Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-24782 State: PUBLISHED Published: 2024-02-13T13:46:58.469Z Last Updated: 2025-05-08T18:21:23.443Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: HIMA Products: F30 03X YY (COM), F30 03X YY (CPU), F35 03X YY (COM), F35 03X YY (CPU), F60 CPU 03X YY (COM), F60 CPU 03X YY (CPU), F-COM 01, F-COM 01 coated, F-CPU 01, F-CPU 01 coated, X-COM 01 E YY, X-COM 01 YY, X-CPU 01, X-CPU 31 Problem Types: CWE-346 Description: An unauthenticated attacker can send a ping request from one network to another through an error in the origin verification even though the ports are separated by VLAN. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vuln
fication even though the ports are separated by VLAN. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2024-013
CVE ID: CVE-2024-24783 State: PUBLISHED Published: 2024-03-05T22:22:26.647Z Last Updated: 2025-02-13T17:40:23.803Z Vendors: Go standard library Products: crypto/x509 Problem Types: CWE-476: NULL Pointer Dereference Description: Verifying a certificate chain which contains a certificate with an unknown public key algorithm will cause Certificate.Verify to panic. This affects all crypto/tls clients, and servers that set Config.ClientAuth to VerifyClientCertIfGiven or RequireAndVerifyClientCert. The default behavior is for TLS servers to not verify client certificates. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://go.dev/issue/65390 - https://
nal Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://go.dev/issue/65390 - https://go.dev/cl/569339 - https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg - https://pkg.go.dev/vuln/GO-2024-2598 - https://security.netapp.com/advisory/ntap-20240329-0005/ - http://www.openwall.com/lists/oss-security/2024/03/08/4
CVE ID: CVE-2024-24784 State: PUBLISHED Published: 2024-03-05T22:22:32.186Z Last Updated: 2025-02-13T17:40:24.430Z Vendors: Go standard library Products: net/mail Problem Types: CWE-150: Improper Neutralization of Escape, Meta, or Control Sequences Description: The ParseAddressList function incorrectly handles comments (text within parentheses) within display names. Since this is a misalignment with conforming address parsers, it can result in different trust decisions being made by programs using different parsers. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://go.dev/issue/65083 - https://go.dev/cl/555596 - https://groups.google.com/g/gola
ADP Vulnrichment: References: - https://go.dev/issue/65083 - https://go.dev/cl/555596 - https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg - https://pkg.go.dev/vuln/GO-2024-2609 - https://security.netapp.com/advisory/ntap-20240329-0007/ - http://www.openwall.com/lists/oss-security/2024/03/08/4
CVE ID: CVE-2024-24785 State: PUBLISHED Published: 2024-03-05T22:22:33.640Z Last Updated: 2025-03-14T00:55:26.398Z Vendors: Go standard library Products: html/template Problem Types: CWE-150: Improper Neutralization of Escape, Meta, or Control Sequences Description: If errors returned from MarshalJSON methods contain user controlled data, they may be used to break the contextual auto-escaping behavior of the html/template package, allowing for subsequent actions to inject unexpected content into templates. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://go.dev/issue/65697 - https://go.dev/cl/564196 - https://groups.google.com/g/golang-announc
tainer: References: - https://go.dev/issue/65697 - https://go.dev/cl/564196 - https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg - https://pkg.go.dev/vuln/GO-2024-2610 - https://security.netapp.com/advisory/ntap-20240329-0008/ - http://www.openwall.com/lists/oss-security/2024/03/08/4
CVE ID: CVE-2024-24786 State: PUBLISHED Published: 2024-03-05T22:22:35.299Z Last Updated: 2025-02-13T17:40:25.868Z Vendors: google.golang.org/protobuf Products: google.golang.org/protobuf/encoding/protojson, google.golang.org/protobuf/internal/encoding/json Problem Types: CWE-1286: Improper Validation of Syntactic Correctness of Input Description: The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Refe
alOptions.DiscardUnknown option is set. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://go.dev/cl/569356 - https://pkg.go.dev/vuln/GO-2024-2611 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JDMBHAVSDU2FBDZ45U3A2VLSM35OJ2HU/ - http://www.openwall.com/lists/oss-security/2024/03/08/4 - https://security.netapp.com/advisory/ntap-20240517-0002/
CVE ID: CVE-2024-24787 State: PUBLISHED Published: 2024-05-08T15:31:14.530Z Last Updated: 2025-02-13T17:40:26.439Z Vendors: Go toolchain Products: cmd/go Problem Types: CWE 74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Description: On Darwin, building a Go module which contains CGO can trigger arbitrary code execution when using the Apple version of ld, due to usage of the -lto_library flag in a "#cgo LDFLAGS" directive. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://go.dev/issue/67119 - https://go.dev/cl/583815 - https://groups.google.com/g/golang-announce/c/wkkO4P9stm0 - https://pkg.
go.dev/issue/67119 - https://go.dev/cl/583815 - https://groups.google.com/g/golang-announce/c/wkkO4P9stm0 - https://pkg.go.dev/vuln/GO-2024-2825 - https://security.netapp.com/advisory/ntap-20240531-0006/ - http://www.openwall.com/lists/oss-security/2024/05/08/3
CVE ID: CVE-2024-24788 State: PUBLISHED Published: 2024-05-08T15:31:11.619Z Last Updated: 2025-02-13T17:40:27.179Z Vendors: Go standard library Products: net Problem Types: CWE 400: Uncontrolled Resource Consumption Description: A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://go.dev/issue/66754 - https://go.dev/cl/578375 - https://groups.google.com/g/golang-announce/c/wkkO4P9stm0 - https://pkg.go.dev/vuln/GO-2024-2824 - http://www.openwall.com/lists/oss-security/2024/05/08/3 - https://security.netapp.com/advisory/ntap-20240605-0002/
824 - http://www.openwall.com/lists/oss-security/2024/05/08/3 - https://security.netapp.com/advisory/ntap-20240605-0002/ - https://security.netapp.com/advisory/ntap-20240614-0001/
CVE ID: CVE-2024-24789 State: PUBLISHED Published: 2024-06-05T15:13:51.938Z Last Updated: 2025-02-13T17:40:27.816Z Vendors: Go standard library Products: archive/zip Problem Types: CWE-390: Detection of Error Condition Without Action Description: The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations. This misalignment could be exploited to create an zip file with contents that vary depending on the implementation reading the file. The archive/zip package now rejects files containing these errors. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://go.dev/cl/585397 - https://
ional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://go.dev/cl/585397 - https://go.dev/issue/66869 - https://groups.google.com/g/golang-announce/c/XbxouI9gY7k/m/TuoGEhxIEwAJ - https://pkg.go.dev/vuln/GO-2024-2888 - http://www.openwall.com/lists/oss-security/2024/06/04/1 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U5YAEIA6IUHUNGJ7AIXXPQT6D2GYENX7/
CVE ID: CVE-2024-24790 State: PUBLISHED Published: 2024-06-05T15:13:50.527Z Last Updated: 2025-02-13T17:40:28.639Z Vendors: Go standard library Products: net/netip Problem Types: CWE-180: Incorrect Behavior Order: Validate Before Canonicalize Description: The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://go.dev/cl/590316 - https://go.dev/issue/67680 - https://groups.google.com/g/golang-announce/c/XbxouI9gY7k/m/TuoGEhxIEwAJ - https://pkg.go.dev/vuln/GO-
dev/issue/67680 - https://groups.google.com/g/golang-announce/c/XbxouI9gY7k/m/TuoGEhxIEwAJ - https://pkg.go.dev/vuln/GO-2024-2887 - http://www.openwall.com/lists/oss-security/2024/06/04/1
CVE ID: CVE-2024-24791 State: PUBLISHED Published: 2024-07-02T21:28:25.677Z Last Updated: 2024-10-04T15:02:46.565Z Vendors: Go standard library Products: net/http Problem Types: CWE 400: Uncontrolled Resource Consumption Description: The net/http HTTP/1.1 client mishandled the case where a server responds to a request with an "Expect: 100-continue" header with a non-informational (200 or higher) status. This mishandling could leave a client connection in an invalid state, where the next request sent on the connection will fail. An attacker sending a request to a net/http/httputil.ReverseProxy proxy can exploit this mishandling to cause a denial of service by sending "Expect: 100-continue" re
tputil.ReverseProxy proxy can exploit this mishandling to cause a denial of service by sending "Expect: 100-continue" requests which elicit a non-informational response from the backend. Each such request leaves the proxy with an invalid connection, and causes one subsequent request using that connection to fail. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://go.dev/cl/591255 - https://go.dev/issue/67555 - https://groups.google.com/g/golang-dev/c/t0rK-qHBqzY/m/6MMoAZkMAgAJ - https://pkg.go.dev/vuln/GO-2024-2963
CVE ID: CVE-2024-24792 State: PUBLISHED Published: 2024-06-27T17:37:38.560Z Last Updated: 2024-08-01T23:28:12.747Z Vendors: golang.org/x/image Products: golang.org/x/image/tiff Problem Types: CWE-125: Out-of-bounds Read Description: Parsing a corrupt or malicious image with invalid color indices can cause a panic. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://go.dev/cl/588115 - https://go.dev/issue/67624 - https://pkg.go.dev/vuln/GO-2024-2937
CVE ID: CVE-2024-24793 State: PUBLISHED Published: 2024-02-20T10:37:15.455Z Last Updated: 2025-11-04T18:29:13.546Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Imaging Data Commons Products: libdicom Problem Types: CWE-416 Description: A use-after-free vulnerability exists in the DICOM Element Parsing as implemented in Imaging Data Commons libdicom 1.0.5. A specially crafted DICOM file can cause premature freeing of memory that is used later. To trigger this vulnerability, an attacker would need to induce the vulnerable application to process a malicious DICOM image.The Use-After-Free happens in the `parse_meta_element_create()` parsing the elements in the
ess a malicious DICOM image.The Use-After-Free happens in the `parse_meta_element_create()` parsing the elements in the File Meta Information header. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-1931
CVE ID: CVE-2024-24794 State: PUBLISHED Published: 2024-02-20T10:37:15.561Z Last Updated: 2025-11-04T18:29:14.746Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Imaging Data Commons Products: libdicom Problem Types: CWE-416 Description: A use-after-free vulnerability exists in the DICOM Element Parsing as implemented in Imaging Data Commons libdicom 1.0.5. A specially crafted DICOM file can cause premature freeing of memory that is used later. To trigger this vulnerability, an attacker would need to induce the vulnerable application to process a malicious DICOM image.The Use-After-Free happens in the `parse_meta_sequence_end()` parsing the Sequence Value Rep
ess a malicious DICOM image.The Use-After-Free happens in the `parse_meta_sequence_end()` parsing the Sequence Value Represenations. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-1931
CVE ID: CVE-2024-24795 State: PUBLISHED Published: 2024-04-04T19:20:48.803Z Last Updated: 2024-11-12T19:48:20.007Z Vendors: Apache Software Foundation Products: Apache HTTP Server Problem Types: CWE-113 Description: HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack. Users are recommended to upgrade to version 2.4.59, which fixes this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://httpd.apache.org/security/vulnerabilities_24.html
CVE ID: CVE-2024-24796 State: PUBLISHED Published: 2024-02-12T07:47:08.095Z Last Updated: 2025-05-07T21:03:09.885Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N) Vendors: MagePeople Team Products: Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently – WordPress Plugin Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in MagePeople Team Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently – WordPress Plugin.This issue affects Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently – WordPress Plugin: from n/a through 4.1.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnri
Evently – WordPress Plugin: from n/a through 4.1.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/mage-eventpress/wordpress-wpevently-plugin-4-1-1-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-24797 State: PUBLISHED Published: 2024-02-12T07:19:54.053Z Last Updated: 2024-08-16T15:39:24.806Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: G5Theme Products: ERE Recently Viewed – Essential Real Estate Add-On Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in G5Theme ERE Recently Viewed – Essential Real Estate Add-On.This issue affects ERE Recently Viewed – Essential Real Estate Add-On: from n/a through 1.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/ere-recently-viewed/wordpress-ere-recently-viewed-plugin-
t: References: - https://patchstack.com/database/vulnerability/ere-recently-viewed/wordpress-ere-recently-viewed-plugin-1-3-unauthenticated-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-24798 State: PUBLISHED Published: 2024-02-21T07:34:06.095Z Last Updated: 2024-08-14T20:31:43.594Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: SoniNow Team Products: Debug Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in SoniNow Team Debug.This issue affects Debug: from n/a through 1.10. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/debug/wordpress-debug-plugin-1-10-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-24799 State: PUBLISHED Published: 2024-03-26T11:29:24.285Z Last Updated: 2024-08-06T18:00:13.554Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: WooCommerce Products: WooCommerce Box Office Problem Types: CWE-862 Description: Missing Authorization vulnerability in WooCommerce WooCommerce Box Office.This issue affects WooCommerce Box Office: from n/a through 1.2.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/woocommerce-box-office/wordpress-woocommerce-box-office-plugin-1-2-2-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-24800 State: PUBLISHED Published: 2024-03-27T05:47:14.902Z Last Updated: 2024-08-02T14:49:27.488Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: AdTribes.io Products: Product Feed PRO for WooCommerce Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AdTribes.Io Product Feed PRO for WooCommerce allows Reflected XSS.This issue affects Product Feed PRO for WooCommerce: from n/a through 13.2.5. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/woo-product-feed-pro/wordpress-pr
: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/woo-product-feed-pro/wordpress-product-feed-pro-for-woocommerce-plugin-13-2-5-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-24801 State: PUBLISHED Published: 2024-02-10T07:53:36.601Z Last Updated: 2024-08-01T23:28:12.763Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: LogicHunt Products: OWL Carousel – WordPress Owl Carousel Slider Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LogicHunt OWL Carousel – WordPress Owl Carousel Slider allows Stored XSS.This issue affects OWL Carousel – WordPress Owl Carousel Slider: from n/a through 1.4.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/lgx
Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/lgx-owl-carousel/wordpress-owl-carousel-plugin-1-4-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-24802 State: PUBLISHED Published: 2024-02-21T07:29:14.441Z Last Updated: 2024-08-01T23:28:12.605Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: John Tendik Products: JTRT Responsive Tables Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in John Tendik JTRT Responsive Tables.This issue affects JTRT Responsive Tables: from n/a through 4.1.9. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/jtrt-responsive-tables/wordpress-jtrt-responsive-tables-plugin-4-1-9-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-24803 State: PUBLISHED Published: 2024-02-10T07:49:02.496Z Last Updated: 2024-08-01T23:28:12.507Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: WPoperation Products: Ultra Companion – Companion plugin for WPoperation Themes Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPoperation Ultra Companion – Companion plugin for WPoperation Themes allows Stored XSS.This issue affects Ultra Companion – Companion plugin for WPoperation Themes: from n/a through 1.1.9. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https:
from n/a through 1.1.9. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/ultra-companion/wordpress-ultra-companion-plugin-1-1-9-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-24804 State: PUBLISHED Published: 2024-02-10T07:45:51.290Z Last Updated: 2024-08-01T23:28:12.695Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: websoudan Products: MW WP Form Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in websoudan MW WP Form allows Stored XSS.This issue affects MW WP Form: from n/a through 5.0.6. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/mw-wp-form/wordpress-mw-wp-form-plugin-5-0-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-24805 State: PUBLISHED Published: 2024-03-26T09:07:32.956Z Last Updated: 2024-08-05T16:31:33.125Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Deepak anand Products: WP Dummy Content Generator Problem Types: CWE-862 Description: Missing Authorization vulnerability in Deepak anand WP Dummy Content Generator.This issue affects WP Dummy Content Generator: from n/a through 3.1.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-dummy-content-generator/wordpress-wp-dummy-content-generator-plugin-3-1-2-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-24806 State: PUBLISHED Published: 2024-02-07T21:44:33.566Z Last Updated: 2025-06-17T14:17:09.153Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: libuv Products: libuv Problem Types: CWE-918 Description: libuv is a multi-platform support library with a focus on asynchronous I/O. The `uv_getaddrinfo` function in `src/unix/getaddrinfo.c` (and its windows counterpart `src/win/getaddrinfo.c`), truncates hostnames to 256 characters before calling `getaddrinfo`. This behavior can be exploited to create addresses like `0x00007f000001`, which are considered valid by `getaddrinfo` and could allow an attacker to craft payloads that resolve to unintended
1`, which are considered valid by `getaddrinfo` and could allow an attacker to craft payloads that resolve to unintended IP addresses, bypassing developer checks. The vulnerability arises due to how the `hostname_ascii` variable (with a length of 256 bytes) is handled in `uv_getaddrinfo` and subsequently in `uv__idna_toascii`. When the hostname exceeds 256 characters, it gets truncated without a terminating null byte. As a result attackers may be able to access internal APIs or for websites (similar to MySpace) that allows users to have `username.example.com` pages. Internal services that crawl or cache these user pages can be exposed to SSRF attacks if a malicious user chooses a long vulner
l services that crawl or cache these user pages can be exposed to SSRF attacks if a malicious user chooses a long vulnerable username. This issue has been addressed in release version 1.48.0. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/libuv/libuv/security/advisories/GHSA-f74f-cvh7-c6q6 - https://github.com/libuv/libuv/commit/0f2d7e784a256b54b2385043438848047bc2a629 - https://github.com/libuv/libuv/commit/3530bcc30350d4a6ccf35d2f7b33e23292b9de70 - https://github.com/libuv/libuv/commit/c858a147643de38a09dd4164758ae5b685f2b488 - https://github.co
d2f7b33e23292b9de70 - https://github.com/libuv/libuv/commit/c858a147643de38a09dd4164758ae5b685f2b488 - https://github.com/libuv/libuv/commit/e0327e1d508b8207c9150b6e582f0adf26213c39 - http://www.openwall.com/lists/oss-security/2024/02/08/2 - http://www.openwall.com/lists/oss-security/2024/02/11/1 - https://lists.debian.org/debian-lts-announce/2024/03/msg00005.html - http://www.openwall.com/lists/oss-security/2024/03/11/1 - https://security.netapp.com/advisory/ntap-20240605-0008/ - https://gitlab.kitware.com/cmake/cmake/-/issues/26112