CVE-2015-0278

10

HIGHCVSS v2

Published

May 18, 2015

Affected

8 projects

Assigned by

Red Hat

Severity scale

010

Description

libuv before 0.10.34 does not properly drop group privileges, which allows context-dependent attackers to gain privileges via unspecified vectors.

libuv/libuv

GitHubCross-platform asynchronous I/O

<= 0.10.33NVD

nodejs

Python Package IndexPython bindings and utils for Node.js and io.js

< 0.10.37NVD

nodejs

NPM

More on this CVE

NVD↗GitHub Advisory↗

< 0.10.37NVD

Node.js

NuGet GalleryNode.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient. Node.js' package ecosystem, npm, is the largest ecosystem of open source libraries in the world.

< 0.10.37NVD

fedora

NPMDigital Repository Ireland - fedora backend operations

= 21NVD

fedora

RubyGemsSet of capistrano recipies for automating creation of Fedora servers.

= 21NVD

libuv

RubyGemsAn opinionated wrapper around libuv for Ruby

<= 0.10.33NVD

cotag/libuv

GitHubRuby bindings for libuv

<= 0.10.33NVD

Security Advisories

CVE-2015-0278

Description

More on this CVE