Skip to content
OpenAdvisories
High WID-SEC-2023-1004 4 CVEs

vm2: Mehrere Schwachstellen

Published Apr 18, 2023 · Updated Apr 19, 2023 · Revision 2 · de-DE

Vendor: Red Hat Product: Enterprise Linux Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in vm2 ausnutzen, um aus der Sandbox auszubrechen und beliebigen Code im Host-Kontext auszuführen.

Product

vm2 ist eine Sandbox, in der nicht vertrauenswürdiger Code der in Node integrierten Module ausgeführt werden kann.

Vulnerabilities 4

  • Critical 10.0
    CVE-2022-36067 Public exploit EPSS 48%

    vm2 vulnerable to Sandbox Escape before v3.9.11

    vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. In versions prior to version 3.9.11, a threat actor can bypass the sandbox protections to gain remote code execution rights on the host running the sandbox. This vulnerabil…

    patriksimek vm2 vm2 npm
  • Critical 10.0
    CVE-2023-29017 Public exploit EPSS 63%

    vm2 Sandbox Escape vulnerability

    vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Prior to version 3.9.15, vm2 was not properly handling host objects passed to `Error.prepareStackTrace` in case of unhandled async errors. A threat actor could bypass the s…

    patriksimek vm2 vm2 npm
  • Critical 9.8
    CVE-2023-29199

    vm2 Sandbox escape vulnerability

    There exists a vulnerability in source code transformer (exception sanitization logic) of vm2 for versions up to 3.9.15, allowing attackers to bypass `handleException()` and leak unsanitized host exceptions which can be used to escape the sandbox and run arbi…

    patriksimek vm2 vm2 npm
  • Critical 9.8
    CVE-2023-30547 Public exploit EPSS 73%

    Sandbox Escape in vm2

    vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. There exists a vulnerability in exception sanitization of vm2 for versions up to 3.9.16, allowing attackers to raise an unsanitized host exception inside `handleException()…

    patriksimek vm2 vm2 npm

Revision history

  1. #2

    Neue Updates von Red Hat aufgenommen

  2. #1

    Initiale Fassung

References