Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
oraclelinuxOracleLinuxELSA-2023-0321
HistoryJan 24, 2023 - 12:00 a.m.

nodejs and nodejs-nodemon security, bug fix, and enhancement update

2023-01-2400:00:00
linux.oracle.com
136

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

73.9%

JSON

nodejs
[1:16.18.1-3]

  • Update sources of undici WASM blobs
    Resolves: rhbz#2151617
    [1:16.18.1-2]
  • Add back libs and v8-devel subpackages
  • Related: RHBZ#2121126
  • Record previously fixed CVE
  • Resolves: CVE-2021-44906
    [1:16.18.1-1]
  • Rebase + CVEs
  • Resolves: #2142808
  • Resolves: #2142826, #2131745, #2142855
    nodejs-nodemon
    [2.0.20-2]
  • Record CVE fixed in the current or previous upstream versions
  • Resolves: CVE-2021-44906
OSVersionArchitecturePackageVersionFilename
oracle linux9srcnodejs< 16.18.1-3.el9_1nodejs-16.18.1-3.el9_1.src.rpm
oracle linux9srcnodejs-nodemon< 2.0.20-2.el9_1nodejs-nodemon-2.0.20-2.el9_1.src.rpm
oracle linux9aarch64nodejs< 16.18.1-3.el9_1nodejs-16.18.1-3.el9_1.aarch64.rpm
oracle linux9noarchnodejs-docs< 16.18.1-3.el9_1nodejs-docs-16.18.1-3.el9_1.noarch.rpm
oracle linux9aarch64nodejs-full-i18n< 16.18.1-3.el9_1nodejs-full-i18n-16.18.1-3.el9_1.aarch64.rpm
oracle linux9aarch64nodejs-libs< 16.18.1-3.el9_1nodejs-libs-16.18.1-3.el9_1.aarch64.rpm
oracle linux9noarchnodejs-nodemon< 2.0.20-2.el9_1nodejs-nodemon-2.0.20-2.el9_1.noarch.rpm
oracle linux9aarch64npm< 8.19.2-1.16.18.1.3.el9_1npm-8.19.2-1.16.18.1.3.el9_1.aarch64.rpm
oracle linux9srcnodejs< 16.18.1-3.el9_1nodejs-16.18.1-3.el9_1.src.rpm
oracle linux9srcnodejs-nodemon< 2.0.20-2.el9_1nodejs-nodemon-2.0.20-2.el9_1.src.rpm
Rows per page:
1-10 of 171

Related

redhat 12
almalinux 8
osv 24
rocky 8
nessus 55
ibm 23
oraclelinux 7
prion 3
ubuntucve 3
debiancve 3
hackerone 3
redhatcve 4
openvas 19
veracode 4
githubexploit 1
cve 3
f5 2
cbl_mariner 3
altlinux 1
alpinelinux 2
mageia 2
github 2
debian 2
redos 1
ubuntu 2
suse 2
redhat
redhat
(RHSA-2023:0321) Moderate: nodejs and nodejs-nodemon security, bug fix, and enhancement update
2023-01-23 14:30:11
(RHSA-2022:8833) Moderate: nodejs:18 security, bug fix, and enhancement update
2022-12-06 15:25:28
(RHSA-2022:8832) Moderate: nodejs:18 security, bug fix, and enhancement update
2022-12-06 15:25:25
almalinux
almalinux
Moderate: nodejs and nodejs-nodemon security, bug fix, and enhancement update
2023-01-23 00:00:00
Moderate: nodejs:18 security, bug fix, and enhancement update
2022-12-06 00:00:00
Moderate: nodejs:14 security, bug fix, and enhancement update
2023-01-09 00:00:00
osv
osv
Moderate: nodejs and nodejs-nodemon security, bug fix, and enhancement update
2023-01-23 00:00:00
Moderate: nodejs and nodejs-nodemon security, bug fix, and enhancement update
2023-01-23 14:30:11
Moderate: nodejs:14 security, bug fix, and enhancement update
2023-01-09 14:24:14
rocky
rocky
nodejs and nodejs-nodemon security, bug fix, and enhancement update
2023-01-23 14:30:11
nodejs:18 security, bug fix, and enhancement update
2022-12-06 15:25:25
nodejs:18 security, bug fix, and enhancement update
2022-12-06 15:25:28
nessus
nessus
Oracle Linux 9 : nodejs / and / nodejs-nodemon (ELSA-2023-0321)
2023-01-24 00:00:00
Rocky Linux 9 : nodejs and nodejs-nodemon (RLSA-2023:0321)
2023-11-06 00:00:00
RHEL 9 : nodejs and nodejs-nodemon (RHSA-2023:0321)
2023-01-23 00:00:00
ibm
ibm
Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus are vulnerable to a remote attacker due to Node.js (CVE-2022-43548 & CVE-2022-35256)
2023-01-06 14:37:00
Security Bulletin: IBM Cognos Analytics has addressed a vulnerability (CVE-2021-44906)
2023-07-27 21:13:11
Security Bulletin: IBM Db2® Graph is vulnerable to remote execution of arbitrary commands due to Node.js CVE-2022-43548
2023-04-17 16:30:49
oraclelinux
oraclelinux
nodejs:18 security, bug fix, and enhancement update
2022-12-09 00:00:00
nodejs:18 security, bug fix, and enhancement update
2022-12-08 00:00:00
nodejs:14 security, bug fix, and enhancement update
2023-01-09 00:00:00
prion
prion
Code injection
2022-03-17 16:15:00
Design/Logic Flaw
2022-12-05 22:15:00
Denial of service
2022-10-17 20:15:00
ubuntucve
ubuntucve
CVE-2021-44906
2022-03-17 00:00:00
CVE-2022-35256
2022-12-05 00:00:00
CVE-2022-3517
2022-10-17 00:00:00
debiancve
debiancve
CVE-2021-44906
2022-03-17 16:15:00
CVE-2022-35256
2022-12-05 22:15:00
CVE-2022-3517
2022-10-17 20:15:00
hackerone
hackerone
Node.js: HTTP Request Smuggling Due to Incorrect Parsing of Header Fields
2022-08-20 03:13:30
Node.js: DNS rebinding in --inspect via invalid octal IP address
2022-09-23 19:28:01
Internet Bug Bounty: HTTP Request Smuggling Due to Incorrect Parsing of Header Fields
2023-02-28 04:55:24
redhatcve
redhatcve
CVE-2022-35256
2022-09-28 13:49:17
CVE-2022-43548
2022-11-08 07:56:08
CVE-2022-3517
2022-10-14 19:28:54
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2022:4254-1)
2022-11-29 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:4255-1)
2022-11-29 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:3967-1)
2022-11-15 00:00:00
veracode
veracode
Prototype Pollution
2022-03-18 02:42:04
Arbitrary Code Execution
2022-11-06 14:52:02
HTTP Request Smuggling
2022-09-27 22:47:16
githubexploit
githubexploit
Exploit for Prototype Pollution in Substack Minimist
2023-10-02 15:20:35
cve
cve
CVE-2021-44906
2022-03-17 16:15:00
CVE-2022-35256
2022-12-05 22:15:00
CVE-2022-3517
2022-10-17 20:15:00
f5
f5
K17011311 : NodeJS vulnerability CVE-2022-35256
2022-12-09 00:00:00
K000133494 : Node.js vulnerability CVE-2022-43548
2023-04-12 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-35256 affecting package nodejs 14.20.1-2
2022-12-27 17:55:50
CVE-2022-43548 affecting package nodejs 16.17.1-2
2022-12-19 20:12:43
CVE-2022-43548 affecting package nodejs 14.20.1-2
2022-12-27 17:55:50
altlinux
altlinux
Security fix for the ALT Linux 10 package node version 16.18.1-alt1
2023-03-18 00:00:00
alpinelinux
alpinelinux
CVE-2022-35256
2022-12-05 22:15:00
CVE-2022-43548
2022-12-05 22:15:00
mageia
mageia
Updated nodejs packages fix security vulnerability
2022-11-13 05:25:20
Updated nodejs-minimist packages fix security vulnerability
2023-02-07 03:06:39
github
github
Prototype Pollution in minimist
2022-03-18 00:01:09
minimatch ReDoS vulnerability
2022-10-18 12:00:32
debian
debian
[SECURITY] [DLA 3271-1] node-minimatch security update
2023-01-15 15:25:44
[SECURITY] [DLA 3344-1] nodejs security update
2023-02-26 01:17:34
redos
redos
ROS-20230504-03
2023-05-04 00:00:00
ubuntu
ubuntu
minimatch vulnerability
2023-05-18 00:00:00
Node.js vulnerabilities
2023-11-21 00:00:00
suse
suse
Security update for nodejs14 (moderate)
2022-10-18 00:00:00
Security update for nodejs10 (moderate)
2022-11-01 00:00:00

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

73.9%

JSON
Related for ELSA-2023-0321
redhat12almalinux8osv24rocky8nessus55ibm23oraclelinux7prion3ubuntucve3debiancve3hackerone3redhatcve4openvas19veracode4githubexploit1cve3f52cbl_mariner3altlinux1alpinelinux2mageia2github2debian2redos1ubuntu2suse2