Lucene search
GoogleOSV:CVE-2021-23555HistoryFeb 11, 2022 - 8:15 p.m.
CVE-2021-23555
2022-02-1120:15:07
Google
osv.dev
14
package vulnerability
sandbox bypass
arbitrary code execution
node internals
stacktraces
host machine
The package vm2 before 3.9.6 are vulnerable to Sandbox Bypass via direct access to host error objects generated by node internals during generation of a stacktraces, which can lead to execution of arbitrary code on the host machine.
Related
github
github
Sandbox bypass in vm2
2022-02-12 00:00:38
veracode
veracode
Arbitrary Code Execution
2022-02-14 10:31:02
prion
prion
Improper access control
2022-02-11 20:15:00
ibm
ibm
osv
osv
Sandbox bypass in vm2
2022-02-12 00:00:38
cve
cve
CVE-2021-23555
2022-02-11 20:15:07
redhatcve
redhatcve
CVE-2021-23555
2022-02-14 09:55:25
cvelist
cvelist
CVE-2021-23555 Sandbox Bypass
2022-02-11 20:00:14
nvd
nvd
CVE-2021-23555
2022-02-11 20:15:07
redhat
redhat