Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2024-21892

On Linux, Node.js ignores certain environment variables if those may have been set by an unprivileged user while the process is running with elevated privileges with the only exception of CAP_NET_BIND_SERVICE. Due to a bug in the implementation of this exception, Node.js incorrectly applies this exception even when certain other capabilities have been set. This allows unprivileged users to inject code that inherits the process's elevated privileges.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 26.1%
CVSS Severity
CVSS v3 Score 7.5
Products affected by CVE-2024-21892
  • Nodejs » Node.js » Version: 18.0.0
    cpe:2.3:a:nodejs:node.js:18.0.0
  • Nodejs » Node.js » Version: 18.0.1
    cpe:2.3:a:nodejs:node.js:18.0.1
  • Nodejs » Node.js » Version: 18.0.2
    cpe:2.3:a:nodejs:node.js:18.0.2
  • Nodejs » Node.js » Version: 18.0.3
    cpe:2.3:a:nodejs:node.js:18.0.3
  • Nodejs » Node.js » Version: 18.0.4
    cpe:2.3:a:nodejs:node.js:18.0.4
  • Nodejs » Node.js » Version: 18.0.5
    cpe:2.3:a:nodejs:node.js:18.0.5
  • Nodejs » Node.js » Version: 18.0.6
    cpe:2.3:a:nodejs:node.js:18.0.6
  • Nodejs » Node.js » Version: 18.1.0
    cpe:2.3:a:nodejs:node.js:18.1.0
  • Nodejs » Node.js » Version: 18.10.0
    cpe:2.3:a:nodejs:node.js:18.10.0
  • Nodejs » Node.js » Version: 18.11.0
    cpe:2.3:a:nodejs:node.js:18.11.0
  • Nodejs » Node.js » Version: 18.12.0
    cpe:2.3:a:nodejs:node.js:18.12.0
  • Nodejs » Node.js » Version: 18.12.1
    cpe:2.3:a:nodejs:node.js:18.12.1
  • Nodejs » Node.js » Version: 18.13.0
    cpe:2.3:a:nodejs:node.js:18.13.0
  • Nodejs » Node.js » Version: 18.14.0
    cpe:2.3:a:nodejs:node.js:18.14.0
  • Nodejs » Node.js » Version: 18.14.1
    cpe:2.3:a:nodejs:node.js:18.14.1
  • Nodejs » Node.js » Version: 18.14.2
    cpe:2.3:a:nodejs:node.js:18.14.2
  • Nodejs » Node.js » Version: 18.15.0
    cpe:2.3:a:nodejs:node.js:18.15.0
  • Nodejs » Node.js » Version: 18.16.0
    cpe:2.3:a:nodejs:node.js:18.16.0
  • Nodejs » Node.js » Version: 18.16.1
    cpe:2.3:a:nodejs:node.js:18.16.1
  • Nodejs » Node.js » Version: 18.17.0
    cpe:2.3:a:nodejs:node.js:18.17.0
  • Nodejs » Node.js » Version: 18.17.1
    cpe:2.3:a:nodejs:node.js:18.17.1
  • Nodejs » Node.js » Version: 18.18.0
    cpe:2.3:a:nodejs:node.js:18.18.0
  • Nodejs » Node.js » Version: 18.18.1
    cpe:2.3:a:nodejs:node.js:18.18.1
  • Nodejs » Node.js » Version: 18.18.2
    cpe:2.3:a:nodejs:node.js:18.18.2
  • Nodejs » Node.js » Version: 18.19.0
    cpe:2.3:a:nodejs:node.js:18.19.0
  • Nodejs » Node.js » Version: 18.2.0
    cpe:2.3:a:nodejs:node.js:18.2.0
  • Nodejs » Node.js » Version: 18.3.0
    cpe:2.3:a:nodejs:node.js:18.3.0
  • Nodejs » Node.js » Version: 18.4.0
    cpe:2.3:a:nodejs:node.js:18.4.0
  • Nodejs » Node.js » Version: 18.5.0
    cpe:2.3:a:nodejs:node.js:18.5.0
  • Nodejs » Node.js » Version: 18.6.0
    cpe:2.3:a:nodejs:node.js:18.6.0
  • Nodejs » Node.js » Version: 18.7.0
    cpe:2.3:a:nodejs:node.js:18.7.0
  • Nodejs » Node.js » Version: 18.8.0
    cpe:2.3:a:nodejs:node.js:18.8.0
  • Nodejs » Node.js » Version: 18.9.0
    cpe:2.3:a:nodejs:node.js:18.9.0
  • Nodejs » Node.js » Version: 18.9.1
    cpe:2.3:a:nodejs:node.js:18.9.1
  • Nodejs » Node.js » Version: 20.0.0
    cpe:2.3:a:nodejs:node.js:20.0.0
  • Nodejs » Node.js » Version: 20.1.0
    cpe:2.3:a:nodejs:node.js:20.1.0
  • Nodejs » Node.js » Version: 20.10.0
    cpe:2.3:a:nodejs:node.js:20.10.0
  • Nodejs » Node.js » Version: 20.11.0
    cpe:2.3:a:nodejs:node.js:20.11.0
  • Nodejs » Node.js » Version: 20.2.0
    cpe:2.3:a:nodejs:node.js:20.2.0
  • Nodejs » Node.js » Version: 20.3.0
    cpe:2.3:a:nodejs:node.js:20.3.0
  • Nodejs » Node.js » Version: 20.3.1
    cpe:2.3:a:nodejs:node.js:20.3.1
  • Nodejs » Node.js » Version: 20.4.0
    cpe:2.3:a:nodejs:node.js:20.4.0
  • Nodejs » Node.js » Version: 20.5.0
    cpe:2.3:a:nodejs:node.js:20.5.0
  • Nodejs » Node.js » Version: 20.5.1
    cpe:2.3:a:nodejs:node.js:20.5.1
  • Nodejs » Node.js » Version: 20.6.0
    cpe:2.3:a:nodejs:node.js:20.6.0
  • Nodejs » Node.js » Version: 20.6.1
    cpe:2.3:a:nodejs:node.js:20.6.1
  • Nodejs » Node.js » Version: 20.7.0
    cpe:2.3:a:nodejs:node.js:20.7.0
  • Nodejs » Node.js » Version: 20.8.0
    cpe:2.3:a:nodejs:node.js:20.8.0
  • Nodejs » Node.js » Version: 20.8.1
    cpe:2.3:a:nodejs:node.js:20.8.1
  • Nodejs » Node.js » Version: 20.9.0
    cpe:2.3:a:nodejs:node.js:20.9.0
  • Nodejs » Node.js » Version: 21.0.0
    cpe:2.3:a:nodejs:node.js:21.0.0
  • Nodejs » Node.js » Version: 21.1.0
    cpe:2.3:a:nodejs:node.js:21.1.0
  • Nodejs » Node.js » Version: 21.2.0
    cpe:2.3:a:nodejs:node.js:21.2.0
  • Nodejs » Node.js » Version: 21.3.0
    cpe:2.3:a:nodejs:node.js:21.3.0
  • Nodejs » Node.js » Version: 21.4.0
    cpe:2.3:a:nodejs:node.js:21.4.0
  • Nodejs » Node.js » Version: 21.5.0
    cpe:2.3:a:nodejs:node.js:21.5.0
  • Nodejs » Node.js » Version: 21.6.0
    cpe:2.3:a:nodejs:node.js:21.6.0
  • Nodejs » Node.js » Version: 21.6.1
    cpe:2.3:a:nodejs:node.js:21.6.1
  • Linux » Linux Kernel » Version: N/A
    cpe:2.3:o:linux:linux_kernel:-


Products
Pricing
Contact Us

Shodan ® - All rights reserved