vulnerability

SUSE: CVE-2024-4068: SUSE Linux Security Advisory

Severity
8
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:C)
Published
May 14, 2024
Added
Oct 30, 2024
Modified
Feb 20, 2025

Description

The NPM package `braces`, versions prior to 3.0.3, fails to limit the number of characters it can handle, which could lead to Memory Exhaustion. In `lib/parse.js,` if a malicious user sends "imbalanced braces" as input, the parsing will enter a loop, which will cause the program to start allocating heap memory without freeing it at any moment of the loop. Eventually, the JavaScript heap limit is reached, and the program will crash.

Solution(s)

suse-upgrade-pgadmin4suse-upgrade-pgadmin4-cloudsuse-upgrade-pgadmin4-desktopsuse-upgrade-pgadmin4-docsuse-upgrade-pgadmin4-web-uwsgisuse-upgrade-system-user-pgadminsuse-upgrade-system-user-velociraptorsuse-upgrade-velociraptorsuse-upgrade-velociraptor-client
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.