(RHSA-2024:4247) Moderate: libuv security update

2024-07-0213:56:08

access.redhat.com

libuv

security update

asynchronous i/o

ssrf attacks

cve-2024-24806

unix

CVSS3

7.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

AI Score

8.5

Confidence

High

JSON

libuv is a multi-platform support library with a focus on asynchronous I/O.

Security Fix(es):

libuv: Improper Domain Lookup that potentially leads to SSRF attacks (CVE-2024-24806)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat8x86_64libuv-debuginfo< 1.41.1-2.el8_10libuv-debuginfo-1.41.1-2.el8_10.x86_64.rpm
RedHat8i686libuv-debuginfo< 1.41.1-2.el8_10libuv-debuginfo-1.41.1-2.el8_10.i686.rpm
RedHat8i686libuv< 1.41.1-2.el8_10libuv-1.41.1-2.el8_10.i686.rpm
RedHat8aarch64libuv-debuginfo< 1.41.1-2.el8_10libuv-debuginfo-1.41.1-2.el8_10.aarch64.rpm
RedHat8ppc64lelibuv-devel< 1.41.1-2.el8_10libuv-devel-1.41.1-2.el8_10.ppc64le.rpm
RedHat8x86_64libuv-devel< 1.41.1-2.el8_10libuv-devel-1.41.1-2.el8_10.x86_64.rpm
RedHat8i686libuv-debugsource< 1.41.1-2.el8_10libuv-debugsource-1.41.1-2.el8_10.i686.rpm
RedHat8x86_64libuv< 1.41.1-2.el8_10libuv-1.41.1-2.el8_10.x86_64.rpm
RedHat8s390xlibuv-devel< 1.41.1-2.el8_10libuv-devel-1.41.1-2.el8_10.s390x.rpm
RedHat8s390xlibuv< 1.41.1-2.el8_10libuv-1.41.1-2.el8_10.s390x.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	8	x86_64	libuv-debuginfo	< 1.41.1-2.el8_10	libuv-debuginfo-1.41.1-2.el8_10.x86_64.rpm
RedHat	8	i686	libuv-debuginfo	< 1.41.1-2.el8_10	libuv-debuginfo-1.41.1-2.el8_10.i686.rpm
RedHat	8	i686	libuv	< 1.41.1-2.el8_10	libuv-1.41.1-2.el8_10.i686.rpm
RedHat	8	aarch64	libuv-debuginfo	< 1.41.1-2.el8_10	libuv-debuginfo-1.41.1-2.el8_10.aarch64.rpm
RedHat	8	ppc64le	libuv-devel	< 1.41.1-2.el8_10	libuv-devel-1.41.1-2.el8_10.ppc64le.rpm
RedHat	8	x86_64	libuv-devel	< 1.41.1-2.el8_10	libuv-devel-1.41.1-2.el8_10.x86_64.rpm
RedHat	8	i686	libuv-debugsource	< 1.41.1-2.el8_10	libuv-debugsource-1.41.1-2.el8_10.i686.rpm
RedHat	8	x86_64	libuv	< 1.41.1-2.el8_10	libuv-1.41.1-2.el8_10.x86_64.rpm
RedHat	8	s390x	libuv-devel	< 1.41.1-2.el8_10	libuv-devel-1.41.1-2.el8_10.s390x.rpm
RedHat	8	s390x	libuv	< 1.41.1-2.el8_10	libuv-1.41.1-2.el8_10.s390x.rpm