K63025104: NodeJS vulnerability CVE-2018-7160

🗓️ 21 Feb 2023 19:58:45Reported by f5Type

f5🔗 my.f5.com👁 46 Views

NodeJS vulnerability CVE-2018-7160: DNS rebinding attack allows remote code executio

Reporter	Title	Published	Views	Family All 137
IBM Security Bulletins	Security Bulletin: IBM API Connect has addressed multiple vulnerabilities in Developer Portal's dependencies - Cumulative list from June 28, 2018 to December 13, 2018	28 Jan 201917:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Local is affected by multiple Node.js vulnerabilities	13 Nov 201815:55	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Node.js affect IBM Integration Bus & IBM App Connect Enterprise V11	20 Nov 201812:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect is affected by multiple third-party vulnerabilities (Node.js, nghttp2, Linux, Intel CPU, Android)	31 Oct 201820:10	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities affect IBM® Cloud Private and IBM Cloud Private Cloud Foundry (CVE-2018-7158, CVE-2018-7159, CVE-2018-7160)	14 Sep 201821:30	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities in IBM® SDK for Node.js™ affect IBM® SDK for Node.js™ in IBM Cloud (CVE-2018-7158, CVE-2018-7159, CVE-2018-7160)	9 Aug 201804:20	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities in IBM SDK for Node.js might affect the configuration editor used by IBM Business Automation Workflow and Business Process Manager (BPM)	15 Sep 202219:20	–	ibm
IBM Security Bulletins	Security Bulletin: Node.js as used in IBM QRadar Packet Capture is susceptible to multiple vulnerabilities	7 Nov 201815:25	–	ibm
FreeBSD	node.js -- multiple vulnerabilities	21 Mar 201800:00	–	freebsd
Tenable Nessus	Alibaba Cloud Linux 3 : 0022: nodejs:14 (ALINUX3-SA-2021:0022)	14 May 202500:00	–	nessus

Vulners

Node

f5 big-ip_ltmRange14.1.0–14.1.0.6

OR

f5 big-ip_aamRange14.1.0–14.1.0.6

OR

f5 big-ip_afmRange14.1.0–14.1.0.6

OR

f5 big-ip_analyticsRange14.1.0–14.1.0.6

OR

f5 big-ip_apmRange14.1.0–14.1.0.6

OR

f5 big-ip_asmRange14.1.0–14.1.0.6

OR

f5 big-ip_dnsRange14.1.0–14.1.0.6

OR

f5 big-ip_fpsRange14.1.0–14.1.0.6

OR

f5 big-ip_gtmRange14.1.0–14.1.0.6

OR

f5 big-ip_link_controllerRange14.1.0–14.1.0.6

OR

f5 big-ip_pemRange14.1.0–14.1.0.6

OR

f5 big-ip_ltmRange14.0.0–14.1.0.6

OR

f5 big-ip_aamRange14.0.0–14.1.0.6

OR

f5 big-ip_afmRange14.0.0–14.1.0.6

OR

f5 big-ip_analyticsRange14.0.0–14.1.0.6

OR

f5 big-ip_apmRange14.0.0–14.1.0.6

OR

f5 big-ip_asmRange14.0.0–14.1.0.6

OR

f5 big-ip_dnsRange14.0.0–14.1.0.6

OR

f5 big-ip_fpsRange14.0.0–14.1.0.6

OR

f5 big-ip_gtmRange14.0.0–14.1.0.6

OR

f5 big-ip_link_controllerRange14.0.0–14.1.0.6

OR

f5 big-ip_pemRange14.0.0–14.1.0.6

OR

f5 big-ip_ltmRange13.1.0–13.1.2

OR

f5 big-ip_aamRange13.1.0–13.1.2

OR

f5 big-ip_afmRange13.1.0–13.1.2

OR

f5 big-ip_analyticsRange13.1.0–13.1.2

OR

f5 big-ip_apmRange13.1.0–13.1.2

OR

f5 big-ip_asmRange13.1.0–13.1.2

OR

f5 big-ip_dnsRange13.1.0–13.1.2

OR

f5 big-ip_fpsRange13.1.0–13.1.2

OR

f5 big-ip_gtmRange13.1.0–13.1.2

OR

f5 big-ip_link_controllerRange13.1.0–13.1.2

OR

f5 big-ip_pemRange13.1.0–13.1.2

OR

f5 ssl_orchestratorRange14.1.0–14.1.0.6

OR

f5 ssl_orchestratorRange14.0.0–14.1.0.6

OR

f5 ssl_orchestratorRange13.1.0–13.1.2

21 Feb 2023 19:58Current

8.7High risk

Vulners AI Score8.7

CVSS 26.8

CVSS 3.18.8

EPSS0.01501

nodejs cve-2018-7160 dns rebinding remote code execution big-ip iruleslx iappslx f5 ssl orchestrator