Node.js was affected by OpenSSL vulnerability CVE-2017-3737 in regards to the use of SSL_read() due to TLS handshake failure. The result was that an active network attacker could send application data to Node.js using the TLS or HTTP2 modules in a way that bypassed TLS authentication and encryption.

CPENameOperatorVersion
nodejseq6.11.0-r0
nodejseq4.4.5-r0
nodejseq6.10.3-r0
nodejseq4.4.3-r0
nodeeq9.1.0
nodejseq6.11.2-r0
nodejseq6.11.4-r0
nodejseq6.11.4-r2
nodejseq6.9.4-r0
nodejseq4.4.7-r0

Name	Operator	Version
nodejs	eq	6.11.0-r0
nodejs	eq	4.4.5-r0
nodejs	eq	6.10.3-r0
nodejs	eq	4.4.3-r0
node	eq	9.1.0
nodejs	eq	6.11.2-r0
nodejs	eq	6.11.4-r0
nodejs	eq	6.11.4-r2
nodejs	eq	6.9.4-r0
nodejs	eq	4.4.7-r0

Rows per page:

1-10 of 361

References

nodejs.org/en/blog/vulnerability/december-2017-security-releases/

ubuntucve 2

f5 2

alpinelinux 2

prion 2

redhatcve 2

cve 2

debiancve 2

nodejsblog 1

nessus 48

freebsd 3

veracode 2

altlinux 6

openvas 24

openssl 1

ibm 59

osv 2

aix 1

seebug 1

ics 1

photon 4

slackware 1

ubuntu 1

symantec 1

debian 1

oraclelinux 3

redhat 4

centos 1

freebsd_advisory 1

gentoo 1

archlinux 1

suse 4

amazon 2

mageia 1

oracle 4

ubuntucve

CVE-2017-15896

2017-12-11 00:00:00

CVE-2017-3737

2017-12-07 00:00:00

K18364001 : Node.js vulnerability CVE-2017-15896

2018-05-09 00:00:00

K43452233 : OpenSSL vulnerability CVE-2017-3737

2018-01-26 00:00:00

alpinelinux

CVE-2017-15896

2017-12-11 21:29:00

CVE-2017-3737

2017-12-07 16:29:00

prion

Design/Logic Flaw

2017-12-11 21:29:00

Design/Logic Flaw

2017-12-07 16:29:00

redhatcve

CVE-2017-15896

2017-12-12 16:20:11

CVE-2017-3737

2017-12-08 07:49:46

cve

CVE-2017-15896

2017-12-11 21:29:00

CVE-2017-3737

2017-12-07 16:29:00

debiancve

CVE-2017-15896

2017-12-11 21:29:00

CVE-2017-3737

2017-12-07 16:29:00

nodejsblog

Data Confidentiality/Integrity Vulnerability, December 2017

2017-12-08 00:00:00

nessus

FreeBSD : node.js -- Data Confidentiality/Integrity Vulnerability, December 2017 (bea84a7a-e0c9-11e7-b4f3-11baa0c2df21)

2017-12-15 00:00:00

openSUSE Security Update : nodejs6 (openSUSE-2018-116)

2018-02-01 00:00:00

SUSE SLES12 Security Update : nodejs6 (SUSE-SU-2018:0293-1)

2019-01-02 00:00:00

freebsd

node.js -- Data Confidentiality/Integrity Vulnerability, December 2017

2017-12-08 00:00:00

OpenSSL -- multiple vulnerabilities

2017-12-07 00:00:00

FreeBSD -- OpenSSL multiple vulnerabilities

2017-12-09 00:00:00

veracode

Authentication Bypass

2017-12-14 05:07:09

Denial Of Service (DoS) Through Error State

2018-04-23 07:59:53

altlinux

Security fix for the ALT Linux 10 package node version 6.13.0-alt1

2018-02-27 00:00:00

Security fix for the ALT Linux 8 package openssl10 version 1.0.2n-alt1

2017-12-07 00:00:00

Security fix for the ALT Linux 9 package openssl1.1 version 1.0.2n-alt1

2017-12-07 00:00:00

openvas

SUSE: Security Advisory (SUSE-SU-2018:0293-1)

2021-06-09 00:00:00

SUSE: Security Advisory (SUSE-SU-2018:0002-1)

2021-06-09 00:00:00

OpenSSL Security Bypass Vulnerability (Dec 2017) - Linux

2017-12-08 00:00:00

openssl

Vulnerability in OpenSSL CVE-2017-3737

2017-12-07 00:00:00

ibm

Security Bulletin: OpenSSL Vulnerability affects IBM Spectrum Protect Snapshot (formerly Tivoli Storage FlashCopy Manager) for VMware (CVE-2017-3737)

2022-02-01 11:19:59

Security Bulletin: Vulnerability in OpenSSL affects AIX (CVE-2017-3737)

2021-09-15 12:14:52

Security Bulletin: OpenSSL Vulnerability affects IBM Spectrum Protect Snapshot (formerly Tivoli Storage FlashCopy Manager) for Unix (CVE-2017-3737)

2022-02-01 11:19:59

osv

CVE-2017-3737

2017-12-07 16:29:00

openssl1.0 - security update

2017-12-17 00:00:00

aix

Vulnerability in OpenSSL affects AIX (CVE-2017-3737)

2018-01-29 10:36:55

seebug

An Analysis of the OpenSSL SSL Handshake Error State Security Bypass (CVE-2017-3737)

2018-01-15 00:00:00

ics

Siemens OpenSSL Vulnerability in Industrial Products (Update E)

2019-04-09 12:00:00

photon

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-0010-A

2018-01-06 00:00:00

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-1.0-0097-A

2018-01-06 00:00:00

Moderate Photon OS Security Update - PHSA-2018-0010

2018-01-06 00:00:00

slackware

[slackware-security] openssl

2017-12-09 03:52:34

ubuntu

OpenSSL vulnerabilities

2017-12-11 00:00:00

symantec

SA159: OpenSSL Vulnerabilities 7-Dec-2017

2018-01-16 08:00:00

debian

[SECURITY] [DSA 4065-1] openssl1.0 security update

2017-12-17 13:59:51

oraclelinux

openssl security and bug fix update

2018-04-16 00:00:00

openssl security update

2018-04-18 00:00:00

openssl security update

2019-03-13 00:00:00

redhat

(RHSA-2018:0998) Moderate: openssl security and bug fix update

2018-04-10 05:05:23

(RHSA-2018:2187) Moderate: Red Hat JBoss Core Services Apache HTTP Server 2.4.29 security update

2018-07-12 16:04:13

(RHSA-2018:2186) Moderate: Red Hat JBoss Core Services Apache HTTP Server 2.4.29 RHEL 6 security update

2018-07-12 16:04:10

centos

openssl security update

2018-04-26 17:48:29

freebsd_advisory

FreeBSD-SA-17:12.openssl

2017-12-09 00:00:00

gentoo

OpenSSL: Multiple vulnerabilities

2017-12-14 00:00:00

archlinux

[ASA-201712-11] lib32-openssl-1.0: multiple issues

2017-12-17 00:00:00

suse

Security update for openssl (important)

2017-12-16 06:08:45

Security update for openssl (important)

2017-12-16 15:07:17

Security update for virtualbox (important)

2018-04-24 03:20:04

amazon

Medium: openssl

2018-05-10 17:29:00

Medium: openssl

2018-04-26 17:38:00

mageia

Updated openssl packages fix security vulnerabilities

2017-12-17 02:20:04

oracle

Oracle Critical Patch Update - April 2018

2018-04-17 00:00:00

Oracle Critical Patch Update - January 2018

2018-01-16 00:00:00

Oracle Critical Patch Update Advisory - July 2019

2019-07-16 00:00:00

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

7.7 High

AI Score

Confidence

High

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.946 High

EPSS

Percentile

99.2%

JSON

Related for OSV:CVE-2017-15896