K000139573 : node.js vulnerability CVE-2024-22017
Discription

Security Advisory Description setuid() does not affect libuv's internal io_uring operations if initialized before the call to setuid(). This allows the process to perform privileged operations despite presumably having dropped such privileges through a call to setuid(). This vulnerability affects all users using version greater or equal than Node.js 18.18.0, Node.js 20.4.0 and Node.js 21. (CVE-2024-22017) Impact There is no impact; F5 products are not affected by this…Read More

Back to Main

Subscribe for the latest news: