REDHAT-BUG-2232376: Medium severity vm2 vm2 vulnerability
Published Aug 16, 2023
·Updated
In vm2 for versions up to 3.9.19, Promise handler sanitization can be bypassed, allowing attackers to escape the sandbox and run arbitrary code.
Affected Software
1 affected component
vm2 vm2<3.9.19
Event History
Aug 16, 2023
Data Sourced
via Red Hat·02:44 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of REDHAT-BUG-2232376?
The severity of REDHAT-BUG-2232376 is medium with a score of 4.
2
What is the risk associated with REDHAT-BUG-2232376?
The risk associated with REDHAT-BUG-2232376 is rated as 19.
3
How do I fix REDHAT-BUG-2232376?
To fix REDHAT-BUG-2232376, upgrade to vm2 version 3.9.20 or later.
4
What vulnerability does REDHAT-BUG-2232376 exploit?
REDHAT-BUG-2232376 exploits a bypass in Promise handler sanitization in versions of vm2 up to 3.9.19.
5
Can REDHAT-BUG-2232376 allow code execution?
Yes, REDHAT-BUG-2232376 can allow attackers to escape the sandbox and run arbitrary code.