CVE-2024-3566
EUVD-2024-3215210.04.2024, 16:15
A command inject vulnerability allows an attacker to perform command injection on Windows applications that indirectly depend on the CreateProcess function when the specific conditions are satisfied.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| golang | go | * |
| haskell | process_library | 1.6.19.0 |
| nodejs | node.js | 𝑥 ≤ 21.7.2 |
| php | php | * |
| rust-lang | rust | 1.77.2 |
| yt-dlp_project | yt-dlp | * |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| nodejs | nodejs | 𝑥 ≤ 21.7.2 | ADP |
| haskell | process_library | 𝑥 < 1.6.19.0 | ADP |
| rust-lang | rust | 𝑥 < 1.77.2 | ADP |
| thephpgroup | thephpgroup | 𝑥 < * | ADP |
| yt-dlp_project | yt-dlp | 𝑥 < * | ADP |
Debian Releases
References