{"id":"CVE-2024-23770","aliases":["ALPINE-CVE-2024-23770","EUVD-2024-21223","GHSA-47fw-qp5q-cc27","ROOT-OS-ALPINE-318-CVE-2024-23770","ROOT-OS-ALPINE-319-CVE-2024-23770"],"status":"published","title":"darkhttpd through 1.15 allows local users to discover credentials (for --auth) by listing...","description":"darkhttpd through 1.15 allows local users to discover credentials (for --auth) by listing processes and their arguments.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00238,"percentile":0.14863,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2024-01-22T00:00:00Z","modified":"2026-11-02T11:17:50Z","fixes":[{"ecosystem":"Alpine:v3.20","package":"darkhttpd","fixed_in":["1.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"darkhttpd","fixed_in":["1.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"darkhttpd","fixed_in":["1.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"darkhttpd","fixed_in":["1.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"darkhttpd","fixed_in":["1.15-r0"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.18","package":"darkhttpd","fixed_in":["1.14-r10072","1.14-r10071","1.14-r10075","1.14-r10074","1.14-r10073"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.18","package":"rootio-darkhttpd","fixed_in":["1.14-r10072","1.14-r10071","1.14-r10075","1.14-r10074","1.14-r10073"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.19","package":"darkhttpd","fixed_in":["1.14-r10074","1.14-r10071","1.14-r10073","1.14-r10072","1.14-r10075"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.19","package":"rootio-darkhttpd","fixed_in":["1.14-r10074","1.14-r10071","1.14-r10073","1.14-r10072","1.14-r10075"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.20","package":"darkhttpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"darkhttpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"darkhttpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"darkhttpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"darkhttpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15-r0"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.18","package":"darkhttpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14-r10072"},{"fixed":"1.14-r10071"},{"fixed":"1.14-r10075"},{"fixed":"1.14-r10074"},{"fixed":"1.14-r10073"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.18","package":"rootio-darkhttpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14-r10072"},{"fixed":"1.14-r10071"},{"fixed":"1.14-r10075"},{"fixed":"1.14-r10074"},{"fixed":"1.14-r10073"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.19","package":"darkhttpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14-r10074"},{"fixed":"1.14-r10071"},{"fixed":"1.14-r10073"},{"fixed":"1.14-r10072"},{"fixed":"1.14-r10075"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.19","package":"rootio-darkhttpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14-r10074"},{"fixed":"1.14-r10071"},{"fixed":"1.14-r10073"},{"fixed":"1.14-r10072"},{"fixed":"1.14-r10075"}]}]}],"products":[{"vendor":"unix4lyfe","product":"darkhttpd"}],"references":[{"url":"https://github.com/emikulic/darkhttpd/commit/2b339828b2a42a5fda105ea84934957a7d23e35d","tags":["x_transferred","Patch","fix"]},{"url":"https://github.com/emikulic/darkhttpd/compare/v1.14...v1.15","tags":["x_transferred","Patch","web"]},{"url":"http://www.openwall.com/lists/oss-security/2024/01/25/1","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-23770","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-47fw-qp5q-cc27"},{"url":"https://security.alpinelinux.org/vuln/CVE-2024-23770","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/23xxx/CVE-2024-23770.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-23770","description":"darkhttpd through 1.15 allows local users to discover credentials (for --auth) by listing processes and their arguments.","status":"published","published":"2024-01-22T00:00:00Z","modified":"2025-05-30T14:23:22.098Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"adp"}],"updated_at":"2026-11-02T14:34:05.077718Z"}],"euvd":[{"id":"EUVD-2024-21223","description":"darkhttpd through 1.15 allows local users to discover credentials (for --auth) by listing processes and their arguments.","status":"published","published":"2024-01-22T00:00:00Z","modified":"2025-05-30T14:23:22Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T20:32:34.547192Z"}],"ghsa":[{"id":"GHSA-47fw-qp5q-cc27","title":"darkhttpd through 1.15 allows local users to discover credentials (for --auth) by listing...","description":"darkhttpd through 1.15 allows local users to discover credentials (for --auth) by listing processes and their arguments.","status":"published","published":"2024-01-22T06:30:30Z","modified":"2024-02-04T05:07:08Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T14:55:33.593991Z"}],"nvd":[{"id":"CVE-2024-23770","description":"darkhttpd through 1.15 allows local users to discover credentials (for --auth) by listing processes and their arguments.","status":"published","published":"2024-01-22T04:15:07.67Z","modified":"2026-06-17T07:13:34.153Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"}],"updated_at":"2026-11-02T14:09:32.147098Z"}],"osv":[{"id":"ALPINE-CVE-2024-23770","description":"darkhttpd through 1.15 allows local users to discover credentials (for --auth) by listing processes and their arguments.","status":"published","published":"2024-01-22T04:15:07.67Z","modified":"2026-11-02T11:17:50.074176801Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:27:49.709457Z"},{"id":"CVE-2024-23770","description":"darkhttpd through 1.15 allows local users to discover credentials (for --auth) by listing processes and their arguments.","status":"published","published":"2024-01-22T00:00:00Z","modified":"2026-10-28T10:40:14.689655183Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:38.897406Z"},{"id":"ROOT-OS-ALPINE-318-CVE-2024-23770","title":"CVE-2024-23770 in darkhttpd - Patched by Root","description":"Root has patched CVE-2024-23770 in the darkhttpd package for Root:Alpine:3.18. Multiple fixed versions available.","status":"published","published":"2026-09-29T09:38:25Z","modified":"2026-09-29T10:15:16.310493475Z","updated_at":"2026-11-02T15:53:28.259095Z"},{"id":"ROOT-OS-ALPINE-319-CVE-2024-23770","title":"CVE-2024-23770 in darkhttpd - Patched by Root","description":"Root has patched CVE-2024-23770 in the darkhttpd package for Root:Alpine:3.19. Multiple fixed versions available.","status":"published","published":"2026-09-29T09:23:36Z","modified":"2026-09-29T10:15:11.925145554Z","updated_at":"2026-11-02T15:53:28.259095Z"}]}}