{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-01T19:19:21.070","vulnerabilities":[{"cve":{"id":"CVE-2024-22017","sourceIdentifier":"support@hackerone.com","published":"2024-03-19T05:15:10.073","lastModified":"2026-06-17T07:10:32.827","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"setuid() does not affect libuv's internal io_uring operations if initialized before the call to setuid().\nThis allows the process to perform privileged operations despite presumably having dropped such privileges through a call to setuid().\nThis vulnerability affects all users using version greater or equal than Node.js 18.18.0, Node.js 20.4.0 and Node.js 21."},{"lang":"es","value":"setuid() no afecta las operaciones io_uring internas de libuv si se inicializa antes de la llamada a setuid(). Esto permite que el proceso realice operaciones privilegiadas a pesar de haber perdido dichos privilegios mediante una llamada a setuid(). Esta vulnerabilidad afecta a todos los usuarios que utilizan una versión mayor o igual a Node.js 18.18.0, Node.js 20.4.0 y Node.js 21."}],"affected":[{"source":"support@hackerone.com","affectedData":[{"vendor":"NodeJS","product":"Node","defaultStatus":"unaffected","versions":[{"version":"4.0","lessThan":"4.*","versionType":"semver","status":"affected"},{"version":"5.0","lessThan":"5.*","versionType":"semver","status":"affected"},{"version":"6.0","lessThan":"6.*","versionType":"semver","status":"affected"},{"version":"7.0","lessThan":"7.*","versionType":"semver","status":"affected"},{"version":"8.0","lessThan":"8.*","versionType":"semver","status":"affected"},{"version":"9.0","lessThan":"9.*","versionType":"semver","status":"affected"},{"version":"10.0","lessThan":"10.*","versionType":"semver","status":"affected"},{"version":"11.0","lessThan":"11.*","versionType":"semver","status":"affected"},{"version":"12.0","lessThan":"12.*","versionType":"semver","status":"affected"},{"version":"13.0","lessThan":"13.*","versionType":"semver","status":"affected"},{"version":"14.0","lessThan":"14.*","versionType":"semver","status":"affected"},{"version":"15.0","lessThan":"15.*","versionType":"semver","status":"affected"},{"version":"16.0","lessThan":"16.*","versionType":"semver","status":"affected"},{"version":"17.0","lessThan":"17.*","versionType":"semver","status":"affected"},{"version":"19.0","lessThan":"19.*","versionType":"semver","status":"affected"},{"version":"20.0","lessThan":"20.11.1","versionType":"semver","status":"affected"},{"version":"21.0","lessThan":"21.6.2","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"nodejs","product":"nodejs","defaultStatus":"unknown","cpes":["cpe:2.3:a:nodejs:nodejs:*:*:*:*:*:*:*:*"],"versions":[{"version":"18.0.0","lessThan":"18.18.0","versionType":"custom","status":"affected"},{"version":"20.0.0","lessThan":"20.4.0","versionType":"custom","status":"affected"},{"version":"21.0.0","lessThan":"21.6.1","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"support@hackerone.com","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:L","baseScore":7.3,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"HIGH","availabilityImpact":"LOW"},"exploitabilityScore":1.5,"impactScore":5.3}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-05-07T04:00:22.941212Z","id":"CVE-2024-22017","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-250"}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2024/03/11/1","source":"support@hackerone.com"},{"url":"https://hackerone.com/reports/2170226","source":"support@hackerone.com"},{"url":"https://security.netapp.com/advisory/ntap-20240517-0007/","source":"support@hackerone.com"},{"url":"http://www.openwall.com/lists/oss-security/2024/03/11/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://hackerone.com/reports/2170226","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20240517-0007/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}}]}