REDHAT-BUG-2477201: High severity vm2 vm2 vulnerability
vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.2, the new method neutralizeArraySpeciesBatch works with objects from the other side but can call into this side via getter on the array prototype exposing objects of the wrong side into the sandbox. This can be used to get host objects and get the host Function object. This allows attackers to write code which can escape from the VM2 sandbox and execute arbitrary commands on the host system. This vulnerability is fixed in 3.11.2.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
vm2to a version that resolves this vulnerability.Fixed in 3.11.2
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2477201?
The severity of REDHAT-BUG-2477201 is classified as high with a score of 7.
How do I fix REDHAT-BUG-2477201?
To fix REDHAT-BUG-2477201, upgrade to vm2 version 3.11.2 or later.
What vulnerability does REDHAT-BUG-2477201 address?
REDHAT-BUG-2477201 addresses a security issue in vm2 that allows host objects to be exposed in the sandbox.
What is vm2 in the context of REDHAT-BUG-2477201?
vm2 is an open-source virtual machine and sandbox for Node.js applications.
What are the potential consequences of REDHAT-BUG-2477201?
The potential consequences of REDHAT-BUG-2477201 include the exposure of sensitive host objects to the sandbox environment, leading to security risks.