Alpine Linux Development TeamALPINE:CVE-2023-39333CVE-2023-39333
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
AI Score
Confidence
High
EPSS
Percentile
9.5%
Maliciously crafted export names in an imported WebAssembly module can inject JavaScript code. The injected code may be able to access data and functions that the WebAssembly module itself does not have access to, similar to as if the WebAssembly module was a JavaScript module.
This vulnerability affects users of any active release line of Node.js. The vulnerable feature is only available if Node.js is started with the --experimental-wasm-modules command line option.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | edge-community | noarch | nodejs-current | < 20.8.1-r0 | UNKNOWN |
| Alpine | edge-main | noarch | nodejs | < 18.18.2-r0 | UNKNOWN |
| Alpine | 3.17-main | noarch | nodejs | < 18.18.2-r0 | UNKNOWN |
| Alpine | 3.18-community | noarch | nodejs-current | < 20.8.1-r0 | UNKNOWN |
| Alpine | 3.18-main | noarch | nodejs | < 18.18.2-r0 | UNKNOWN |
| Alpine | 3.19-community | noarch | nodejs-current | < 20.8.1-r0 | UNKNOWN |
| Alpine | 3.19-main | noarch | nodejs | < 18.18.2-r0 | UNKNOWN |
| Alpine | 3.20-community | noarch | nodejs-current | < 20.8.1-r0 | UNKNOWN |
| Alpine | 3.20-main | noarch | nodejs | < 18.18.2-r0 | UNKNOWN |
Related
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
AI Score
Confidence
High
EPSS
Percentile
9.5%