[Bug 1224308] New: VUL-0: CVE-2024-4068: traefik: the npm package `braces` fails to limit the number of characters it can handle, which could lead to Memory Exhaustion
https://bugzilla.suse.com/show_bug.cgi?id=1224308 Bug ID: 1224308 Summary: VUL-0: CVE-2024-4068: traefik: the npm package `braces` fails to limit the number of characters it can handle, which could lead to Memory Exhaustion Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/405385/ OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Security Assignee: alexandre.vicenzi@suse.com Reporter: smash_bz@suse.de QA Contact: security-team@suse.de CC: gabriele.sonnu@suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- The NPM package `braces` fails to limit the number of characters it can handle, which could lead to Memory Exhaustion. In `lib/parse.js,` if a malicious user sends "imbalanced braces" as input, the parsing will enter a loop, which will cause the program to start allocating heap memory without freeing it at any moment of the loop. Eventually, the JavaScript heap limit is reached, and the program will crash. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-4068 https://www.cve.org/CVERecord?id=CVE-2024-4068 https://devhub.checkmarx.com/cve-details/CVE-2024-4068/ https://github.com/micromatch/braces/blob/98414f9f1fabe021736e26836d8306d5de... https://github.com/micromatch/braces/issues/35 -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1224308 SMASH SMASH <smash_bz@suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard| |CVSSv3.1:SUSE:CVE-2024-4068 | |:7.5:(AV:N/AC:L/PR:N/UI:N/S | |:U/C:N/I:N/A:H) -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1224308 https://bugzilla.suse.com/show_bug.cgi?id=1224308#c1 Gabriele Sonnu <gabriele.sonnu@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1224256 --- Comment #1 from Gabriele Sonnu <gabriele.sonnu@suse.com> --- A vulnerable version (3.0.2) of the braces package is embedded in: - openSUSE:Factory/traefik Upstream issue: https://github.com/micromatch/braces/issues/35 -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1224308 Maintenance Automation <maint-coord+maintenance-robot@suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1224308 https://bugzilla.suse.com/show_bug.cgi?id=1224308#c3 Alexandre Vicenzi <alexandre.vicenzi@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|alexandre.vicenzi@suse.com |security-team@suse.de --- Comment #3 from Alexandre Vicenzi <alexandre.vicenzi@suse.com> --- This is fixed. -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1224308 https://bugzilla.suse.com/show_bug.cgi?id=1224308#c4 Johannes Weberhofer <jweberhofer@weberhofer.at> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jweberhofer@weberhofer.at --- Comment #4 from Johannes Weberhofer <jweberhofer@weberhofer.at> --- Is not yet fixed in traefik 3.1.1 and traefik 2.11.7 -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1224308 https://bugzilla.suse.com/show_bug.cgi?id=1224308#c5 Johannes Weberhofer <jweberhofer@weberhofer.at> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #5 from Johannes Weberhofer <jweberhofer@weberhofer.at> --- Fixed in https://build.opensuse.org/request/show/1192169 and https://build.opensuse.org/request/show/1192168 -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠suse.com