secure_backup", "product_id": "CSAFPID-1673422", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:secure_backup:19.1.0.0.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "oracle_sql_developer", "product": { "name": "oracle_sql_developer", "product_id": "CSAFPID-1650638", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:oracle_sql_developer:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sql_developer", "product": { "name": "sql_developer", "product_id": "CSAFPID-764822", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:sql_developer:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sql_developer", "product": { "name": "sql_developer", "product_id": "CSAFPID-220643", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:sql_developer:21.4.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sql_developer", "product": { "name": "sql_developer", "product_id": "CSAFPID-816870", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:sql_developer:22.2.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sql_developer", "product": { "name": "sql_developer", "product_id": "CSAFPID-816871", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:sql_developer:23.1.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sql_developer", "product": { "name": "sql_developer", "product_id": "CSAFPID-1673397", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:sql_developer:24.3.0:*:*:*:*:*:*:*" } } } ], "category": "vendor", "name": "oracle" }, { "branches": [ { "category": "product_name", "name": "oracle_application_express", "product": { "name": "oracle_application_express", "product_id": "CSAFPID-1673144", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle_corporation:oracle_application_express:24.1:*:*:*:*:*:*:*" } } } ], "category": "vendor", "name": "oracle_corporation" } ] }, "vulnerabilities": [ { "cve": "CVE-2022-1471", "cwe": { "id": "CWE-502", "name": "Deserialization of Untrusted Data" }, "notes": [ { "category": "other", "text": "Deserialization of Untrusted Data", "title": "CWE-502" }, { "category": "other", "text": "Improper Input Validation", "title": "CWE-20" } ], "product_status": { "known_affected": [ "CSAFPID-764731", "CSAFPID-764732", "CSAFPID-764733", "CSAFPID-764250", "CSAFPID-611394", "CSAFPID-764274", "CSAFPID-764275", "CSAFPID-611390", "CSAFPID-345049", "CSAFPID-611417", "CSAFPID-764764", "CSAFPID-764765", "CSAFPID-764766", "CSAFPID-764767", "CSAFPID-764779", "CSAFPID-94075", "CSAFPID-220886", "CSAFPID-764803", "CSAFPID-764813", "CSAFPID-342816", "CSAFPID-764752", "CSAFPID-764822", "CSAFPID-1650515", "CSAFPID-1650638", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-816317", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-89587", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-816361", "CSAFPID-220643", "CSAFPID-816870", "CSAFPID-816871", "CSAFPID-667692", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-912046", "CSAFPID-912045", "CSAFPID-912044" ] }, "references": [ { "category": "self", "summary": "CVE-2022-1471", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-1471.json" } ], "title": "CVE-2022-1471" }, { "cve": "CVE-2022-34169", "cwe": { "id": "CWE-192", "name": "Integer Coercion Error" }, "notes": [ { "category": "other", "text": "Integer Coercion Error", "title": "CWE-192" }, { "category": "other", "text": "Incorrect Conversion between Numeric Types", "title": "CWE-681" } ], "product_status": { "known_affected": [ "CSAFPID-764779", "CSAFPID-94075", "CSAFPID-342816", "CSAFPID-764803", "CSAFPID-764813", "CSAFPID-764822", "CSAFPID-764752", "CSAFPID-764275", "CSAFPID-764861", "CSAFPID-266119", "CSAFPID-187448", "CSAFPID-219912", "CSAFPID-765238", "CSAFPID-765239", "CSAFPID-765259", "CSAFPID-667692", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-764250", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-816317", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-816361", "CSAFPID-220643", "CSAFPID-816870", "CSAFPID-816871", "CSAFPID-1673384", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-912046", "CSAFPID-912045", "CSAFPID-912044", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663" ] }, "references": [ { "category": "self", "summary": "CVE-2022-34169", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-34169.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "CSAFPID-764779", "CSAFPID-94075", "CSAFPID-342816", "CSAFPID-764803", "CSAFPID-764813", "CSAFPID-764822", "CSAFPID-764752", "CSAFPID-764275", "CSAFPID-764861", "CSAFPID-266119", "CSAFPID-187448", "CSAFPID-219912", "CSAFPID-765238", "CSAFPID-765239", "CSAFPID-765259", "CSAFPID-667692", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-764250", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-816317", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-816361", "CSAFPID-220643", "CSAFPID-816870", "CSAFPID-816871", "CSAFPID-1673384", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-912046", "CSAFPID-912045", "CSAFPID-912044", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663" ] } ], "title": "CVE-2022-34169" }, { "cve": "CVE-2022-36033", "cwe": { "id": "CWE-87", "name": "Improper Neutralization of Alternate XSS Syntax" }, "notes": [ { "category": "other", "text": "Improper Neutralization of Alternate XSS Syntax", "title": "CWE-87" }, { "category": "other", "text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)", "title": "CWE-79" } ], "product_status": { "known_affected": [ "CSAFPID-764250", "CSAFPID-611394", "CSAFPID-764731", "CSAFPID-764732", "CSAFPID-764733", "CSAFPID-764274", "CSAFPID-764275", "CSAFPID-611390", "CSAFPID-345049", "CSAFPID-611417", "CSAFPID-764764", "CSAFPID-764765", "CSAFPID-764766", "CSAFPID-764767", "CSAFPID-764779", "CSAFPID-220886", "CSAFPID-94075", "CSAFPID-764803", "CSAFPID-342816", "CSAFPID-764752", "CSAFPID-764861", "CSAFPID-764813", "CSAFPID-764822", "CSAFPID-266119", "CSAFPID-187448", "CSAFPID-1650515", "CSAFPID-1650835", "CSAFPID-219912", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-816317", "CSAFPID-667692", "CSAFPID-1673384", "CSAFPID-912561", "CSAFPID-1503575", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-816361", "CSAFPID-220643", "CSAFPID-816870", "CSAFPID-816871", "CSAFPID-912567", "CSAFPID-1503603", "CSAFPID-1503612", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-912046", "CSAFPID-912045", "CSAFPID-912044", "CSAFPID-1503640", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663" ] }, "references": [ { "category": "self", "summary": "CVE-2022-36033", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-36033.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-764250", "CSAFPID-611394", "CSAFPID-764731", "CSAFPID-764732", "CSAFPID-764733", "CSAFPID-764274", "CSAFPID-764275", "CSAFPID-611390", "CSAFPID-345049", "CSAFPID-611417", "CSAFPID-764764", "CSAFPID-764765", "CSAFPID-764766", "CSAFPID-764767", "CSAFPID-764779", "CSAFPID-220886", "CSAFPID-94075", "CSAFPID-764803", "CSAFPID-342816", "CSAFPID-764752", "CSAFPID-764861", "CSAFPID-764813", "CSAFPID-764822", "CSAFPID-266119", "CSAFPID-187448", "CSAFPID-1650515", "CSAFPID-1650835", "CSAFPID-219912", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-816317", "CSAFPID-667692", "CSAFPID-1673384", "CSAFPID-912561", "CSAFPID-1503575", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-816361", "CSAFPID-220643", "CSAFPID-816870", "CSAFPID-816871", "CSAFPID-912567", "CSAFPID-1503603", "CSAFPID-1503612", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-912046", "CSAFPID-912045", "CSAFPID-912044", "CSAFPID-1503640", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663" ] } ], "title": "CVE-2022-36033" }, { "cve": "CVE-2022-37454", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "other", "text": "Integer Overflow or Wraparound", "title": "CWE-190" }, { "category": "other", "text": "Integer Overflow to Buffer Overflow", "title": "CWE-680" } ], "product_status": { "known_affected": [ "CSAFPID-764250", "CSAFPID-611394", "CSAFPID-764274", "CSAFPID-764275", "CSAFPID-611390", "CSAFPID-345049", "CSAFPID-611417", "CSAFPID-764731", "CSAFPID-764732", "CSAFPID-764733", "CSAFPID-220886", "CSAFPID-342816", "CSAFPID-764752", "CSAFPID-764764", "CSAFPID-764765", "CSAFPID-764766", "CSAFPID-764767", "CSAFPID-764779", "CSAFPID-94075", "CSAFPID-764803", "CSAFPID-764813", "CSAFPID-764822", "CSAFPID-1650563", "CSAFPID-89587", "CSAFPID-764861" ] }, "references": [ { "category": "self", "summary": "CVE-2022-37454", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-37454.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C", "version": "3.1" }, "products": [ "CSAFPID-764250", "CSAFPID-611394", "CSAFPID-764274", "CSAFPID-764275", "CSAFPID-611390", "CSAFPID-345049", "CSAFPID-611417", "CSAFPID-764731", "CSAFPID-764732", "CSAFPID-764733", "CSAFPID-220886", "CSAFPID-342816", "CSAFPID-764752", "CSAFPID-764764", "CSAFPID-764765", "CSAFPID-764766", "CSAFPID-764767", "CSAFPID-764779", "CSAFPID-94075", "CSAFPID-764803", "CSAFPID-764813", "CSAFPID-764822", "CSAFPID-1650563", "CSAFPID-89587", "CSAFPID-764861" ] } ], "title": "CVE-2022-37454" }, { "cve": "CVE-2022-38136", "product_status": { "known_affected": [ "CSAFPID-1673385", "CSAFPID-1673386" ] }, "references": [ { "category": "self", "summary": "CVE-2022-38136", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-38136.json" } ], "title": "CVE-2022-38136" }, { "cve": "CVE-2022-40196", "product_status": { "known_affected": [ "CSAFPID-1673385", "CSAFPID-1673386" ] }, "references": [ { "category": "self", "summary": "CVE-2022-40196", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-40196.json" } ], "title": "CVE-2022-40196" }, { "cve": "CVE-2022-41342", "product_status": { "known_affected": [ "CSAFPID-1673385", "CSAFPID-1673386" ] }, "references": [ { "category": "self", "summary": "CVE-2022-41342", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-41342.json" } ], "title": "CVE-2022-41342" }, { "cve": "CVE-2022-42919", "cwe": { "id": "CWE-311", "name": "Missing Encryption of Sensitive Data" }, "notes": [ { "category": "other", "text": "Missing Encryption of Sensitive Data", "title": "CWE-311" }, { "category": "other", "text": "Improper Privilege Management", "title": "CWE-269" } ], "product_status": { "known_affected": [ "CSAFPID-764250", "CSAFPID-611394", "CSAFPID-764274", "CSAFPID-764275", "CSAFPID-611390", "CSAFPID-345049", "CSAFPID-611417", "CSAFPID-764731", "CSAFPID-764732", "CSAFPID-764733", "CSAFPID-220886", "CSAFPID-342816", "CSAFPID-764752", "CSAFPID-764764", "CSAFPID-764765", "CSAFPID-764766", "CSAFPID-764767", "CSAFPID-764779", "CSAFPID-94075", "CSAFPID-764803", "CSAFPID-764813", "CSAFPID-764822", "CSAFPID-89587" ] }, "references": [ { "category": "self", "summary": "CVE-2022-42919", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-42919.json" } ], "title": "CVE-2022-42919" }, { "cve": "CVE-2022-45061", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" }, { "category": "other", "text": "Inefficient Algorithmic Complexity", "title": "CWE-407" } ], "product_status": { "known_affected": [ "CSAFPID-345049", "CSAFPID-611417", "CSAFPID-764731", "CSAFPID-764732", "CSAFPID-764733", "CSAFPID-220886", "CSAFPID-764250", "CSAFPID-611394", "CSAFPID-342816", "CSAFPID-764752", "CSAFPID-764764", "CSAFPID-764765", "CSAFPID-764766", "CSAFPID-764767", "CSAFPID-764779", "CSAFPID-94075", "CSAFPID-764274", "CSAFPID-764275", "CSAFPID-611390", "CSAFPID-764803", "CSAFPID-764813", "CSAFPID-764822", "CSAFPID-89587" ] }, "references": [ { "category": "self", "summary": "CVE-2022-45061", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-45061.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-345049", "CSAFPID-611417", "CSAFPID-764731", "CSAFPID-764732", "CSAFPID-764733", "CSAFPID-220886", "CSAFPID-764250", "CSAFPID-611394", "CSAFPID-342816", "CSAFPID-764752", "CSAFPID-764764", "CSAFPID-764765", "CSAFPID-764766", "CSAFPID-764767", "CSAFPID-764779", "CSAFPID-94075", "CSAFPID-764274", "CSAFPID-764275", "CSAFPID-611390", "CSAFPID-764803", "CSAFPID-764813", "CSAFPID-764822", "CSAFPID-89587" ] } ], "title": "CVE-2022-45061" }, { "cve": "CVE-2022-46337", "product_status": { "known_affected": [ "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-1673384", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-764752", "CSAFPID-764275", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-912046", "CSAFPID-912045", "CSAFPID-912044", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-1503612", "CSAFPID-764250", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-816317", "CSAFPID-816845", "CSAFPID-342816", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-1503640", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-816361", "CSAFPID-764813", "CSAFPID-220643", "CSAFPID-816870", "CSAFPID-816871", "CSAFPID-667692" ] }, "references": [ { "category": "self", "summary": "CVE-2022-46337", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-46337.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-1673384", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-764752", "CSAFPID-764275", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-912046", "CSAFPID-912045", "CSAFPID-912044", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-1503612", "CSAFPID-764250", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-816317", "CSAFPID-816845", "CSAFPID-342816", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-1503640", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-816361", "CSAFPID-764813", "CSAFPID-220643", "CSAFPID-816870", "CSAFPID-816871", "CSAFPID-667692" ] } ], "title": "CVE-2022-46337" }, { "cve": "CVE-2023-2976", "cwe": { "id": "CWE-552", "name": "Files or Directories Accessible to External Parties" }, "notes": [ { "category": "other", "text": "Files or Directories Accessible to External Parties", "title": "CWE-552" } ], "product_status": { "known_affected": [ "CSAFPID-1650584", "CSAFPID-1650835", "CSAFPID-1650506", "CSAFPID-1650515", "CSAFPID-816317", "CSAFPID-816845", "CSAFPID-342816", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-816361", "CSAFPID-764813", "CSAFPID-220643", "CSAFPID-816870", "CSAFPID-816871", "CSAFPID-667692", "CSAFPID-89587", "CSAFPID-1673397", "CSAFPID-764274", "CSAFPID-764275", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-816800", "CSAFPID-345049", "CSAFPID-816801", "CSAFPID-611390", "CSAFPID-611394", "CSAFPID-611417", "CSAFPID-764250", "CSAFPID-764752", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-912046", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663" ] }, "references": [ { "category": "self", "summary": "CVE-2023-2976", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-2976.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "CSAFPID-1650584", "CSAFPID-1650835", "CSAFPID-1650506", "CSAFPID-1650515", "CSAFPID-816317", "CSAFPID-816845", "CSAFPID-342816", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-816361", "CSAFPID-764813", "CSAFPID-220643", "CSAFPID-816870", "CSAFPID-816871", "CSAFPID-667692", "CSAFPID-89587", "CSAFPID-1673397", "CSAFPID-764274", "CSAFPID-764275", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-816800", "CSAFPID-345049", "CSAFPID-816801", "CSAFPID-611390", "CSAFPID-611394", "CSAFPID-611417", "CSAFPID-764250", "CSAFPID-764752", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-912046", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663" ] } ], "title": "CVE-2023-2976" }, { "cve": "CVE-2023-4043", "cwe": { "id": "CWE-834", "name": "Excessive Iteration" }, "notes": [ { "category": "other", "text": "Excessive Iteration", "title": "CWE-834" }, { "category": "other", "text": "Improper Input Validation", "title": "CWE-20" } ], "product_status": { "known_affected": [ "CSAFPID-1673405", "CSAFPID-1673397", "CSAFPID-220643", "CSAFPID-342816", "CSAFPID-667692", "CSAFPID-764250", "CSAFPID-764813", "CSAFPID-816317", "CSAFPID-816361", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-816870", "CSAFPID-816871", "CSAFPID-764275", "CSAFPID-764752", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-912046", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663" ] }, "references": [ { "category": "self", "summary": "CVE-2023-4043", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-4043.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673405", "CSAFPID-1673397", "CSAFPID-220643", "CSAFPID-342816", "CSAFPID-667692", "CSAFPID-764250", "CSAFPID-764813", "CSAFPID-816317", "CSAFPID-816361", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-816870", "CSAFPID-816871", "CSAFPID-764275", "CSAFPID-764752", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-912046", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663" ] } ], "title": "CVE-2023-4043" }, { "cve": "CVE-2023-4759", "cwe": { "id": "CWE-59", "name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)" }, "notes": [ { "category": "other", "text": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)", "title": "CWE-59" }, { "category": "other", "text": "Improper Handling of Case Sensitivity", "title": "CWE-178" } ], "product_status": { "known_affected": [ "CSAFPID-1673397", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2023-4759", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-4759.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673397", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] } ], "title": "CVE-2023-4759" }, { "cve": "CVE-2023-4863", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "notes": [ { "category": "other", "text": "Heap-based Buffer Overflow", "title": "CWE-122" }, { "category": "other", "text": "Improper Restriction of Operations within the Bounds of a Memory Buffer", "title": "CWE-119" }, { "category": "other", "text": "Out-of-bounds Write", "title": "CWE-787" } ], "product_status": { "known_affected": [ "CSAFPID-89587", "CSAFPID-816846", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-912046", "CSAFPID-342816", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-764275", "CSAFPID-764752", "CSAFPID-816798", "CSAFPID-816801" ] }, "references": [ { "category": "self", "summary": "CVE-2023-4863", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-4863.json" } ], "title": "CVE-2023-4863" }, { "cve": "CVE-2023-5072", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "other", "text": "Allocation of Resources Without Limits or Throttling", "title": "CWE-770" } ], "product_status": { "known_affected": [ "CSAFPID-1650575", "CSAFPID-1650515", "CSAFPID-1650835", "CSAFPID-89587", "CSAFPID-220643", "CSAFPID-342816", "CSAFPID-667692", "CSAFPID-764250", "CSAFPID-764813", "CSAFPID-816317", "CSAFPID-816361", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-816870", "CSAFPID-816871", "CSAFPID-764275", "CSAFPID-764752", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-912046", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663" ] }, "references": [ { "category": "self", "summary": "CVE-2023-5072", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-5072.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1650575", "CSAFPID-1650515", "CSAFPID-1650835", "CSAFPID-89587", "CSAFPID-220643", "CSAFPID-342816", "CSAFPID-667692", "CSAFPID-764250", "CSAFPID-764813", "CSAFPID-816317", "CSAFPID-816361", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-816870", "CSAFPID-816871", "CSAFPID-764275", "CSAFPID-764752", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-912046", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663" ] } ], "title": "CVE-2023-5072" }, { "cve": "CVE-2023-26031", "cwe": { "id": "CWE-426", "name": "Untrusted Search Path" }, "notes": [ { "category": "other", "text": "Untrusted Search Path", "title": "CWE-426" } ], "product_status": { "known_affected": [ "CSAFPID-1673384", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2023-26031", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-26031.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673384", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] } ], "title": "CVE-2023-26031" }, { "cve": "CVE-2023-26551", "product_status": { "known_affected": [ "CSAFPID-89587" ] }, "references": [ { "category": "self", "summary": "CVE-2023-26551", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-26551.json" } ], "scores": [ { "cvss_v3": { "baseScore": 0.0, "baseSeverity": "NONE", "vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N", "version": "3.1" }, "products": [ "CSAFPID-89587" ] } ], "title": "CVE-2023-26551" }, { "cve": "CVE-2023-26552", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "other", "text": "Out-of-bounds Write", "title": "CWE-787" } ], "product_status": { "known_affected": [ "CSAFPID-89587" ] }, "references": [ { "category": "self", "summary": "CVE-2023-26552", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-26552.json" } ], "scores": [ { "cvss_v3": { "baseScore": 5.6, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.1" }, "products": [ "CSAFPID-89587" ] } ], "title": "CVE-2023-26552" }, { "cve": "CVE-2023-26553", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "other", "text": "Out-of-bounds Write", "title": "CWE-787" } ], "product_status": { "known_affected": [ "CSAFPID-89587" ] }, "references": [ { "category": "self", "summary": "CVE-2023-26553", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-26553.json" } ], "scores": [ { "cvss_v3": { "baseScore": 5.6, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.1" }, "products": [ "CSAFPID-89587" ] } ], "title": "CVE-2023-26553" }, { "cve": "CVE-2023-26554", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "other", "text": "Out-of-bounds Write", "title": "CWE-787" } ], "product_status": { "known_affected": [ "CSAFPID-89587" ] }, "references": [ { "category": "self", "summary": "CVE-2023-26554", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-26554.json" } ], "scores": [ { "cvss_v3": { "baseScore": 5.6, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.1" }, "products": [ "CSAFPID-89587" ] } ], "title": "CVE-2023-26554" }, { "cve": "CVE-2023-26555", "product_status": { "known_affected": [ "CSAFPID-89587" ] }, "references": [ { "category": "self", "summary": "CVE-2023-26555", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-26555.json" } ], "scores": [ { "cvss_v3": { "baseScore": 6.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-89587" ] } ], "title": "CVE-2023-26555" }, { "cve": "CVE-2023-28484", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "notes": [ { "category": "other", "text": "Improper Input Validation", "title": "CWE-20" }, { "category": "other", "text": "NULL Pointer Dereference", "title": "CWE-476" } ], "product_status": { "known_affected": [ "CSAFPID-764250", "CSAFPID-764731", "CSAFPID-764732", "CSAFPID-764733", "CSAFPID-220886", "CSAFPID-816317", "CSAFPID-764813", "CSAFPID-89587", "CSAFPID-342816", "CSAFPID-345049", "CSAFPID-764752", "CSAFPID-764764", "CSAFPID-764765", "CSAFPID-764766", "CSAFPID-764767", "CSAFPID-611390", "CSAFPID-611394", "CSAFPID-611417", "CSAFPID-764274", "CSAFPID-764275", "CSAFPID-220643", "CSAFPID-667692", "CSAFPID-816361", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-816870", "CSAFPID-816871" ] }, "references": [ { "category": "self", "summary": "CVE-2023-28484", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-28484.json" } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", "version": "3.1" }, "products": [ "CSAFPID-764250", "CSAFPID-764731", "CSAFPID-764732", "CSAFPID-764733", "CSAFPID-220886", "CSAFPID-816317", "CSAFPID-764813", "CSAFPID-89587", "CSAFPID-342816", "CSAFPID-345049", "CSAFPID-764752", "CSAFPID-764764", "CSAFPID-764765", "CSAFPID-764766", "CSAFPID-764767", "CSAFPID-611390", "CSAFPID-611394", "CSAFPID-611417", "CSAFPID-764274", "CSAFPID-764275", "CSAFPID-220643", "CSAFPID-667692", "CSAFPID-816361", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-816870", "CSAFPID-816871" ] } ], "title": "CVE-2023-28484" }, { "cve": "CVE-2023-29469", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "notes": [ { "category": "other", "text": "Improper Input Validation", "title": "CWE-20" }, { "category": "other", "text": "Double Free", "title": "CWE-415" } ], "product_status": { "known_affected": [ "CSAFPID-611417", "CSAFPID-764731", "CSAFPID-764732", "CSAFPID-764733", "CSAFPID-816317", "CSAFPID-89587", "CSAFPID-220886", "CSAFPID-342816", "CSAFPID-345049", "CSAFPID-764752", "CSAFPID-611390", "CSAFPID-611394", "CSAFPID-764764", "CSAFPID-764765", "CSAFPID-764766", "CSAFPID-764767", "CSAFPID-764274", "CSAFPID-764275", "CSAFPID-220643", "CSAFPID-667692", "CSAFPID-764813", "CSAFPID-816361", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-764250", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-816870", "CSAFPID-816871" ] }, "references": [ { "category": "self", "summary": "CVE-2023-29469", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-29469.json" } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", "version": "3.1" }, "products": [ "CSAFPID-611417", "CSAFPID-764731", "CSAFPID-764732", "CSAFPID-764733", "CSAFPID-816317", "CSAFPID-89587", "CSAFPID-220886", "CSAFPID-342816", "CSAFPID-345049", "CSAFPID-764752", "CSAFPID-611390", "CSAFPID-611394", "CSAFPID-764764", "CSAFPID-764765", "CSAFPID-764766", "CSAFPID-764767", "CSAFPID-764274", "CSAFPID-764275", "CSAFPID-220643", "CSAFPID-667692", "CSAFPID-764813", "CSAFPID-816361", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-764250", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-816870", "CSAFPID-816871" ] } ], "title": "CVE-2023-29469" }, { "cve": "CVE-2023-33201", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "other", "text": "Exposure of Sensitive Information to an Unauthorized Actor", "title": "CWE-200" } ], "product_status": { "known_affected": [ "CSAFPID-764250", "CSAFPID-611394", "CSAFPID-1650584", "CSAFPID-1673397", "CSAFPID-912561", "CSAFPID-345049", "CSAFPID-611390", "CSAFPID-611417", "CSAFPID-764274", "CSAFPID-764275", "CSAFPID-220643", "CSAFPID-342816", "CSAFPID-667692", "CSAFPID-764813", "CSAFPID-816317", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816361", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-764752", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-912046", "CSAFPID-816855", "CSAFPID-816870", "CSAFPID-816871", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663" ] }, "references": [ { "category": "self", "summary": "CVE-2023-33201", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-33201.json" } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "CSAFPID-764250", "CSAFPID-611394", "CSAFPID-1650584", "CSAFPID-1673397", "CSAFPID-912561", "CSAFPID-345049", "CSAFPID-611390", "CSAFPID-611417", "CSAFPID-764274", "CSAFPID-764275", "CSAFPID-220643", "CSAFPID-342816", "CSAFPID-667692", "CSAFPID-764813", "CSAFPID-816317", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816361", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-764752", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-912046", "CSAFPID-816855", "CSAFPID-816870", "CSAFPID-816871", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663" ] } ], "title": "CVE-2023-33201" }, { "cve": "CVE-2023-37920", "cwe": { "id": "CWE-295", "name": "Improper Certificate Validation" }, "notes": [ { "category": "other", "text": "Improper Certificate Validation", "title": "CWE-295" }, { "category": "other", "text": "Insufficient Verification of Data Authenticity", "title": "CWE-345" } ], "product_status": { "known_affected": [ "CSAFPID-89587", "CSAFPID-1503575", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612" ] }, "references": [ { "category": "self", "summary": "CVE-2023-37920", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-37920.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-89587", "CSAFPID-1503575", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612" ] } ], "title": "CVE-2023-37920" }, { "cve": "CVE-2023-39410", "cwe": { "id": "CWE-502", "name": "Deserialization of Untrusted Data" }, "notes": [ { "category": "other", "text": "Deserialization of Untrusted Data", "title": "CWE-502" }, { "category": "other", "text": "Improper Input Validation", "title": "CWE-20" } ], "product_status": { "known_affected": [ "CSAFPID-1673404", "CSAFPID-1673384", "CSAFPID-220643", "CSAFPID-342816", "CSAFPID-667692", "CSAFPID-764250", "CSAFPID-764813", "CSAFPID-816317", "CSAFPID-816361", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-816870", "CSAFPID-816871" ] }, "references": [ { "category": "self", "summary": "CVE-2023-39410", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-39410.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673404", "CSAFPID-1673384", "CSAFPID-220643", "CSAFPID-342816", "CSAFPID-667692", "CSAFPID-764250", "CSAFPID-764813", "CSAFPID-816317", "CSAFPID-816361", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-816870", "CSAFPID-816871" ] } ], "title": "CVE-2023-39410" }, { "cve": "CVE-2023-44487", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" } ], "product_status": { "known_affected": [ "CSAFPID-1650757", "CSAFPID-1650758", "CSAFPID-1650759", "CSAFPID-1650760", "CSAFPID-1650761", "CSAFPID-89587", "CSAFPID-816361", "CSAFPID-220643", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-816870", "CSAFPID-816871", "CSAFPID-667692", "CSAFPID-764250", "CSAFPID-764813", "CSAFPID-816317", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-764275", "CSAFPID-764752", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-912046", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-1503603", "CSAFPID-1503575", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663" ] }, "references": [ { "category": "self", "summary": "CVE-2023-44487", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-44487.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1650757", "CSAFPID-1650758", "CSAFPID-1650759", "CSAFPID-1650760", "CSAFPID-1650761", "CSAFPID-89587", "CSAFPID-816361", "CSAFPID-220643", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-816870", "CSAFPID-816871", "CSAFPID-667692", "CSAFPID-764250", "CSAFPID-764813", "CSAFPID-816317", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-764275", "CSAFPID-764752", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-912046", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-1503603", "CSAFPID-1503575", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663" ] } ], "title": "CVE-2023-44487" }, { "cve": "CVE-2023-44981", "cwe": { "id": "CWE-639", "name": "Authorization Bypass Through User-Controlled Key" }, "notes": [ { "category": "other", "text": "Authorization Bypass Through User-Controlled Key", "title": "CWE-639" } ], "product_status": { "known_affected": [ "CSAFPID-1650515", "CSAFPID-89587", "CSAFPID-220643", "CSAFPID-342816", "CSAFPID-667692", "CSAFPID-764250", "CSAFPID-764813", "CSAFPID-816317", "CSAFPID-816361", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-816870", "CSAFPID-816871", "CSAFPID-764275", "CSAFPID-764752", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-912046", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601" ] }, "references": [ { "category": "self", "summary": "CVE-2023-44981", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-44981.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "CSAFPID-1650515", "CSAFPID-89587", "CSAFPID-220643", "CSAFPID-342816", "CSAFPID-667692", "CSAFPID-764250", "CSAFPID-764813", "CSAFPID-816317", "CSAFPID-816361", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-816870", "CSAFPID-816871", "CSAFPID-764275", "CSAFPID-764752", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-912046", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601" ] } ], "title": "CVE-2023-44981" }, { "cve": "CVE-2023-45288", "cwe": { "id": "CWE-404", "name": "Improper Resource Shutdown or Release" }, "notes": [ { "category": "other", "text": "Improper Resource Shutdown or Release", "title": "CWE-404" }, { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" } ], "product_status": { "known_affected": [ "CSAFPID-89587" ] }, "references": [ { "category": "self", "summary": "CVE-2023-45288", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-45288.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-89587" ] } ], "title": "CVE-2023-45288" }, { "cve": "CVE-2023-48795", "cwe": { "id": "CWE-222", "name": "Truncation of Security-relevant Information" }, "notes": [ { "category": "other", "text": "Truncation of Security-relevant Information", "title": "CWE-222" } ], "product_status": { "known_affected": [ "CSAFPID-1650765", "CSAFPID-1650757", "CSAFPID-1650758", "CSAFPID-1650767", "CSAFPID-1650759", "CSAFPID-1650760", "CSAFPID-1650761", "CSAFPID-89587", "CSAFPID-220643", "CSAFPID-342816", "CSAFPID-667692", "CSAFPID-764250", "CSAFPID-764813", "CSAFPID-816317", "CSAFPID-816361", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-816870", "CSAFPID-816871", "CSAFPID-764275", "CSAFPID-764752", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-912046", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-1503603", "CSAFPID-1503612", "CSAFPID-1503575", "CSAFPID-1503640", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663" ] }, "references": [ { "category": "self", "summary": "CVE-2023-48795", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-48795.json" } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "CSAFPID-1650765", "CSAFPID-1650757", "CSAFPID-1650758", "CSAFPID-1650767", "CSAFPID-1650759", "CSAFPID-1650760", "CSAFPID-1650761", "CSAFPID-89587", "CSAFPID-220643", "CSAFPID-342816", "CSAFPID-667692", "CSAFPID-764250", "CSAFPID-764813", "CSAFPID-816317", "CSAFPID-816361", "CSAFPID-816798", "CSAFPID-816799", "CSAFPID-816800", "CSAFPID-816801", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-816852", "CSAFPID-816853", "CSAFPID-816854", "CSAFPID-816855", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-816870", "CSAFPID-816871", "CSAFPID-764275", "CSAFPID-764752", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-912046", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-1503603", "CSAFPID-1503612", "CSAFPID-1503575", "CSAFPID-1503640", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663" ] } ], "title": "CVE-2023-48795" }, { "cve": "CVE-2023-49083", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "other", "text": "NULL Pointer Dereference", "title": "CWE-476" } ], "product_status": { "known_affected": [ "CSAFPID-89587", "CSAFPID-342816", "CSAFPID-764275", "CSAFPID-764752", "CSAFPID-816798", "CSAFPID-816801", "CSAFPID-816846", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-912046", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-816845", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2023-49083", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-49083.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-89587", "CSAFPID-342816", "CSAFPID-764275", "CSAFPID-764752", "CSAFPID-816798", "CSAFPID-816801", "CSAFPID-816846", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-912046", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-816845", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] } ], "title": "CVE-2023-49083" }, { "cve": "CVE-2023-51384", "cwe": { "id": "CWE-304", "name": "Missing Critical Step in Authentication" }, "notes": [ { "category": "other", "text": "Missing Critical Step in Authentication", "title": "CWE-304" }, { "category": "other", "text": "Improper Input Validation", "title": "CWE-20" } ], "product_status": { "known_affected": [ "CSAFPID-89587" ] }, "references": [ { "category": "self", "summary": "CVE-2023-51384", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-51384.json" } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "CSAFPID-89587" ] } ], "title": "CVE-2023-51384" }, { "cve": "CVE-2023-51385", "cwe": { "id": "CWE-78", "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)" }, "notes": [ { "category": "other", "text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)", "title": "CWE-78" } ], "product_status": { "known_affected": [ "CSAFPID-89587" ] }, "references": [ { "category": "self", "summary": "CVE-2023-51385", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-51385.json" } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "version": "3.1" }, "products": [ "CSAFPID-89587" ] } ], "title": "CVE-2023-51385" }, { "cve": "CVE-2023-52425", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" } ], "product_status": { "known_affected": [ "CSAFPID-89587", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2023-52425", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-52425.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-89587", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] } ], "title": "CVE-2023-52425" }, { "cve": "CVE-2023-52426", "cwe": { "id": "CWE-776", "name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)" }, "notes": [ { "category": "other", "text": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)", "title": "CWE-776" } ], "product_status": { "known_affected": [ "CSAFPID-89587", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2023-52426", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-52426.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-89587", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] } ], "title": "CVE-2023-52426" }, { "cve": "CVE-2024-1874", "cwe": { "id": "CWE-77", "name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)" }, "notes": [ { "category": "other", "text": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)", "title": "CWE-77" }, { "category": "other", "text": "Improper Encoding or Escaping of Output", "title": "CWE-116" } ], "product_status": { "known_affected": [ "CSAFPID-1673422", "CSAFPID-345049", "CSAFPID-611417" ] }, "references": [ { "category": "self", "summary": "CVE-2024-1874", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-1874.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673422", "CSAFPID-345049", "CSAFPID-611417" ] } ], "title": "CVE-2024-1874" }, { "cve": "CVE-2024-2408", "cwe": { "id": "CWE-203", "name": "Observable Discrepancy" }, "notes": [ { "category": "other", "text": "Observable Discrepancy", "title": "CWE-203" }, { "category": "other", "text": "Observable Timing Discrepancy", "title": "CWE-208" }, { "category": "other", "text": "Use of a Broken or Risky Cryptographic Algorithm", "title": "CWE-327" }, { "category": "other", "text": "Covert Timing Channel", "title": "CWE-385" } ], "product_status": { "known_affected": [ "CSAFPID-1673422", "CSAFPID-345049", "CSAFPID-611417" ] }, "references": [ { "category": "self", "summary": "CVE-2024-2408", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-2408.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673422", "CSAFPID-345049", "CSAFPID-611417" ] } ], "title": "CVE-2024-2408" }, { "cve": "CVE-2024-2511", "cwe": { "id": "CWE-404", "name": "Improper Resource Shutdown or Release" }, "notes": [ { "category": "other", "text": "Improper Resource Shutdown or Release", "title": "CWE-404" }, { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" }, { "category": "other", "text": "Improperly Controlled Sequential Memory Allocation", "title": "CWE-1325" } ], "product_status": { "known_affected": [ "CSAFPID-345049", "CSAFPID-611417", "CSAFPID-1673479", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2024-2511", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-2511.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-345049", "CSAFPID-611417", "CSAFPID-1673479", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] } ], "title": "CVE-2024-2511" }, { "cve": "CVE-2024-4577", "cwe": { "id": "CWE-88", "name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)" }, "notes": [ { "category": "other", "text": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)", "title": "CWE-88" }, { "category": "other", "text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)", "title": "CWE-78" } ], "product_status": { "known_affected": [ "CSAFPID-1673422", "CSAFPID-345049", "CSAFPID-611417" ] }, "references": [ { "category": "self", "summary": "CVE-2024-4577", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-4577.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673422", "CSAFPID-345049", "CSAFPID-611417" ] } ], "title": "CVE-2024-4577" }, { "cve": "CVE-2024-4603", "cwe": { "id": "CWE-606", "name": "Unchecked Input for Loop Condition" }, "notes": [ { "category": "other", "text": "Unchecked Input for Loop Condition", "title": "CWE-606" } ], "product_status": { "known_affected": [ "CSAFPID-345049", "CSAFPID-611417", "CSAFPID-1673479", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2024-4603", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-4603.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-345049", "CSAFPID-611417", "CSAFPID-1673479", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] } ], "title": "CVE-2024-4603" }, { "cve": "CVE-2024-4741", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "other", "text": "Use After Free", "title": "CWE-416" } ], "product_status": { "known_affected": [ "CSAFPID-345049", "CSAFPID-611417", "CSAFPID-1673479", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2024-4741", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-4741.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-345049", "CSAFPID-611417", "CSAFPID-1673479", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] } ], "title": "CVE-2024-4741" }, { "cve": "CVE-2024-5458", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "notes": [ { "category": "other", "text": "Improper Input Validation", "title": "CWE-20" } ], "product_status": { "known_affected": [ "CSAFPID-1673422", "CSAFPID-345049", "CSAFPID-611417" ] }, "references": [ { "category": "self", "summary": "CVE-2024-5458", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-5458.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673422", "CSAFPID-345049", "CSAFPID-611417" ] } ], "title": "CVE-2024-5458" }, { "cve": "CVE-2024-5535", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "other", "text": "Exposure of Sensitive Information to an Unauthorized Actor", "title": "CWE-200" }, { "category": "other", "text": "Improper Restriction of Operations within the Bounds of a Memory Buffer", "title": "CWE-119" } ], "product_status": { "known_affected": [ "CSAFPID-1673508", "CSAFPID-1673525" ] }, "references": [ { "category": "self", "summary": "CVE-2024-5535", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-5535.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673508", "CSAFPID-1673525" ] } ], "title": "CVE-2024-5535" }, { "cve": "CVE-2024-5585", "cwe": { "id": "CWE-116", "name": "Improper Encoding or Escaping of Output" }, "notes": [ { "category": "other", "text": "Improper Encoding or Escaping of Output", "title": "CWE-116" }, { "category": "other", "text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)", "title": "CWE-78" }, { "category": "other", "text": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)", "title": "CWE-88" } ], "product_status": { "known_affected": [ "CSAFPID-1673422", "CSAFPID-345049", "CSAFPID-611417" ] }, "references": [ { "category": "self", "summary": "CVE-2024-5585", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-5585.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673422", "CSAFPID-345049", "CSAFPID-611417" ] } ], "title": "CVE-2024-5585" }, { "cve": "CVE-2024-6119", "cwe": { "id": "CWE-843", "name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)" }, "notes": [ { "category": "other", "text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)", "title": "CWE-843" } ], "product_status": { "known_affected": [ "CSAFPID-1673508", "CSAFPID-1673525" ] }, "references": [ { "category": "self", "summary": "CVE-2024-6119", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-6119.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673508", "CSAFPID-1673525" ] } ], "title": "CVE-2024-6119" }, { "cve": "CVE-2024-6232", "cwe": { "id": "CWE-1333", "name": "Inefficient Regular Expression Complexity" }, "notes": [ { "category": "other", "text": "Inefficient Regular Expression Complexity", "title": "CWE-1333" } ], "references": [ { "category": "self", "summary": "CVE-2024-6232", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-6232.json" } ], "title": "CVE-2024-6232" }, { "cve": "CVE-2024-7264", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "other", "text": "Out-of-bounds Read", "title": "CWE-125" }, { "category": "other", "text": "Improper Input Validation", "title": "CWE-20" } ], "product_status": { "known_affected": [ "CSAFPID-1673529", "CSAFPID-1673479", "CSAFPID-1673511", "CSAFPID-1673512" ] }, "references": [ { "category": "self", "summary": "CVE-2024-7264", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-7264.json" } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673529", "CSAFPID-1673479", "CSAFPID-1673511", "CSAFPID-1673512" ] } ], "title": "CVE-2024-7264" }, { "cve": "CVE-2024-7592", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" } ], "references": [ { "category": "self", "summary": "CVE-2024-7592", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-7592.json" } ], "title": "CVE-2024-7592" }, { "cve": "CVE-2024-21131", "product_status": { "known_affected": [ "CSAFPID-1503299", "CSAFPID-1503306", "CSAFPID-1503302", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2024-21131", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-21131.json" } ], "title": "CVE-2024-21131" }, { "cve": "CVE-2024-21138", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)" }, "notes": [ { "category": "other", "text": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)", "title": "CWE-835" } ], "product_status": { "known_affected": [ "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2024-21138", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-21138.json" } ], "title": "CVE-2024-21138" }, { "cve": "CVE-2024-21140", "product_status": { "known_affected": [ "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503299", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2024-21140", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-21140.json" } ], "title": "CVE-2024-21140" }, { "cve": "CVE-2024-21144", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "notes": [ { "category": "other", "text": "Improper Input Validation", "title": "CWE-20" }, { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" } ], "product_status": { "known_affected": [ "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2024-21144", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-21144.json" } ], "title": "CVE-2024-21144" }, { "cve": "CVE-2024-21145", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "other", "text": "Out-of-bounds Write", "title": "CWE-787" } ], "product_status": { "known_affected": [ "CSAFPID-1503299", "CSAFPID-1503306", "CSAFPID-1503302", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2024-21145", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-21145.json" } ], "title": "CVE-2024-21145" }, { "cve": "CVE-2024-21147", "product_status": { "known_affected": [ "CSAFPID-1503306", "CSAFPID-1503302", "CSAFPID-1503299", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2024-21147", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-21147.json" } ], "title": "CVE-2024-21147" }, { "cve": "CVE-2024-21233", "product_status": { "known_affected": [ "CSAFPID-1673385", "CSAFPID-1673442", "CSAFPID-1673386" ] }, "references": [ { "category": "self", "summary": "CVE-2024-21233", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-21233.json" } ], "scores": [ { "cvss_v3": { "baseScore": 4.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "version": "3.1" }, "products": [ "CSAFPID-1673385", "CSAFPID-1673442", "CSAFPID-1673386" ] } ], "title": "CVE-2024-21233" }, { "cve": "CVE-2024-21242", "product_status": { "known_affected": [ "CSAFPID-1673443", "CSAFPID-1673444", "CSAFPID-1673445" ] }, "references": [ { "category": "self", "summary": "CVE-2024-21242", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-21242.json" } ], "scores": [ { "cvss_v3": { "baseScore": 3.5, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "CSAFPID-1673443", "CSAFPID-1673444", "CSAFPID-1673445" ] } ], "title": "CVE-2024-21242" }, { "cve": "CVE-2024-21251", "product_status": { "known_affected": [ "CSAFPID-1673450", "CSAFPID-1673451", "CSAFPID-1673452" ] }, "references": [ { "category": "self", "summary": "CVE-2024-21251", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-21251.json" } ], "scores": [ { "cvss_v3": { "baseScore": 3.1, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N", "version": "3.1" }, "products": [ "CSAFPID-1673450", "CSAFPID-1673451", "CSAFPID-1673452" ] } ], "title": "CVE-2024-21251" }, { "cve": "CVE-2024-21261", "product_status": { "known_affected": [ "CSAFPID-1673144", "CSAFPID-1503575", "CSAFPID-1673188" ] }, "references": [ { "category": "self", "summary": "CVE-2024-21261", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-21261.json" } ], "scores": [ { "cvss_v3": { "baseScore": 4.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N", "version": "3.1" }, "products": [ "CSAFPID-1673144", "CSAFPID-1503575", "CSAFPID-1673188" ] } ], "title": "CVE-2024-21261" }, { "cve": "CVE-2024-22018", "cwe": { "id": "CWE-275", "name": "-" }, "notes": [ { "category": "other", "text": "CWE-275", "title": "CWE-275" } ], "product_status": { "known_affected": [ "CSAFPID-89587" ] }, "references": [ { "category": "self", "summary": "CVE-2024-22018", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-22018.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-89587" ] } ], "title": "CVE-2024-22018" }, { "cve": "CVE-2024-22020", "product_status": { "known_affected": [ "CSAFPID-89587" ] }, "references": [ { "category": "self", "summary": "CVE-2024-22020", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-22020.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-89587" ] } ], "title": "CVE-2024-22020" }, { "cve": "CVE-2024-22201", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" } ], "product_status": { "known_affected": [ "CSAFPID-1673384", "CSAFPID-342816", "CSAFPID-764275", "CSAFPID-764752", "CSAFPID-816798", "CSAFPID-816801", "CSAFPID-816846", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-912046", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-816845", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2024-22201", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-22201.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673384", "CSAFPID-342816", "CSAFPID-764275", "CSAFPID-764752", "CSAFPID-816798", "CSAFPID-816801", "CSAFPID-816846", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-912046", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-816845", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] } ], "title": "CVE-2024-22201" }, { "cve": "CVE-2024-23807", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "other", "text": "Use After Free", "title": "CWE-416" } ], "product_status": { "known_affected": [ "CSAFPID-1650831", "CSAFPID-1650825", "CSAFPID-1673479", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2024-23807", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-23807.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1650831", "CSAFPID-1650825", "CSAFPID-1673479", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] } ], "title": "CVE-2024-23807" }, { "cve": "CVE-2024-23944", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "other", "text": "Exposure of Sensitive Information to an Unauthorized Actor", "title": "CWE-200" } ], "product_status": { "known_affected": [ "CSAFPID-1673384", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2024-23944", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-23944.json" } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "CSAFPID-1673384", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] } ], "title": "CVE-2024-23944" }, { "cve": "CVE-2024-24989", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "other", "text": "NULL Pointer Dereference", "title": "CWE-476" } ], "product_status": { "known_affected": [ "CSAFPID-89587" ] }, "references": [ { "category": "self", "summary": "CVE-2024-24989", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-24989.json" } ], "title": "CVE-2024-24989" }, { "cve": "CVE-2024-24990", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "other", "text": "Use After Free", "title": "CWE-416" } ], "product_status": { "known_affected": [ "CSAFPID-89587" ] }, "references": [ { "category": "self", "summary": "CVE-2024-24990", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-24990.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-89587" ] } ], "title": "CVE-2024-24990" }, { "cve": "CVE-2024-25710", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)" }, "notes": [ { "category": "other", "text": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)", "title": "CWE-835" } ], "product_status": { "known_affected": [ "CSAFPID-89587", "CSAFPID-1673384", "CSAFPID-816871", "CSAFPID-816798", "CSAFPID-816801", "CSAFPID-342816", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-764275", "CSAFPID-764752", "CSAFPID-816846", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-912046", "CSAFPID-1503640", "CSAFPID-816845", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2024-25710", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-25710.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-89587", "CSAFPID-1673384", "CSAFPID-816871", "CSAFPID-816798", "CSAFPID-816801", "CSAFPID-342816", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-764275", "CSAFPID-764752", "CSAFPID-816846", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-912046", "CSAFPID-1503640", "CSAFPID-816845", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] } ], "title": "CVE-2024-25710" }, { "cve": "CVE-2024-26130", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "other", "text": "NULL Pointer Dereference", "title": "CWE-476" } ], "product_status": { "known_affected": [ "CSAFPID-89587", "CSAFPID-342816", "CSAFPID-764275", "CSAFPID-764752", "CSAFPID-816798", "CSAFPID-816801", "CSAFPID-816846", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-912046", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-816845", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2024-26130", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-26130.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-89587", "CSAFPID-342816", "CSAFPID-764275", "CSAFPID-764752", "CSAFPID-816798", "CSAFPID-816801", "CSAFPID-816846", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-912046", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-816845", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] } ], "title": "CVE-2024-26130" }, { "cve": "CVE-2024-26308", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "other", "text": "Allocation of Resources Without Limits or Throttling", "title": "CWE-770" } ], "product_status": { "known_affected": [ "CSAFPID-89587", "CSAFPID-1673384", "CSAFPID-816871", "CSAFPID-816798", "CSAFPID-342816", "CSAFPID-764275", "CSAFPID-764752", "CSAFPID-816801", "CSAFPID-816846", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-912046", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-816845", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2024-26308", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-26308.json" } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-89587", "CSAFPID-1673384", "CSAFPID-816871", "CSAFPID-816798", "CSAFPID-342816", "CSAFPID-764275", "CSAFPID-764752", "CSAFPID-816801", "CSAFPID-816846", "CSAFPID-912044", "CSAFPID-912045", "CSAFPID-912046", "CSAFPID-912561", "CSAFPID-912567", "CSAFPID-912600", "CSAFPID-912601", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-816845", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] } ], "title": "CVE-2024-26308" }, { "cve": "CVE-2024-27983", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" } ], "product_status": { "known_affected": [ "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2024-27983", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27983.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.2, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "version": "3.1" }, "products": [ "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] } ], "title": "CVE-2024-27983" }, { "cve": "CVE-2024-28182", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" }, { "category": "other", "text": "Improper Resource Shutdown or Release", "title": "CWE-404" }, { "category": "other", "text": "Detection of Error Condition Without Action", "title": "CWE-390" }, { "category": "other", "text": "Allocation of Resources Without Limits or Throttling", "title": "CWE-770" } ], "product_status": { "known_affected": [ "CSAFPID-1673442", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2024-28182", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-28182.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673442", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] } ], "title": "CVE-2024-28182" }, { "cve": "CVE-2024-28849", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "other", "text": "Exposure of Sensitive Information to an Unauthorized Actor", "title": "CWE-200" } ], "product_status": { "known_affected": [ "CSAFPID-89587", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2024-28849", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-28849.json" } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "CSAFPID-89587", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] } ], "title": "CVE-2024-28849" }, { "cve": "CVE-2024-28887", "cwe": { "id": "CWE-427", "name": "Uncontrolled Search Path Element" }, "notes": [ { "category": "other", "text": "Uncontrolled Search Path Element", "title": "CWE-427" } ], "product_status": { "known_affected": [ "CSAFPID-1673385", "CSAFPID-1673442", "CSAFPID-1673386" ] }, "references": [ { "category": "self", "summary": "CVE-2024-28887", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-28887.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673385", "CSAFPID-1673442", "CSAFPID-1673386" ] } ], "title": "CVE-2024-28887" }, { "cve": "CVE-2024-29025", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "other", "text": "Allocation of Resources Without Limits or Throttling", "title": "CWE-770" } ], "product_status": { "known_affected": [ "CSAFPID-1673488", "CSAFPID-1673489", "CSAFPID-1673491", "CSAFPID-1673492", "CSAFPID-1673493", "CSAFPID-1673495", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2024-29025", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-29025.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.3, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.1" }, "products": [ "CSAFPID-1673488", "CSAFPID-1673489", "CSAFPID-1673491", "CSAFPID-1673492", "CSAFPID-1673493", "CSAFPID-1673495", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] } ], "title": "CVE-2024-29025" }, { "cve": "CVE-2024-29131", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "other", "text": "Out-of-bounds Write", "title": "CWE-787" } ], "product_status": { "known_affected": [ "CSAFPID-1673497", "CSAFPID-1673397", "CSAFPID-1673384", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2024-29131", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-29131.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.3, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.1" }, "products": [ "CSAFPID-1673497", "CSAFPID-1673397", "CSAFPID-1673384", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] } ], "title": "CVE-2024-29131" }, { "cve": "CVE-2024-29133", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "other", "text": "Out-of-bounds Write", "title": "CWE-787" } ], "product_status": { "known_affected": [ "CSAFPID-1673497", "CSAFPID-1673397", "CSAFPID-1673384", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] }, "references": [ { "category": "self", "summary": "CVE-2024-29133", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-29133.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.3, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.1" }, "products": [ "CSAFPID-1673497", "CSAFPID-1673397", "CSAFPID-1673384", "CSAFPID-1503575", "CSAFPID-1503603", "CSAFPID-764250", "CSAFPID-1503612", "CSAFPID-1503640", "CSAFPID-342816", "CSAFPID-816845", "CSAFPID-816846", "CSAFPID-1503299", "CSAFPID-1503302", "CSAFPID-1503306", "CSAFPID-1503661", "CSAFPID-1503663", "CSAFPID-764813" ] } ], "title": "CVE-2024-29133" }, { "cve": "CVE-2024-31079", "cwe": { "id": "CWE-404", "name": "Improper Resource Shutdown or Release" }, "notes": [ { "category": "other", "text": "Improper Resource Shutdown or Release", "title": "CWE-404" }, { "category": "other", "text": "Stack-based Buffer Overflow", "title": "CWE-121" } ], "product_status": { "known_affected": [ "CSAFPID-89587" ] }, "references": [ { "category": "self", "summary": "CVE-2024-31079", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-31079.json" } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "version": "3.1" }, "products": [ "CSAFPID-89587" ] } ], "title": "CVE-2024-31079" }, { "cve": "CVE-2024-32760", "cwe": { "id": "CWE-404", "name": "Improper Resource Shutdown or Release" }, "notes": [ { "category": "other", "text": "Improper Resource Shutdown or Release", "title": "CWE-404" }, { "category": "other", "text": "Out-of-bounds Write", "title": "CWE-787" } ], "product_status": { "known_affected": [ "CSAFPID-89587" ] }, "references": [ { "category": "self", "summary": "CVE-2024-32760", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-32760.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-89587" ] } ], "title": "CVE-2024-32760" }, { "cve": "CVE-2024-34161", "cwe": { "id": "CWE-401", "name": "Missing Release of Memory after Effective Lifetime" }, "notes": [ { "category": "other", "text": "Missing Release of Memory after Effective Lifetime", "title": "CWE-401" }, { "category": "other", "text": "Use After Free", "title": "CWE-416" } ], "product_status": { "known_affected": [ "CSAFPID-89587" ] }, "references": [ { "category": "self", "summary": "CVE-2024-34161", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-34161.json" } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "version": "3.1" }, "products": [ "CSAFPID-89587" ] } ], "title": "CVE-2024-34161" }, { "cve": "CVE-2024-34750", "cwe": { "id": "CWE-755", "name": "Improper Handling of Exceptional Conditions" }, "notes": [ { "category": "other", "text": "Improper Handling of Exceptional Conditions", "title": "CWE-755" }, { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" } ], "product_status": { "known_affected": [ "CSAFPID-1673504", "CSAFPID-1673506" ] }, "references": [ { "category": "self", "summary": "CVE-2024-34750", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-34750.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673504", "CSAFPID-1673506" ] } ], "title": "CVE-2024-34750" }, { "cve": "CVE-2024-35200", "cwe": { "id": "CWE-404", "name": "Improper Resource Shutdown or Release" }, "notes": [ { "category": "other", "text": "Improper Resource Shutdown or Release", "title": "CWE-404" }, { "category": "other", "text": "NULL Pointer Dereference", "title": "CWE-476" } ], "product_status": { "known_affected": [ "CSAFPID-89587" ] }, "references": [ { "category": "self", "summary": "CVE-2024-35200", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-35200.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-89587" ] } ], "title": "CVE-2024-35200" }, { "cve": "CVE-2024-36137", "cwe": { "id": "CWE-275", "name": "-" }, "notes": [ { "category": "other", "text": "CWE-275", "title": "CWE-275" }, { "category": "other", "text": "Incorrect Permission Assignment for Critical Resource", "title": "CWE-732" } ], "product_status": { "known_affected": [ "CSAFPID-89587" ] }, "references": [ { "category": "self", "summary": "CVE-2024-36137", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-36137.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-89587" ] } ], "title": "CVE-2024-36137" }, { "cve": "CVE-2024-36138", "cwe": { "id": "CWE-77", "name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)" }, "notes": [ { "category": "other", "text": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)", "title": "CWE-77" } ], "product_status": { "known_affected": [ "CSAFPID-89587" ] }, "references": [ { "category": "self", "summary": "CVE-2024-36138", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-36138.json" } ], "title": "CVE-2024-36138" }, { "cve": "CVE-2024-36387", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "other", "text": "NULL Pointer Dereference", "title": "CWE-476" } ], "product_status": { "known_affected": [ "CSAFPID-345049", "CSAFPID-611417" ] }, "references": [ { "category": "self", "summary": "CVE-2024-36387", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-36387.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-345049", "CSAFPID-611417" ] } ], "title": "CVE-2024-36387" }, { "cve": "CVE-2024-37370", "cwe": { "id": "CWE-130", "name": "Improper Handling of Length Parameter Inconsistency" }, "notes": [ { "category": "other", "text": "Improper Handling of Length Parameter Inconsistency", "title": "CWE-130" } ], "product_status": { "known_affected": [ "CSAFPID-1673507", "CSAFPID-1673508", "CSAFPID-1673509" ] }, "references": [ { "category": "self", "summary": "CVE-2024-37370", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-37370.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673507", "CSAFPID-1673508", "CSAFPID-1673509" ] } ], "title": "CVE-2024-37370" }, { "cve": "CVE-2024-37371", "cwe": { "id": "CWE-130", "name": "Improper Handling of Length Parameter Inconsistency" }, "notes": [ { "category": "other", "text": "Improper Handling of Length Parameter Inconsistency", "title": "CWE-130" } ], "product_status": { "known_affected": [ "CSAFPID-1673507", "CSAFPID-1673508", "CSAFPID-1673509" ] }, "references": [ { "category": "self", "summary": "CVE-2024-37371", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-37371.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673507", "CSAFPID-1673508", "CSAFPID-1673509" ] } ], "title": "CVE-2024-37371" }, { "cve": "CVE-2024-37372", "product_status": { "known_affected": [ "CSAFPID-89587" ] }, "references": [ { "category": "self", "summary": "CVE-2024-37372", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-37372.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-89587" ] } ], "title": "CVE-2024-37372" }, { "cve": "CVE-2024-38356", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)" }, "notes": [ { "category": "other", "text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)", "title": "CWE-79" } ], "product_status": { "known_affected": [ "CSAFPID-1673510", "CSAFPID-1503575", "CSAFPID-1673188" ] }, "references": [ { "category": "self", "summary": "CVE-2024-38356", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38356.json" } ], "scores": [ { "cvss_v3": { "baseScore": 6.1, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1" }, "products": [ "CSAFPID-1673510", "CSAFPID-1503575", "CSAFPID-1673188" ] } ], "title": "CVE-2024-38356" }, { "cve": "CVE-2024-38357", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)" }, "notes": [ { "category": "other", "text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)", "title": "CWE-79" } ], "product_status": { "known_affected": [ "CSAFPID-1673510", "CSAFPID-1503575", "CSAFPID-1673188" ] }, "references": [ { "category": "self", "summary": "CVE-2024-38357", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38357.json" } ], "scores": [ { "cvss_v3": { "baseScore": 6.1, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1" }, "products": [ "CSAFPID-1673510", "CSAFPID-1503575", "CSAFPID-1673188" ] } ], "title": "CVE-2024-38357" }, { "cve": "CVE-2024-38472", "cwe": { "id": "CWE-918", "name": "Server-Side Request Forgery (SSRF)" }, "notes": [ { "category": "other", "text": "Server-Side Request Forgery (SSRF)", "title": "CWE-918" } ], "product_status": { "known_affected": [ "CSAFPID-345049", "CSAFPID-611417" ] }, "references": [ { "category": "self", "summary": "CVE-2024-38472", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38472.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "CSAFPID-345049", "CSAFPID-611417" ] } ], "title": "CVE-2024-38472" }, { "cve": "CVE-2024-38473", "cwe": { "id": "CWE-172", "name": "Encoding Error" }, "notes": [ { "category": "other", "text": "Encoding Error", "title": "CWE-172" }, { "category": "other", "text": "Improper Encoding or Escaping of Output", "title": "CWE-116" } ], "product_status": { "known_affected": [ "CSAFPID-345049", "CSAFPID-611417" ] }, "references": [ { "category": "self", "summary": "CVE-2024-38473", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38473.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-345049", "CSAFPID-611417" ] } ], "title": "CVE-2024-38473" }, { "cve": "CVE-2024-38474", "cwe": { "id": "CWE-172", "name": "Encoding Error" }, "notes": [ { "category": "other", "text": "Encoding Error", "title": "CWE-172" }, { "category": "other", "text": "Improper Encoding or Escaping of Output", "title": "CWE-116" } ], "product_status": { "known_affected": [ "CSAFPID-345049", "CSAFPID-611417" ] }, "references": [ { "category": "self", "summary": "CVE-2024-38474", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38474.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-345049", "CSAFPID-611417" ] } ], "title": "CVE-2024-38474" }, { "cve": "CVE-2024-38475", "cwe": { "id": "CWE-284", "name": "Improper Access Control" }, "notes": [ { "category": "other", "text": "Improper Access Control", "title": "CWE-284" }, { "category": "other", "text": "Improper Encoding or Escaping of Output", "title": "CWE-116" } ], "product_status": { "known_affected": [ "CSAFPID-345049", "CSAFPID-611417" ] }, "references": [ { "category": "self", "summary": "CVE-2024-38475", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38475.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "CSAFPID-345049", "CSAFPID-611417" ] } ], "title": "CVE-2024-38475" }, { "cve": "CVE-2024-38476", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "other", "text": "Exposure of Sensitive Information to an Unauthorized Actor", "title": "CWE-200" }, { "category": "other", "text": "Inclusion of Functionality from Untrusted Control Sphere", "title": "CWE-829" } ], "product_status": { "known_affected": [ "CSAFPID-345049", "CSAFPID-611417" ] }, "references": [ { "category": "self", "summary": "CVE-2024-38476", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38476.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-345049", "CSAFPID-611417" ] } ], "title": "CVE-2024-38476" }, { "cve": "CVE-2024-38477", "cwe": { "id": "CWE-404", "name": "Improper Resource Shutdown or Release" }, "notes": [ { "category": "other", "text": "Improper Resource Shutdown or Release", "title": "CWE-404" }, { "category": "other", "text": "NULL Pointer Dereference", "title": "CWE-476" } ], "product_status": { "known_affected": [ "CSAFPID-345049", "CSAFPID-611417" ] }, "references": [ { "category": "self", "summary": "CVE-2024-38477", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38477.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-345049", "CSAFPID-611417" ] } ], "title": "CVE-2024-38477" }, { "cve": "CVE-2024-38998", "cwe": { "id": "CWE-1321", "name": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)" }, "notes": [ { "category": "other", "text": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)", "title": "CWE-1321" } ], "product_status": { "known_affected": [ "CSAFPID-1673511", "CSAFPID-1673512", "CSAFPID-1503575", "CSAFPID-1673188" ] }, "references": [ { "category": "self", "summary": "CVE-2024-38998", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38998.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673511", "CSAFPID-1673512", "CSAFPID-1503575", "CSAFPID-1673188" ] } ], "title": "CVE-2024-38998" }, { "cve": "CVE-2024-38999", "cwe": { "id": "CWE-1321", "name": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)" }, "notes": [ { "category": "other", "text": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)", "title": "CWE-1321" } ], "product_status": { "known_affected": [ "CSAFPID-1673511", "CSAFPID-1673512", "CSAFPID-1503575", "CSAFPID-1673188" ] }, "references": [ { "category": "self", "summary": "CVE-2024-38999", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38999.json" } ], "scores": [ { "cvss_v3": { "baseScore": 10.0, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673511", "CSAFPID-1673512", "CSAFPID-1503575", "CSAFPID-1673188" ] } ], "title": "CVE-2024-38999" }, { "cve": "CVE-2024-39573", "cwe": { "id": "CWE-918", "name": "Server-Side Request Forgery (SSRF)" }, "notes": [ { "category": "other", "text": "Server-Side Request Forgery (SSRF)", "title": "CWE-918" }, { "category": "other", "text": "Improper Input Validation", "title": "CWE-20" } ], "product_status": { "known_affected": [ "CSAFPID-345049", "CSAFPID-611417" ] }, "references": [ { "category": "self", "summary": "CVE-2024-39573", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-39573.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "CSAFPID-345049", "CSAFPID-611417" ] } ], "title": "CVE-2024-39573" }, { "cve": "CVE-2024-39884", "cwe": { "id": "CWE-18", "name": "-" }, "notes": [ { "category": "other", "text": "CWE-18", "title": "CWE-18" } ], "product_status": { "known_affected": [ "CSAFPID-345049", "CSAFPID-611417" ] }, "references": [ { "category": "self", "summary": "CVE-2024-39884", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-39884.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "CSAFPID-345049", "CSAFPID-611417" ] } ], "title": "CVE-2024-39884" }, { "cve": "CVE-2024-40725", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "other", "text": "Exposure of Sensitive Information to an Unauthorized Actor", "title": "CWE-200" }, { "category": "other", "text": "Exposure of Resource to Wrong Sphere", "title": "CWE-668" } ], "product_status": { "known_affected": [ "CSAFPID-345049", "CSAFPID-611417", "CSAFPID-1673479" ] }, "references": [ { "category": "self", "summary": "CVE-2024-40725", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40725.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "CSAFPID-345049", "CSAFPID-611417", "CSAFPID-1673479" ] } ], "title": "CVE-2024-40725" }, { "cve": "CVE-2024-40898", "cwe": { "id": "CWE-918", "name": "Server-Side Request Forgery (SSRF)" }, "notes": [ { "category": "other", "text": "Server-Side Request Forgery (SSRF)", "title": "CWE-918" } ], "product_status": { "known_affected": [ "CSAFPID-345049", "CSAFPID-611417", "CSAFPID-1673479" ] }, "references": [ { "category": "self", "summary": "CVE-2024-40898", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40898.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "CSAFPID-345049", "CSAFPID-611417", "CSAFPID-1673479" ] } ], "title": "CVE-2024-40898" }, { "cve": "CVE-2024-45490", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "other", "text": "Integer Overflow or Wraparound", "title": "CWE-190" }, { "category": "other", "text": "Incorrect Calculation of Buffer Size", "title": "CWE-131" } ], "product_status": { "known_affected": [ "CSAFPID-1673385", "CSAFPID-1673442", "CSAFPID-1673386" ] }, "references": [ { "category": "self", "summary": "CVE-2024-45490", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-45490.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673385", "CSAFPID-1673442", "CSAFPID-1673386" ] } ], "title": "CVE-2024-45490" }, { "cve": "CVE-2024-45491", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "other", "text": "Integer Overflow or Wraparound", "title": "CWE-190" } ], "product_status": { "known_affected": [ "CSAFPID-1673385", "CSAFPID-1673442", "CSAFPID-1673386" ] }, "references": [ { "category": "self", "summary": "CVE-2024-45491", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-45491.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673385", "CSAFPID-1673442", "CSAFPID-1673386" ] } ], "title": "CVE-2024-45491" }, { "cve": "CVE-2024-45492", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "other", "text": "Integer Overflow or Wraparound", "title": "CWE-190" } ], "product_status": { "known_affected": [ "CSAFPID-1673385", "CSAFPID-1673442", "CSAFPID-1673386" ] }, "references": [ { "category": "self", "summary": "CVE-2024-45492", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-45492.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1673385", "CSAFPID-1673442", "CSAFPID-1673386" ] } ], "title": "CVE-2024-45492" }, { "cve": "CVE-2024-45801", "cwe": { "id": "CWE-1333", "name": "Inefficient Regular Expression Complexity" }, "notes": [ { "category": "other", "text": "Inefficient Regular Expression Complexity", "title": "CWE-1333" }, { "category": "other", "text": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)", "title": "CWE-1321" } ], "product_status": { "known_affected": [ "CSAFPID-1503575", "CSAFPID-1673188" ] }, "references": [ { "category": "self", "summary": "CVE-2024-45801", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-45801.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.3, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.1" }, "products": [ "CSAFPID-1503575", "CSAFPID-1673188" ] } ], "title": "CVE-2024-45801" } ] }
fkie_cve-2024-22020
Vulnerability from fkie_nvd
URL | Tags | ||
---|---|---|---|
support@hackerone.com | http://www.openwall.com/lists/oss-security/2024/07/11/6 | ||
support@hackerone.com | http://www.openwall.com/lists/oss-security/2024/07/19/3 | ||
support@hackerone.com | https://hackerone.com/reports/2092749 | ||
af854a3a-2127-422b-91ae-364da2661108 | http://www.openwall.com/lists/oss-security/2024/07/11/6 | ||
af854a3a-2127-422b-91ae-364da2661108 | http://www.openwall.com/lists/oss-security/2024/07/19/3 | ||
af854a3a-2127-422b-91ae-364da2661108 | https://hackerone.com/reports/2092749 | ||
af854a3a-2127-422b-91ae-364da2661108 | https://security.netapp.com/advisory/ntap-20241122-0006/ |
Vendor | Product | Version |
---|
{ "cveTags": [], "descriptions": [ { "lang": "en", "value": "A security flaw in Node.js allows a bypass of network import restrictions.\nBy embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security.\nVerified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports.\nExploiting this flaw can violate network import security, posing a risk to developers and servers." }, { "lang": "es", "value": "Un fallo de seguridad en Node.js permite eludir las restricciones de importaci\u00f3n de la red. Al incorporar importaciones fuera de la red en las URL de datos, un atacante puede ejecutar c\u00f3digo arbitrario, comprometiendo la seguridad del sistema. Verificada en varias plataformas, la vulnerabilidad se mitiga al prohibir las URL de datos en las importaciones de red. La explotaci\u00f3n de este fallo puede violar la seguridad de importaci\u00f3n de la red, lo que representa un riesgo para los desarrolladores y servidores." } ], "id": "CVE-2024-22020", "lastModified": "2025-03-14T19:15:44.700", "metrics": { "cvssMetricV30": [ { "cvssData": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H", "version": "3.0" }, "exploitabilityScore": 1.0, "impactScore": 5.5, "source": "support@hackerone.com", "type": "Secondary" } ] }, "published": "2024-07-09T02:15:09.973", "references": [ { "source": "support@hackerone.com", "url": "http://www.openwall.com/lists/oss-security/2024/07/11/6" }, { "source": "support@hackerone.com", "url": "http://www.openwall.com/lists/oss-security/2024/07/19/3" }, { "source": "support@hackerone.com", "url": "https://hackerone.com/reports/2092749" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.openwall.com/lists/oss-security/2024/07/11/6" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.openwall.com/lists/oss-security/2024/07/19/3" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://hackerone.com/reports/2092749" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://security.netapp.com/advisory/ntap-20241122-0006/" } ], "sourceIdentifier": "support@hackerone.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-94" } ], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary" } ] }
gsd-2024-22020
Vulnerability from gsd
{ "gsd": { "metadata": { "exploitCode": "unknown", "remediation": "unknown", "reportConfidence": "confirmed", "type": "vulnerability" }, "osvSchema": { "aliases": [ "CVE-2024-22020" ], "id": "GSD-2024-22020", "modified": "2024-01-04T06:02:16.680568Z", "schema_version": "1.4.0" } }, "namespaces": { "cve.org": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2024-22020", "STATE": "RESERVED" }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." } ] } } } }
ghsa-ch4x-f5c4-36gv
Vulnerability from github
A security flaw in Node.js allows a bypass of network import restrictions. By embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security. Verified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports. Exploiting this flaw can violate network import security, posing a risk to developers and servers.
{ "affected": [], "aliases": [ "CVE-2024-22020" ], "database_specific": { "cwe_ids": [ "CWE-284", "CWE-94" ], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-07-09T02:15:09Z", "severity": "MODERATE" }, "details": "A security flaw in Node.js allows a bypass of network import restrictions.\nBy embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security.\nVerified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports.\nExploiting this flaw can violate network import security, posing a risk to developers and servers.", "id": "GHSA-ch4x-f5c4-36gv", "modified": "2024-11-22T12:39:08Z", "published": "2024-07-09T03:31:44Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-22020" }, { "type": "WEB", "url": "https://hackerone.com/reports/2092749" }, { "type": "WEB", "url": "https://security.netapp.com/advisory/ntap-20241122-0006" }, { "type": "WEB", "url": "http://www.openwall.com/lists/oss-security/2024/07/11/6" }, { "type": "WEB", "url": "http://www.openwall.com/lists/oss-security/2024/07/19/3" } ], "schema_version": "1.4.0", "severity": [ { "score": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H", "type": "CVSS_V3" } ] }
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.