V
Scaner-VS
HomeCatalogSourcesCWECAPECATT&CKMitigationsProductsVendorsDocs
CVE-2023-29017
CVE
CriticalConfirmedExploit available

vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Prior to version 3.9.15, vm2 was not properly handli…

CVSS
9.8
Critical
EPSS
0.63
p99
Published
2023-01-01
Updated
2023-01-01
Description

vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Prior to version 3.9.15, vm2 was not properly handling host objects passed to `Error.prepareStackTrace` in case of unhandled async errors. A threat actor could bypass the sandbox protections to gain remote code execution rights on the host running the sandbox. This vulnerability was patched in the release of version 3.9.15 of vm2. There are no known workarounds.

Tags · CWE
Pre-auth
CWE-755
CWE-913
Affected products
Vm2 < 3.9.15
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Timeline
2023-01-01
Published
2023-01-01
Updated
CVSS 3.1 breakdown
Attack Vector
AV: N
Network (N)
Attack Complexity
AC: L
Low (L)
Privileges Required
PR: N
None (N)
User Interaction
UI: N
None (N)
Scope
S: U
Unchanged (U)
Confidentiality Impact
C: H
High (H)
Integrity Impact
I: H
High (H)
Availability Impact
A: H
High (H)
Exploit indicators
EPSS
0.632 · p99
Known exploited (KEV)
No
Known exploits — Сканер-ВС
CVE-2023-29017
github-poc · https://github.com/passwa11/CVE-2023-29017-reverse-shell
Enterprise
Affected products
ProductVendorStatus
vm2*Tracked
Source databases
CVE
Related vulnerabilities