CVE-2024-27933: Deno arbitrary file descriptor close via `op_node_ipc_pipe()` leading to permission prompt bypass
(updated )
Use of raw file descriptors in op_node_ipc_pipe() leads to premature close of arbitrary file descriptors, allowing standard input to be re-opened as a different resource resulting in permission prompt bypass.
References
- github.com/advisories/GHSA-6q4w-9x56-rmwq
- github.com/denoland/deno
- github.com/denoland/deno/blob/v1.39.0/runtime/permissions/prompter.rs
- github.com/denoland/deno/blob/v1.39.0/runtime/permissions/prompter.rs
- github.com/denoland/deno/blob/v1.39.0/runtime/permissions/prompter.rs
- github.com/denoland/deno/blob/v1.39.0/runtime/permissions/prompter.rs
- github.com/denoland/deno/blob/v1.39.0/runtime/permissions/prompter.rs
- github.com/denoland/deno/blob/v1.39.0/runtime/permissions/prompter.rs
- github.com/denoland/deno/blob/v1.39.0/runtime/permissions/prompter.rs
- github.com/denoland/deno/commit/55fac9f5ead6d30996400e8597c969b675c5a22b
- github.com/denoland/deno/commit/5a91a065b882215dde209baf626247e54c21a392
- github.com/denoland/deno/security/advisories/GHSA-6q4w-9x56-rmwq
- nvd.nist.gov/vuln/detail/CVE-2024-27933
Code Behaviors & Features
Detect and mitigate CVE-2024-27933 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →