CVE-2024-21490 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2024-21490 Interim 1 8 2026-03-05T02:51:57Z current 2024-02-27T00:14:27Z 2026-03-05T02:51:57Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2024-21490 This affects versions of the package angular from 1.3.0. A regular expression used to split the value of the ng-srcset directive is vulnerable to super-linear runtime due to backtracking. With large carefully-crafted input, this can result in catastrophic backtracking and cause a denial of service. **Note:** This package is EOL and will not receive any updates to address this issue. Users should migrate to [@angular/core](https://www.npmjs.com/package/@angular/core). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Micro 5.5 SUSE Linux Enterprise Server 16.0 cockpit cockpit-bridge cockpit-dashboard cockpit-devel cockpit-doc cockpit-firewalld cockpit-kdump cockpit-networkmanager cockpit-packagekit cockpit-selinux cockpit-storaged cockpit-system cockpit-ws cockpit-ws-selinux cockpit as a component of SUSE Linux Enterprise Micro 5.1 cockpit-bridge as a component of SUSE Linux Enterprise Micro 5.1 cockpit-dashboard as a component of SUSE Linux Enterprise Micro 5.1 cockpit-system as a component of SUSE Linux Enterprise Micro 5.1 cockpit-ws as a component of SUSE Linux Enterprise Micro 5.1 cockpit as a component of SUSE Linux Enterprise Micro 5.2 cockpit-bridge as a component of SUSE Linux Enterprise Micro 5.2 cockpit-system as a component of SUSE Linux Enterprise Micro 5.2 cockpit-ws as a component of SUSE Linux Enterprise Micro 5.2 cockpit as a component of SUSE Linux Enterprise Micro 5.3 cockpit-bridge as a component of SUSE Linux Enterprise Micro 5.3 cockpit-networkmanager as a component of SUSE Linux Enterprise Micro 5.3 cockpit-selinux as a component of SUSE Linux Enterprise Micro 5.3 cockpit-storaged as a component of SUSE Linux Enterprise Micro 5.3 cockpit-system as a component of SUSE Linux Enterprise Micro 5.3 cockpit-ws as a component of SUSE Linux Enterprise Micro 5.3 cockpit as a component of SUSE Linux Enterprise Micro 5.4 cockpit-bridge as a component of SUSE Linux Enterprise Micro 5.4 cockpit-networkmanager as a component of SUSE Linux Enterprise Micro 5.4 cockpit-selinux as a component of SUSE Linux Enterprise Micro 5.4 cockpit-storaged as a component of SUSE Linux Enterprise Micro 5.4 cockpit-system as a component of SUSE Linux Enterprise Micro 5.4 cockpit-ws as a component of SUSE Linux Enterprise Micro 5.4 cockpit as a component of SUSE Linux Enterprise Micro 5.5 cockpit-bridge as a component of SUSE Linux Enterprise Micro 5.5 cockpit-networkmanager as a component of SUSE Linux Enterprise Micro 5.5 cockpit-selinux as a component of SUSE Linux Enterprise Micro 5.5 cockpit-storaged as a component of SUSE Linux Enterprise Micro 5.5 cockpit-system as a component of SUSE Linux Enterprise Micro 5.5 cockpit-ws as a component of SUSE Linux Enterprise Micro 5.5 cockpit as a component of SUSE Linux Enterprise Server 16.0 cockpit-bridge as a component of SUSE Linux Enterprise Server 16.0 cockpit-devel as a component of SUSE Linux Enterprise Server 16.0 cockpit-doc as a component of SUSE Linux Enterprise Server 16.0 cockpit-firewalld as a component of SUSE Linux Enterprise Server 16.0 cockpit-kdump as a component of SUSE Linux Enterprise Server 16.0 cockpit-networkmanager as a component of SUSE Linux Enterprise Server 16.0 cockpit-packagekit as a component of SUSE Linux Enterprise Server 16.0 cockpit-selinux as a component of SUSE Linux Enterprise Server 16.0 cockpit-storaged as a component of SUSE Linux Enterprise Server 16.0 cockpit-system as a component of SUSE Linux Enterprise Server 16.0 cockpit-ws as a component of SUSE Linux Enterprise Server 16.0 cockpit-ws-selinux as a component of SUSE Linux Enterprise Server 16.0 This affects versions of the package angular from 1.3.0. A regular expression used to split the value of the ng-srcset directive is vulnerable to super-linear runtime due to backtracking. With large carefully-crafted input, this can result in catastrophic backtracking and cause a denial of service. **Note:** This package is EOL and will not receive any updates to address this issue. Users should migrate to [@angular/core](https://www.npmjs.com/package/@angular/core). CVE-2024-21490 SUSE Linux Enterprise Micro 5.1:cockpit SUSE Linux Enterprise Micro 5.1:cockpit-bridge SUSE Linux Enterprise Micro 5.1:cockpit-dashboard SUSE Linux Enterprise Micro 5.1:cockpit-system SUSE Linux Enterprise Micro 5.1:cockpit-ws SUSE Linux Enterprise Micro 5.2:cockpit SUSE Linux Enterprise Micro 5.2:cockpit-bridge SUSE Linux Enterprise Micro 5.2:cockpit-system SUSE Linux Enterprise Micro 5.2:cockpit-ws SUSE Linux Enterprise Micro 5.3:cockpit SUSE Linux Enterprise Micro 5.3:cockpit-bridge SUSE Linux Enterprise Micro 5.3:cockpit-networkmanager SUSE Linux Enterprise Micro 5.3:cockpit-selinux SUSE Linux Enterprise Micro 5.3:cockpit-storaged SUSE Linux Enterprise Micro 5.3:cockpit-system SUSE Linux Enterprise Micro 5.3:cockpit-ws SUSE Linux Enterprise Micro 5.4:cockpit SUSE Linux Enterprise Micro 5.4:cockpit-bridge SUSE Linux Enterprise Micro 5.4:cockpit-networkmanager SUSE Linux Enterprise Micro 5.4:cockpit-selinux SUSE Linux Enterprise Micro 5.4:cockpit-storaged SUSE Linux Enterprise Micro 5.4:cockpit-system SUSE Linux Enterprise Micro 5.4:cockpit-ws SUSE Linux Enterprise Micro 5.5:cockpit SUSE Linux Enterprise Micro 5.5:cockpit-bridge SUSE Linux Enterprise Micro 5.5:cockpit-networkmanager SUSE Linux Enterprise Micro 5.5:cockpit-selinux SUSE Linux Enterprise Micro 5.5:cockpit-storaged SUSE Linux Enterprise Micro 5.5:cockpit-system SUSE Linux Enterprise Micro 5.5:cockpit-ws SUSE Linux Enterprise Server 16.0:cockpit SUSE Linux Enterprise Server 16.0:cockpit-bridge SUSE Linux Enterprise Server 16.0:cockpit-devel SUSE Linux Enterprise Server 16.0:cockpit-doc SUSE Linux Enterprise Server 16.0:cockpit-firewalld SUSE Linux Enterprise Server 16.0:cockpit-kdump SUSE Linux Enterprise Server 16.0:cockpit-networkmanager SUSE Linux Enterprise Server 16.0:cockpit-packagekit SUSE Linux Enterprise Server 16.0:cockpit-selinux SUSE Linux Enterprise Server 16.0:cockpit-storaged SUSE Linux Enterprise Server 16.0:cockpit-system SUSE Linux Enterprise Server 16.0:cockpit-ws SUSE Linux Enterprise Server 16.0:cockpit-ws-selinux important 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H