CVE-2018-12115

🗓️ 21 Aug 2018 13:00:00Reported by nodejsType

Node.js prior to 6.14.4, 8.11.4 and 10.9.0 allows Buffer#write() abus

Reporter	Title	Published	Views	Family All 118
IBM Security Bulletins	Security Bulletin: IBM API Connect has addressed multiple vulnerabilities in Developer Portal's dependencies - Cumulative list from June 28, 2018 to December 13, 2018	28 Jan 201917:05	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities in IBM SDK for Node.js might affect the configuration editor used by IBM Business Automation Workflow and Business Process Manager (BPM)	14 Sep 202215:02	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities were identified in Node.js that affect IBM Cloud App Management V2018	15 Feb 201911:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect is affected by OpenSSL vulnerabilities (CVE-2018-0732 CVE-2018-12115 CVE-2018-7166 CVE-2018-0737)	23 Oct 201815:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Local is affected by multiple Node.js vulnerabilities	13 Nov 201815:55	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Node.js affect IBM Integration Bus & IBM App Connect Enterprise V11	20 Nov 201812:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM® SDK for Node.js™ in IBM Cloud	11 Sep 201818:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect is affected by multiple third-party vulnerabilities (Node.js, nghttp2, Linux, Intel CPU, Android)	31 Oct 201820:10	–	ibm
IBM Security Bulletins	Security Bulletin: Node.js as used in IBM QRadar Packet Capture is susceptible to multiple vulnerabilities	7 Nov 201815:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DataPower Gateway is affected by a Denial of Service vulnerability (CVE-2018-12115)	8 Nov 201805:10	–	ibm

NVD

Node

nodejs node.jsRange<6.14.4

nodejs node.jsRange8.0.0–8.11.4

nodejs node.jsRange10.0.0–10.9.0

Node

redhat openshift_container_platformMatch3.11

[
  {
    "product": "Node.js",
    "vendor": "The Node.js Project",
    "versions": [
      {
        "status": "affected",
        "version": "All versions of Node.js prior to 6.14.4, 8.11.4 and 10.9.0"
      }
    ]
  }
]

Source	Link
access	www.access.redhat.com/errata/RHSA-2018:3537
access	www.access.redhat.com/errata/RHSA-2018:2944
access	www.access.redhat.com/errata/RHSA-2018:2552
securityfocus	www.securityfocus.com/bid/105127
nodejs	www.nodejs.org/en/blog/vulnerability/august-2018-security-releases/
security	www.security.gentoo.org/glsa/202003-48
access	www.access.redhat.com/errata/RHSA-2018:2949
access	www.access.redhat.com/errata/RHSA-2018:2553

21 Nov 2024 03:44Current

6.6Medium risk

Vulners AI Score6.6

CVSS 25

CVSS 37.5

EPSS0.00797

CWE-787