3.2

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-qmq6-f8pr-cx5x

GHSA-qmq6-f8pr-cx5x: Duplicate Advisory: uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided

Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-w5hq-g745-h8pq. This link is maintained to preserve external references.

Original Advisory

uuid before 14.0.0 can make unexpected writes when external output buffers are used, and the UUID version is 3, 5, or 6. In particular, UUID version 4, which is very commonly used, is unaffected by this issue.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-qmq6-f8pr-cx5x

GHSA-qmq6-f8pr-cx5x:

3.2

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
uuid	npm	< 14.0.0	14.0.0

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability, as described, is a missing buffer bounds check in the uuid library when generating v3, v5, or v6 UUIDs and providing an external buffer. The analysis of the provided commit 3d2c5b0342f0fcb52a5ac681c3d47c13e7444b34 confirms this. The commit shows modifications to src/v35.ts and src/v6.ts. The function v35 in src/v35.ts is responsible for creating both v3 and v5 UUIDs, and the function v6 in src/v6.ts handles v6 UUIDs. In both files, the patch adds a crucial if condition to check if the provided offset would cause a write beyond the boundaries of the buf array. If the check fails, a RangeError is thrown, thus preventing the buffer overflow. The test files (src/test/v35.test.ts and src/test/v6.test.ts) were also updated to include tests for these new RangeError conditions, further confirming the nature of the fix and the location of the vulnerability.

Vulnerable functions

v35

src/v35.ts

The function `v35` is used for generating v3 and v5 UUIDs. It takes an optional buffer `buf` and an `offset` to write the generated UUID into. The vulnerability lies in the fact that prior to the patch, there was no validation to ensure that the provided `offset` and the 16 bytes of the UUID would fit within the provided `buf`. This could lead to a buffer overflow if a small buffer or a large offset is provided, causing a write out of bounds.

v6

src/v6.ts

The function `v6` is used for generating v6 UUIDs. Similar to `v35`, it accepts an optional buffer `buf` and an `offset`. The vulnerability is identical: no bounds check was performed before writing the 16-byte UUID to the buffer at the given offset. This could result in a buffer overflow.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.