Alpine Linux Development TeamALPINE:CVE-2024-27982CVE-2024-27982
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
6.2 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.0%
The team has identified a critical vulnerability in the http server of the most recent version of Node, where malformed headers can lead to HTTP request smuggling. Specifically, if a space is placed before a content-length header, it is not interpreted correctly, enabling attackers to smuggle in a second request within the body of the first.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | edge-community | noarch | nodejs-current | < 21.7.2-r0 | UNKNOWN |
| Alpine | edge-main | noarch | nodejs | < 20.12.1-r0 | UNKNOWN |
| Alpine | 3.17-main | noarch | nodejs | < 18.20.1-r0 | UNKNOWN |
| Alpine | 3.18-main | noarch | nodejs | < 18.20.1-r0 | UNKNOWN |
| Alpine | 3.19-community | noarch | nodejs-current | < 21.7.2-r0 | UNKNOWN |
| Alpine | 3.19-main | noarch | nodejs | < 20.12.1-r0 | UNKNOWN |
| Alpine | 3.20-community | noarch | nodejs-current | < 21.7.2-r0 | UNKNOWN |
| Alpine | 3.20-main | noarch | nodejs | < 20.12.1-r0 | UNKNOWN |
Related
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
6.2 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.0%