SecuritySpace - CVE-2024-22017

Vulnerability Search		Search 324607 CVE descriptions and 146377 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2024-22017

Description: setuid() does not affect libuv's internal io_uring operations if initialized before the call to setuid(). This allows the process to perform privileged operations despite presumably having dropped such privileges through a call to setuid(). This vulnerability affects all users using version greater or equal than Node.js 18.18.0, Node.js 20.4.0 and Node.js 21.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2024-22017
https://hackerone.com/reports/2170226
https://hackerone.com/reports/2170226
http://www.openwall.com/lists/oss-security/2024/03/11/1

CVE ID:	CVE-2024-22017
Description:	setuid() does not affect libuv's internal io_uring operations if initialized before the call to setuid(). This allows the process to perform privileged operations despite presumably having dropped such privileges through a call to setuid(). This vulnerability affects all users using version greater or equal than Node.js 18.18.0, Node.js 20.4.0 and Node.js 21.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2024-22017 https://hackerone.com/reports/2170226 https://hackerone.com/reports/2170226 http://www.openwall.com/lists/oss-security/2024/03/11/1