vulnerability
SUSE: CVE-2024-4068: SUSE Linux Security Advisory
Severity | CVSS | Published | Added | Modified |
---|---|---|---|---|
8 | (AV:N/AC:L/Au:N/C:N/I:N/A:C) | May 14, 2024 | Oct 30, 2024 | Feb 20, 2025 |
Severity
8
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:C)
Published
May 14, 2024
Added
Oct 30, 2024
Modified
Feb 20, 2025
Description
The NPM package `braces`, versions prior to 3.0.3, fails to limit the number of characters it can handle, which could lead to Memory Exhaustion. In `lib/parse.js,` if a malicious user sends "imbalanced braces" as input, the parsing will enter a loop, which will cause the program to start allocating heap memory without freeing it at any moment of the loop. Eventually, the JavaScript heap limit is reached, and the program will crash.
Solution(s)
suse-upgrade-pgadmin4suse-upgrade-pgadmin4-cloudsuse-upgrade-pgadmin4-desktopsuse-upgrade-pgadmin4-docsuse-upgrade-pgadmin4-web-uwsgisuse-upgrade-system-user-pgadminsuse-upgrade-system-user-velociraptorsuse-upgrade-velociraptorsuse-upgrade-velociraptor-client

NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.