Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2024-21521
PUBLISHED
More InfoOfficial Page
Assigner-snyk
Assigner Org ID-bae035ff-b466-4ff4-94d0-fc9efd9e1730
View Known Exploited Vulnerability (KEV) details
Published At-10 Jul, 2024 | 05:00
Updated At-26 Jan, 2025 | 16:12
Rejected At-
▼CVE Numbering Authority (CNA)

All versions of the package @discordjs/opus are vulnerable to Denial of Service (DoS) due to providing an input object with a property toString to several different functions. Exploiting this vulnerability could lead to a system crash.

Affected Products
Vendor
n/a
Product
@discordjs/opus
Versions
Affected
  • From 0 before * (semver)
Problem Types
TypeCWE IDDescription
N/AN/ADenial of Service (DoS)
Type: N/A
CWE ID: N/A
Description: Denial of Service (DoS)
Metrics
VersionBase scoreBase severityVector
3.17.5HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P
Version: 3.1
Base score: 7.5
Base severity: HIGH
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Alessio Della Libera
Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
https://security.snyk.io/vuln/SNYK-JS-DISCORDJSOPUS-6370643
N/A
https://github.com/discordjs/opus/blob/814e500c2785c5207ace19650192629beba2728b/src/node-opus.cc%23L47
N/A
https://gist.github.com/dellalibera/98c48fd74bb240adbd7841a5c02aba9e
N/A
Hyperlink: https://security.snyk.io/vuln/SNYK-JS-DISCORDJSOPUS-6370643
Resource: N/A
Hyperlink: https://github.com/discordjs/opus/blob/814e500c2785c5207ace19650192629beba2728b/src/node-opus.cc%23L47
Resource: N/A
Hyperlink: https://gist.github.com/dellalibera/98c48fd74bb240adbd7841a5c02aba9e
Resource: N/A
▼Authorized Data Publishers (ADP)
1. CISA ADP Vulnrichment
Affected Products
Vendor
discordjs_opus
Product
discordjs_opus
CPEs
  • cpe:2.3:a:discordjs_opus:discordjs_opus:*:*:*:*:*:*:*:*
Default Status
unknown
Versions
Affected
  • From 0 through * (custom)
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
2. CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
https://security.snyk.io/vuln/SNYK-JS-DISCORDJSOPUS-6370643
x_transferred
https://github.com/discordjs/opus/blob/814e500c2785c5207ace19650192629beba2728b/src/node-opus.cc%23L47
x_transferred
https://gist.github.com/dellalibera/98c48fd74bb240adbd7841a5c02aba9e
x_transferred
Hyperlink: https://security.snyk.io/vuln/SNYK-JS-DISCORDJSOPUS-6370643
Resource:
x_transferred
Hyperlink: https://github.com/discordjs/opus/blob/814e500c2785c5207ace19650192629beba2728b/src/node-opus.cc%23L47
Resource:
x_transferred
Hyperlink: https://gist.github.com/dellalibera/98c48fd74bb240adbd7841a5c02aba9e
Resource:
x_transferred
Details not found