cnvd - cnvd-2018-10672

CNVD-2018-10672

Vulnerability from cnvd - Published: 2018-05-31

Title

aerospike代码执行漏洞

Description

aerospike是一套支持多款操作系统的Aerospike附加模块。 aerospike 2.4.2之前版本中存在安全漏洞，该漏洞源于程序通过HTTP协议下载二进制资源。远程攻击者可通过用其控制的二进制文件替换被请求的二进制文件利用该漏洞执行代码。

Severity

高

Patch Name

aerospike代码执行漏洞的补丁

Patch Description

aerospike是一套支持多款操作系统的Aerospike附加模块。 aerospike 2.4.2之前版本中存在安全漏洞，该漏洞源于程序通过HTTP协议下载二进制资源。远程攻击者可通过用其控制的二进制文件替换被请求的二进制文件利用该漏洞执行代码。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

目前厂商已发布升级补丁以修复漏洞，详情请关注厂商主页： https://www.npmjs.com/package/aerospike

Reference

https://nodesecurity.io/advisories/167

Impacted products

Name
Aerospike aerospike <2.4.2

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2016-10558"
    }
  },
  "description": "aerospike\u662f\u4e00\u5957\u652f\u6301\u591a\u6b3e\u64cd\u4f5c\u7cfb\u7edf\u7684Aerospike\u9644\u52a0\u6a21\u5757\u3002\r\n\r\naerospike 2.4.2\u4e4b\u524d\u7248\u672c\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u901a\u8fc7HTTP\u534f\u8bae\u4e0b\u8f7d\u4e8c\u8fdb\u5236\u8d44\u6e90\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u7528\u5176\u63a7\u5236\u7684\u4e8c\u8fdb\u5236\u6587\u4ef6\u66ff\u6362\u88ab\u8bf7\u6c42\u7684\u4e8c\u8fdb\u5236\u6587\u4ef6\u5229\u7528\u8be5\u6f0f\u6d1e\u6267\u884c\u4ee3\u7801\u3002",
  "discovererName": "Adam Baldwin",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8be6\u60c5\u8bf7\u5173\u6ce8\u5382\u5546\u4e3b\u9875\uff1a\r\nhttps://www.npmjs.com/package/aerospike",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-10672",
  "openTime": "2018-05-31",
  "patchDescription": "aerospike\u662f\u4e00\u5957\u652f\u6301\u591a\u6b3e\u64cd\u4f5c\u7cfb\u7edf\u7684Aerospike\u9644\u52a0\u6a21\u5757\u3002\r\n\r\naerospike 2.4.2\u4e4b\u524d\u7248\u672c\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u901a\u8fc7HTTP\u534f\u8bae\u4e0b\u8f7d\u4e8c\u8fdb\u5236\u8d44\u6e90\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u7528\u5176\u63a7\u5236\u7684\u4e8c\u8fdb\u5236\u6587\u4ef6\u66ff\u6362\u88ab\u8bf7\u6c42\u7684\u4e8c\u8fdb\u5236\u6587\u4ef6\u5229\u7528\u8be5\u6f0f\u6d1e\u6267\u884c\u4ee3\u7801\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "aerospike\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "Aerospike aerospike \u003c2.4.2"
  },
  "referenceLink": "https://nodesecurity.io/advisories/167",
  "serverity": "\u9ad8",
  "submitTime": "2018-05-31",
  "title": "aerospike\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e"
}

CVE-2016-10558 (GCVE-0-2016-10558)

Vulnerability from cvelistv5 – Published: 2018-05-29 20:00 – Updated: 2024-09-17 02:36

Summary

aerospike is an Aerospike add-on module for Node.js. aerospike versions below 2.4.2 download binary resources over HTTP, which leaves the module vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.

Severity ?

No CVSS data available.

CWE

CWE-311 - Missing Encryption of Sensitive Data (CWE-311)

Assigner

hackerone

References

URL

Tags

https://nodesecurity.io/advisories/167

x_refsource_MISC

Impacted products

	Vendor	Product	Version
	HackerOne	aerospike node module	Affected: <2.4.2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T03:30:18.495Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://nodesecurity.io/advisories/167"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "aerospike node module",
          "vendor": "HackerOne",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c2.4.2"
            }
          ]
        }
      ],
      "datePublic": "2018-04-26T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "aerospike is an Aerospike add-on module for Node.js. aerospike versions below 2.4.2 download binary resources over HTTP, which leaves the module vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-311",
              "description": "Missing Encryption of Sensitive Data (CWE-311)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-05-29T19:57:02",
        "orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
        "shortName": "hackerone"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://nodesecurity.io/advisories/167"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "support@hackerone.com",
          "DATE_PUBLIC": "2018-04-26T00:00:00",
          "ID": "CVE-2016-10558",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "aerospike node module",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "\u003c2.4.2"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "HackerOne"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "aerospike is an Aerospike add-on module for Node.js. aerospike versions below 2.4.2 download binary resources over HTTP, which leaves the module vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Missing Encryption of Sensitive Data (CWE-311)"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://nodesecurity.io/advisories/167",
              "refsource": "MISC",
              "url": "https://nodesecurity.io/advisories/167"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
    "assignerShortName": "hackerone",
    "cveId": "CVE-2016-10558",
    "datePublished": "2018-05-29T20:00:00Z",
    "dateReserved": "2017-10-29T00:00:00",
    "dateUpdated": "2024-09-17T02:36:42.182Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2018-10672

CVE-2016-10558 (GCVE-0-2016-10558)

Tags

Sightings

Nomenclature