CVE-2018-7166

🗓️ 21 Aug 2018 13:00:00Reported by nodejsType

In Node.js 10 before 10.9.0, argument processing flaw leads to uninitialized memory return in Buffer.alloc(

Reporter	Title	Published	Views	Family All 31
IBM Security Bulletins	Security Bulletin: Security vulnerabilities in IBM SDK for Node.js might affect the configuration editor used by IBM Business Automation Workflow and Business Process Manager (BPM)	14 Sep 202215:02	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities were identified in Node.js that affect IBM Cloud App Management V2018	15 Feb 201911:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect is affected by OpenSSL vulnerabilities (CVE-2018-0732 CVE-2018-12115 CVE-2018-7166 CVE-2018-0737)	23 Oct 201815:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Local is affected by multiple Node.js vulnerabilities	13 Nov 201815:55	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Node.js affect IBM Integration Bus & IBM App Connect Enterprise V11	20 Nov 201812:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM® SDK for Node.js™ in IBM Cloud	11 Sep 201818:41	–	ibm
IBM Security Bulletins	Security Bulletin: Node.js as used in IBM QRadar Packet Capture is susceptible to multiple vulnerabilities	7 Nov 201815:25	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities affect IBM® Cloud Private (CVE-2018-0732, CVE-2018-12115, CVE-2018-7166, CVE-2018-0737)	17 Dec 201818:10	–	ibm
CNVD	Unspecified vulnerability in Joyent Node.js (CNVD-2019-42560)	23 Aug 201800:00	–	cnvd
Cvelist	CVE-2018-7166	21 Aug 201813:00	–	cvelist

NVD

Node

nodejs node.jsRange10.0.0–10.9.0

[
  {
    "product": "Node.js",
    "vendor": "The Node.js Project",
    "versions": [
      {
        "status": "affected",
        "version": "All versions of Node.js 10 prior to 10.9.0"
      }
    ]
  }
]

Source	Link
nodejs	www.nodejs.org/en/blog/vulnerability/august-2018-security-releases/
access	www.access.redhat.com/errata/RHSA-2018:2553

21 Nov 2024 04:11Current

7.2High risk

Vulners AI Score7.2

CVSS 25

CVSS 3.17.5

EPSS0.0086