DeutschShown in its original language — a full translation is planned for a future version.
vm2: Mehrere Schwachstellen
view advisory published 2023-05-15
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in vm2 ausnutzen, um beliebigen Programmcode auszuführen und um Dateien zu manipulieren.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-32314US | critical10.0 | Exploit | ||
vm2 is a sandbox that can run untrusted code with Node's built-in modules. A sandbox escape vulnerability exists in vm2 for versions up to and including 3.9.17. It abuses an unexpe… | ||||
| CVE-2023-32313US | medium5.3 | — | ||
vm2 is a sandbox that can run untrusted code with Node's built-in modules. In versions 3.9.17 and lower of vm2 it was possible to get a read-write reference to the node `inspect` m… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2023:3296 vom 2023-05-24external
- Red Hat Security Advisory RHSA-2023:3297 vom 2023-05-24external
- Red Hat Security Advisory RHSA-2023:3325 vom 2023-05-25external
- Red Hat Security Advisory RHSA-2023:3326 vom 2023-05-26external
- Red Hat Security Advisory RHSA-2023:3353 vom 2023-06-03external
- Red Hat Security Advisory RHSA-2023:3356 vom 2023-06-03external
- GitHub Security Advisory GHSA-p5gc-c584-jj6v vom 2023-05-15external
- GitHub Security Advisory GHSA-whpj-8f3w-67p5 vom 2023-05-15external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan