nodejs: multiple issues

🗓️ 05 Dec 2015 00:00:00Reported by Arch LinuxType

archlinux

archlinux🔗 lists.archlinux.org👁 50 Views

Node.js: multiple vulnerabilities including V8 out-of-bounds access and HTTP denial of servic

Reporter	Title	Published	Views	Family All 70
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Business Process Manager shipped with IBM Cloud Orchestrator and IBM SmartCloud Orchestrator	17 Jun 201822:30	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in current releases of IBM® SDK for Node.js™	9 Aug 201804:20	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in IBM SDK for Node.js affect IBM Business Process Manager Configuration Editor (CVE-2015-8027, CVE-2015-3194, CVE-2015-3195, CVE-2015-3196)	15 Jun 201807:04	–	ibm
FreeBSD	chromium -- multiple vulnerabilities	1 Dec 201500:00	–	freebsd
Tenable Nessus	Google Chrome < 47.0.2526.73 Multiple Vulnerabilities	7 Dec 201500:00	–	nessus
Tenable Nessus	Debian DSA-3415-1 : chromium-browser - security update	10 Dec 201500:00	–	nessus
Tenable Nessus	FreeBSD : chromium -- multiple vulnerabilities (548f74bd-993c-11e5-956b-00262d5ed8ee)	3 Dec 201500:00	–	nessus
Tenable Nessus	GLSA-201603-09 : Chromium: Multiple vulnerabilities	14 Mar 201600:00	–	nessus
Tenable Nessus	GLSA-201612-43 : Node.js: Multiple vulnerabilities	14 Dec 201600:00	–	nessus
Tenable Nessus	Google Chrome < 47.0.2526.73 Multiple Vulnerabilities	4 Dec 201500:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
any	any	any	nodejs	5.1.1-1	UNKNOWN

Source	Link
nodejs	www.nodejs.org/en/blog/vulnerability/december-2015-security-releases/
access	www.access.redhat.com/security/cve/CVE-2015-8027
access	www.access.redhat.com/security/cve/CVE-2015-6764

05 Dec 2015 00:00Current

1.6Low risk

Vulners AI Score1.6

EPSS0.13882

node.js v8 out-of-bounds access http denial of service vulnerability json.stringify patch upgrade