Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2024-24806— Improper Domain Lookup that potentially leads to SSRF attacks in libuv

Quick assessment

Affected
libuv libuv
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

libuv是一个nodejs的跨平台异步IO库。该平台用于抽象 Windows 的 IOCP 及 Unix 的 libev。目前支持的特性有非阻塞；TCP 套接字 ；非阻塞命名管道 ；UDP； 定时器 ；子进程生成；实现异步 DNS ；异步文件系统；正在运行程序路径查找； 线程池调度；TTY控制的ANSI转义代码；文件系统事件；进程间的 IPC 与套接字共享。 libuv 1.48.0之前版本存在代码问题漏洞，该漏洞源于允许攻击者制作解析为非预期IP地址的有效载荷，从而绕过开发人员检查，可能会受到服务器端

CVSS 7.3 · High EPSS 2.00% · P80
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2024-24806

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Improper Domain Lookup that potentially leads to SSRF attacks in libuv
Source: CVE Program / CVE List V5
Vulnerability Description
libuv is a multi-platform support library with a focus on asynchronous I/O. The `uv_getaddrinfo` function in `src/unix/getaddrinfo.c` (and its windows counterpart `src/win/getaddrinfo.c`), truncates hostnames to 256 characters before calling `getaddrinfo`. This behavior can be exploited to create addresses like `0x00007f000001`, which are considered valid by `getaddrinfo` and could allow an attacker to craft payloads that resolve to unintended IP addresses, bypassing developer checks. The vulnerability arises due to how the `hostname_ascii` variable (with a length of 256 bytes) is handled in `uv_getaddrinfo` and subsequently in `uv__idna_toascii`. When the hostname exceeds 256 characters, it gets truncated without a terminating null byte. As a result attackers may be able to access internal APIs or for websites (similar to MySpace) that allows users to have `username.example.com` pages. Internal services that crawl or cache these user pages can be exposed to SSRF attacks if a malicious user chooses a long vulnerable username. This issue has been addressed in release version 1.48.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
服务端请求伪造(SSRF)
Source: CVE Program / CVE List V5
Vulnerability Title
libuv 代码问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
libuv是一个nodejs的跨平台异步IO库。该平台用于抽象 Windows 的 IOCP 及 Unix 的 libev。目前支持的特性有非阻塞；TCP 套接字 ；非阻塞命名管道 ；UDP； 定时器 ；子进程生成；实现异步 DNS ；异步文件系统；正在运行程序路径查找； 线程池调度；TTY控制的ANSI转义代码；文件系统事件；进程间的 IPC 与套接字共享。 libuv 1.48.0之前版本存在代码问题漏洞，该漏洞源于允许攻击者制作解析为非预期IP地址的有效载荷，从而绕过开发人员检查，可能会受到服务器端
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
libuv libuv >= 1.45.0, < 1.48.0 -

II. Public POCs for CVE-2024-24806

# POC Description Source Link Shenlong Link
AI-Generated POC Verified env Premium
Qwen3.6-35B-A3B · 9730 chars
Pro+ exclusive includes:
Vulnerability reproduction recording (real sandbox build + trigger, exclusive)
In-depth vulnerability mechanism
Trigger conditions & impact
Full executable POC code
Exploit chain & mitigation
POC zip download
100+ AI POC generations per month

III. Intelligence Information for CVE-2024-24806

请登录查看更多情报信息。

Patches & Fixes for CVE-2024-24806 (4)

Vendor Advisories for CVE-2024-24806 (2)

Mailing List Discussions for CVE-2024-24806 (3)

Other References for CVE-2024-24806 (1)

IV. Related Vulnerabilities

Same weakness: CWE-918

V. Comments for CVE-2024-24806

No comments yet

Leave a comment