CVE-2023-32558 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2023-32558 Interim 1 9 2025-05-17T00:47:08Z current 2023-08-10T23:16:23Z 2025-05-17T00:47:08Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2023-32558 The use of the deprecated API `process.binding()` can bypass the permission model through path traversal. This vulnerability affects all users using the experimental permission model in Node.js 20.x. Please note that at the time this CVE was issued, the permission model is an experimental feature of Node.js. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Module for Web and Scripting 15 SP4 SUSE Linux Enterprise Module for Web and Scripting 15 SP5 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Module for Web and Scripting 15 SP4 SUSE Linux Enterprise Module for Web and Scripting 15 SP5 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Module for Web and Scripting 15 SP4 SUSE Linux Enterprise Module for Web and Scripting 15 SP5 SUSE Linux Enterprise Module for Web and Scripting 15 SP4 SUSE Linux Enterprise Module for Web and Scripting 15 SP4 SUSE Manager Server 4.2 SUSE Linux Enterprise Module for Web and Scripting 15 SP4 openSUSE Tumbleweed corepack20-20.5.1-1.1 nodejs12 nodejs12-devel nodejs12-docs nodejs14 nodejs14-devel nodejs14-docs nodejs16 nodejs16-devel nodejs16-docs nodejs18 nodejs18-devel nodejs18-docs nodejs20-20.5.1-1.1 nodejs20-devel-20.5.1-1.1 nodejs20-docs-20.5.1-1.1 npm12 npm14 npm16 npm18 npm20-20.5.1-1.1 corepack20-20.5.1-1.1 as a component of openSUSE Tumbleweed nodejs20-20.5.1-1.1 as a component of openSUSE Tumbleweed nodejs20-devel-20.5.1-1.1 as a component of openSUSE Tumbleweed nodejs20-docs-20.5.1-1.1 as a component of openSUSE Tumbleweed npm20-20.5.1-1.1 as a component of openSUSE Tumbleweed nodejs12 as a component of SUSE Enterprise Storage 7.1 nodejs12-devel as a component of SUSE Enterprise Storage 7.1 nodejs12-docs as a component of SUSE Enterprise Storage 7.1 npm12 as a component of SUSE Enterprise Storage 7.1 nodejs14 as a component of SUSE Enterprise Storage 7.1 nodejs14-devel as a component of SUSE Enterprise Storage 7.1 nodejs14-docs as a component of SUSE Enterprise Storage 7.1 npm14 as a component of SUSE Enterprise Storage 7.1 nodejs16 as a component of SUSE Enterprise Storage 7.1 nodejs16-devel as a component of SUSE Enterprise Storage 7.1 nodejs16-docs as a component of SUSE Enterprise Storage 7.1 npm16 as a component of SUSE Enterprise Storage 7.1 nodejs12 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS nodejs12-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS nodejs12-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS npm12 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS nodejs14 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS nodejs14-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS nodejs14-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS npm14 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS nodejs12 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS nodejs12-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS nodejs12-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS npm12 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS nodejs14 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS nodejs14-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS nodejs14-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS npm14 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS nodejs16 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS nodejs16-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS nodejs16-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS npm16 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS nodejs12 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS nodejs12-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS nodejs12-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS npm12 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS nodejs14 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS nodejs14-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS nodejs14-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS npm14 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS nodejs16 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS nodejs16-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS nodejs16-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS npm16 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS nodejs12 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 nodejs12-devel as a component of SUSE Linux Enterprise Module for Web and Scripting 12 nodejs12-docs as a component of SUSE Linux Enterprise Module for Web and Scripting 12 npm12 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 nodejs14 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 nodejs14-devel as a component of SUSE Linux Enterprise Module for Web and Scripting 12 nodejs14-docs as a component of SUSE Linux Enterprise Module for Web and Scripting 12 npm14 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 nodejs16 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 nodejs16-devel as a component of SUSE Linux Enterprise Module for Web and Scripting 12 nodejs16-docs as a component of SUSE Linux Enterprise Module for Web and Scripting 12 npm16 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 nodejs18 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 nodejs18-devel as a component of SUSE Linux Enterprise Module for Web and Scripting 12 nodejs18-docs as a component of SUSE Linux Enterprise Module for Web and Scripting 12 npm18 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 nodejs16 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 nodejs16-devel as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 nodejs16-docs as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 npm16 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 nodejs18 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 nodejs18-devel as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 nodejs18-docs as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 npm18 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP4 nodejs18 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 nodejs18-devel as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 nodejs18-docs as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 npm18 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 nodejs12 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs12-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs12-docs as a component of SUSE Linux Enterprise Server 15 SP2-LTSS npm12 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs14 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs14-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs14-docs as a component of SUSE Linux Enterprise Server 15 SP2-LTSS npm14 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs12 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS nodejs12-devel as a component of SUSE Linux Enterprise Server 15 SP3-LTSS nodejs12-docs as a component of SUSE Linux Enterprise Server 15 SP3-LTSS npm12 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS nodejs14 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS nodejs14-devel as a component of SUSE Linux Enterprise Server 15 SP3-LTSS nodejs14-docs as a component of SUSE Linux Enterprise Server 15 SP3-LTSS npm14 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS nodejs16 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS nodejs16-devel as a component of SUSE Linux Enterprise Server 15 SP3-LTSS nodejs16-docs as a component of SUSE Linux Enterprise Server 15 SP3-LTSS npm16 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS nodejs12 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 nodejs12-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 nodejs12-docs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 npm12 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 nodejs14 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 nodejs14-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 nodejs14-docs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 npm14 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 nodejs12 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 nodejs12-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 nodejs12-docs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 npm12 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 nodejs14 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 nodejs14-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 nodejs14-docs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 npm14 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 nodejs16 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 nodejs16-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 nodejs16-docs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 npm16 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 nodejs12 as a component of SUSE Manager Server 4.2 nodejs12-devel as a component of SUSE Manager Server 4.2 nodejs12-docs as a component of SUSE Manager Server 4.2 npm12 as a component of SUSE Manager Server 4.2 nodejs14 as a component of SUSE Manager Server 4.2 nodejs14-devel as a component of SUSE Manager Server 4.2 nodejs14-docs as a component of SUSE Manager Server 4.2 npm14 as a component of SUSE Manager Server 4.2 nodejs16 as a component of SUSE Manager Server 4.2 nodejs16-devel as a component of SUSE Manager Server 4.2 nodejs16-docs as a component of SUSE Manager Server 4.2 npm16 as a component of SUSE Manager Server 4.2 The use of the deprecated API `process.binding()` can bypass the permission model through path traversal. This vulnerability affects all users using the experimental permission model in Node.js 20.x. Please note that at the time this CVE was issued, the permission model is an experimental feature of Node.js. CVE-2023-32558 openSUSE Tumbleweed:corepack20-20.5.1-1.1 openSUSE Tumbleweed:nodejs20-20.5.1-1.1 openSUSE Tumbleweed:nodejs20-devel-20.5.1-1.1 openSUSE Tumbleweed:nodejs20-docs-20.5.1-1.1 openSUSE Tumbleweed:npm20-20.5.1-1.1 SUSE Enterprise Storage 7.1:nodejs12 SUSE Enterprise Storage 7.1:nodejs12-devel SUSE Enterprise Storage 7.1:nodejs12-docs SUSE Enterprise Storage 7.1:nodejs14 SUSE Enterprise Storage 7.1:nodejs14-devel SUSE Enterprise Storage 7.1:nodejs14-docs SUSE Enterprise Storage 7.1:nodejs16 SUSE Enterprise Storage 7.1:nodejs16-devel SUSE Enterprise Storage 7.1:nodejs16-docs SUSE Enterprise Storage 7.1:npm12 SUSE Enterprise Storage 7.1:npm14 SUSE Enterprise Storage 7.1:npm16 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:nodejs12 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:nodejs12-devel SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:nodejs12-docs SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:nodejs14 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:nodejs14-devel SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:nodejs14-docs SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:npm12 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:npm14 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:nodejs12 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:nodejs12-devel SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:nodejs12-docs SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:nodejs14 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:nodejs14-devel SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:nodejs14-docs SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:nodejs16 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:nodejs16-devel SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:nodejs16-docs SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:npm12 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:npm14 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:npm16 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nodejs12 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nodejs12-devel SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nodejs12-docs SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nodejs14 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nodejs14-devel SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nodejs14-docs SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nodejs16 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nodejs16-devel SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nodejs16-docs SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:npm12 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:npm14 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:npm16 SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12 SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-docs SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14 SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-docs SUSE Linux Enterprise Module for Web and Scripting 12:nodejs16 SUSE Linux Enterprise Module for Web and Scripting 12:nodejs16-devel SUSE Linux Enterprise Module for Web and Scripting 12:nodejs16-docs SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18 SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-devel SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-docs SUSE Linux Enterprise Module for Web and Scripting 12:npm12 SUSE Linux Enterprise Module for Web and Scripting 12:npm14 SUSE Linux Enterprise Module for Web and Scripting 12:npm16 SUSE Linux Enterprise Module for Web and Scripting 12:npm18 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:nodejs16 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:nodejs16-devel SUSE Linux Enterprise Module for Web and Scripting 15 SP4:nodejs16-docs SUSE Linux Enterprise Module for Web and Scripting 15 SP4:nodejs18 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:nodejs18-devel SUSE Linux Enterprise Module for Web and Scripting 15 SP4:nodejs18-docs SUSE Linux Enterprise Module for Web and Scripting 15 SP4:npm16 SUSE Linux Enterprise Module for Web and Scripting 15 SP4:npm18 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-devel SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-docs SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm18 SUSE Linux Enterprise Server 15 SP2-LTSS:nodejs12 SUSE Linux Enterprise Server 15 SP2-LTSS:nodejs12-devel SUSE Linux Enterprise Server 15 SP2-LTSS:nodejs12-docs SUSE Linux Enterprise Server 15 SP2-LTSS:nodejs14 SUSE Linux Enterprise Server 15 SP2-LTSS:nodejs14-devel SUSE Linux Enterprise Server 15 SP2-LTSS:nodejs14-docs SUSE Linux Enterprise Server 15 SP2-LTSS:npm12 SUSE Linux Enterprise Server 15 SP2-LTSS:npm14 SUSE Linux Enterprise Server 15 SP3-LTSS:nodejs12 SUSE Linux Enterprise Server 15 SP3-LTSS:nodejs12-devel SUSE Linux Enterprise Server 15 SP3-LTSS:nodejs12-docs SUSE Linux Enterprise Server 15 SP3-LTSS:nodejs14 SUSE Linux Enterprise Server 15 SP3-LTSS:nodejs14-devel SUSE Linux Enterprise Server 15 SP3-LTSS:nodejs14-docs SUSE Linux Enterprise Server 15 SP3-LTSS:nodejs16 SUSE Linux Enterprise Server 15 SP3-LTSS:nodejs16-devel SUSE Linux Enterprise Server 15 SP3-LTSS:nodejs16-docs SUSE Linux Enterprise Server 15 SP3-LTSS:npm12 SUSE Linux Enterprise Server 15 SP3-LTSS:npm14 SUSE Linux Enterprise Server 15 SP3-LTSS:npm16 SUSE Linux Enterprise Server for SAP Applications 15 SP2:nodejs12 SUSE Linux Enterprise Server for SAP Applications 15 SP2:nodejs12-devel SUSE Linux Enterprise Server for SAP Applications 15 SP2:nodejs12-docs SUSE Linux Enterprise Server for SAP Applications 15 SP2:nodejs14 SUSE Linux Enterprise Server for SAP Applications 15 SP2:nodejs14-devel SUSE Linux Enterprise Server for SAP Applications 15 SP2:nodejs14-docs SUSE Linux Enterprise Server for SAP Applications 15 SP2:npm12 SUSE Linux Enterprise Server for SAP Applications 15 SP2:npm14 SUSE Linux Enterprise Server for SAP Applications 15 SP3:nodejs12 SUSE Linux Enterprise Server for SAP Applications 15 SP3:nodejs12-devel SUSE Linux Enterprise Server for SAP Applications 15 SP3:nodejs12-docs SUSE Linux Enterprise Server for SAP Applications 15 SP3:nodejs14 SUSE Linux Enterprise Server for SAP Applications 15 SP3:nodejs14-devel SUSE Linux Enterprise Server for SAP Applications 15 SP3:nodejs14-docs SUSE Linux Enterprise Server for SAP Applications 15 SP3:nodejs16 SUSE Linux Enterprise Server for SAP Applications 15 SP3:nodejs16-devel SUSE Linux Enterprise Server for SAP Applications 15 SP3:nodejs16-docs SUSE Linux Enterprise Server for SAP Applications 15 SP3:npm12 SUSE Linux Enterprise Server for SAP Applications 15 SP3:npm14 SUSE Linux Enterprise Server for SAP Applications 15 SP3:npm16 SUSE Manager Server 4.2:nodejs12 SUSE Manager Server 4.2:nodejs12-devel SUSE Manager Server 4.2:nodejs12-docs SUSE Manager Server 4.2:nodejs14 SUSE Manager Server 4.2:nodejs14-devel SUSE Manager Server 4.2:nodejs14-docs SUSE Manager Server 4.2:nodejs16 SUSE Manager Server 4.2:nodejs16-devel SUSE Manager Server 4.2:nodejs16-docs SUSE Manager Server 4.2:npm12 SUSE Manager Server 4.2:npm14 SUSE Manager Server 4.2:npm16 important 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H