Lucene search
UbuntuUSN-6457-1HistoryOct 30, 2023 - 12:00 a.m.
Node.js vulnerabilities
2023-10-3000:00:00
ubuntu.com
39
ubuntu 22.04 lts
node.js
vulnerabilities
remote code execution
denial of service
input handling
cve-2022-0778
cve-2022-1292
cve-2022-2068
cve-2022-2097
cross-platform
Releases
- Ubuntu 22.04 LTS
Packages
- nodejs - An open-source, cross-platform JavaScript runtime environment.
Details
Tavis Ormandy discovered that Node.js incorrectly handled certain inputs. If a
user or an automated system were tricked into opening a specially crafted
input file, a remote attacker could possibly use this issue to cause a
denial of service. (CVE-2022-0778)
Elison Niven discovered that Node.js incorrectly handled certain inputs. If a
user or an automated system were tricked into opening a specially crafted
input file, a remote attacker could possibly use this issue to execute
arbitrary code. (CVE-2022-1292)
Chancen and Daniel Fiala discovered that Node.js incorrectly handled certain
inputs. If a user or an automated system were tricked into opening a specially
crafted input file, a remote attacker could possibly use this issue to execute
arbitrary code. (CVE-2022-2068)
Alex Chernyakhovsky discovered that Node.js incorrectly handled certain
inputs. If a user or an automated system were tricked into opening a specially
crafted input file, a remote attacker could possibly use this issue to execute
arbitrary code. (CVE-2022-2097)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 22.04 | noarch | libnode-dev | < 12.22.9~dfsg-1ubuntu3.1 | UNKNOWN |
| Ubuntu | 22.04 | noarch | libnode72 | < 12.22.9~dfsg-1ubuntu3.1 | UNKNOWN |
| Ubuntu | 22.04 | noarch | libnode72-dbgsym | < 12.22.9~dfsg-1ubuntu3.1 | UNKNOWN |
| Ubuntu | 22.04 | noarch | nodejs | < 12.22.9~dfsg-1ubuntu3.1 | UNKNOWN |
| Ubuntu | 22.04 | noarch | nodejs-dbgsym | < 12.22.9~dfsg-1ubuntu3.1 | UNKNOWN |
| Ubuntu | 22.04 | noarch | nodejs-doc | < 12.22.9~dfsg-1ubuntu3.1 | UNKNOWN |
Related
openvas
openvas
Ubuntu: Security Advisory (USN-6457-1)
2023-10-31 00:00:00
Huawei EulerOS: Security Advisory for linux-sgx (EulerOS-SA-2022-2852)
2022-12-22 00:00:00
openSUSE: Security Advisory for openssl-1_1 (SUSE-SU-2022:2308-1)
2022-07-07 00:00:00
nessus
nessus
Ubuntu 22.04 LTS : Node.js vulnerabilities (USN-6457-1)
2023-10-30 00:00:00
EulerOS 2.0 SP10 : linux-sgx (EulerOS-SA-2022-2852)
2022-12-21 00:00:00
SUSE SLED15 / SLES15 Security Update : openssl-1_1 (SUSE-SU-2022:2308-1)
2022-07-08 00:00:00
osv
osv
nodejs vulnerabilities
2023-10-30 10:06:58
Moderate: openssl security update
2022-08-03 00:00:00
Moderate: openssl security update
2022-08-02 07:00:02
oraclelinux
oraclelinux
openssl security update
2022-08-05 00:00:00
openssl security update
2022-08-02 00:00:00
openssl security and bug fix update
2022-08-30 00:00:00
ibm
ibm
aix
aix
AIX is vulnerable to arbitrary command execution due to OpenSSL
2022-08-17 16:39:03
redhat
redhat
(RHSA-2022:5818) Moderate: openssl security update
2022-08-02 07:00:02
suse
suse
Security update for openssl-1_1 (important)
2022-07-06 00:00:00
Security update for openssl-1_0_0 (moderate)
2022-07-07 00:00:00
Security update for openssl-1_1 (moderate)
2022-07-04 00:00:00
rocky
rocky
openssl security update
2022-08-02 07:00:02
openssl security and bug fix update
2023-01-26 21:50:01
almalinux
almalinux
Moderate: openssl security update
2022-08-03 00:00:00
Moderate: openssl security and bug fix update
2022-08-30 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl1.1 version 1.1.1p-alt1
2022-06-22 00:00:00
Security fix for the ALT Linux 10 package openssl1.1 version 1.1.1p-alt1
2022-06-24 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 1.1.1q-alt1
2022-07-05 00:00:00
openssl
openssl
Vulnerability in OpenSSL CVE-2022-2068
2022-06-21 00:00:00
broadcom
broadcom
amazon
amazon
Medium: openssl
2022-07-28 21:55:00
Medium: openssl11
2022-07-28 21:55:00
Medium: openssl
2022-07-28 20:38:00
fedora
fedora
[SECURITY] Fedora 35 Update: openssl-1.1.1q-1.fc35
2022-07-23 02:27:30
[SECURITY] Fedora 36 Update: openssl-3.0.5-1.fc36
2022-07-09 01:24:48
[SECURITY] Fedora 36 Update: openssl1.1-1.1.1p-1.fc36
2022-07-06 01:38:37
cloudlinux
cloudlinux
Fixed CVEs in openssl: CVE-2022-1292, CVE-2022-2068
2022-07-14 16:53:26
ubuntucve
ubuntucve
CVE-2022-2068
2022-06-21 00:00:00
CVE-2022-2097
2022-07-05 00:00:00
cvelist
cvelist
CVE-2022-2068 The c_rehash script allows command injection
2022-06-21 00:00:00
redhatcve
redhatcve
CVE-2022-2068
2022-06-22 06:36:12
prion
prion
Command injection
2022-06-21 15:15:00
debiancve
debiancve
CVE-2022-2068
2022-06-21 15:15:00
f5
f5
K21600298 : OpenSSL vulnerabilities CVE-2022-1292 and CVE-2022-2068
2022-08-05 00:00:00
cve
cve
CVE-2022-2068
2022-06-21 15:15:00
CVE-2022-2097
2022-07-05 11:15:00
alpinelinux
alpinelinux
CVE-2022-2068
2022-06-21 15:15:00
slackware
slackware
[slackware-security] Slackware 14.2 openssl
2022-06-28 19:28:45
[slackware-security] openssl
2022-06-23 05:32:23
ics
ics
Mitsubishi Electric Multiple Factory Automation Products (Update C)
2022-11-02 12:00:00
Mitsubishi Electric Multiple Factory Automation Products (Update D)
2023-02-02 12:00:00
Mitsubishi Electric GT SoftGOT2000
2022-11-15 12:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2211
2023-08-08 08:12:52
gentoo
gentoo
OpenSSL: Multiple Vulnerabilities
2022-10-16 00:00:00
ubuntu
ubuntu
OpenSSL vulnerability
2022-07-06 00:00:00
debian
debian
[SECURITY] [DSA 5169-1] openssl security update
2022-06-26 18:26:57
rustsec
rustsec
AES OCB fails to encrypt some bytes
2022-07-05 12:00:00
cbl_mariner
cbl_mariner
CVE-2022-2068 affecting package openssl for versions less than 1.1.1k-17
2022-07-01 21:02:21
photon
photon
Moderate Photon OS Security Update - PHSA-2022-0408
2022-06-22 00:00:00
veracode
veracode
Command Injection
2022-06-22 12:42:34
nodejsblog
nodejsblog
OpenSSL update assessment, and Node.js project plans
2022-06-21 00:00:00