PT-2022-22662 · Node.Js +6 · Node.Js +6

🗓️ 23 Sep 2022 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 12 Views

Node.js version eighteen WebCrypto keygen has weak randomness; EntropySource may fail and be weak; disable keygen until patched.

Reporter	Title	Published	Views	Family All 5014
vulnersOsv	@camptocamp/closure-util (>=1.23.0, <=1.27.0), @cognigy/wndb-with-exceptions (>=3.0.1, <=3.0.3) +97 more potentially affected by CVE-2021-32803 via tar (>=3.0.0, <=3.1.15)	3 Aug 202119:00	–	vulnersosv
vulnersOsv	@adaptable/client (>=0.0.9, <=1.26.0), @adaptable/cloud (>=0.0.1, <=1.28.0) +407 more potentially affected by CVE-2021-37701 via tar (>=6.0.0, <=6.1.6)	31 Aug 202116:05	–	vulnersosv
vulnersOsv	roaring-landmask (0.4.0) potentially affected by CVE-2022-0778 via openssl-src (300.0.0+3.0.0)	15 Mar 202212:00	–	vulnersosv
vulnersOsv	@adaptable/client (>=0.0.9, <=1.26.0), @adaptable/cloud (>=0.0.1, <=1.28.0) +446 more potentially affected by CVE-2021-37713 via tar (>=6.0.0, <=6.1.8)	31 Aug 202116:05	–	vulnersosv
vulnersOsv	@bloq/create-package (1.2.0), @nrwl/insights (>=0.1.0, <=8.12.4) +21 more potentially affected by CVE-2021-37701 via tar (>=5.0.2, <=5.0.7)	31 Aug 202116:05	–	vulnersosv
vulnersOsv	@36node/sketch-cli (>=0.1.3, <=0.3.2), @adobe/commerce-cif-commercetools-cart (>=1.0.1, <=1.0.2) +324 more potentially affected by CVE-2021-37713 via tar (>=4.0.1, <=4.4.15)	31 Aug 202116:05	–	vulnersosv
vulnersOsv	@adaptable/client (>=0.0.9, <=1.26.0), @adaptable/cloud (>=0.0.1, <=1.28.0) +446 more potentially affected by CVE-2021-37712 via tar (>=6.0.0, <=6.1.8)	31 Aug 202116:05	–	vulnersosv
vulnersOsv	roaring-landmask (0.4.0) potentially affected by CVE-2022-0778 via openssl-src (300.0.0+3.0.0)	16 Mar 202200:00	–	vulnersosv
vulnersOsv	37fis (>=1.0.0, <=1.0.2), 88slot-ap (1.0.0) +950 more potentially affected by CVE-2021-37712 via tar (>=3.0.0, <=4.4.15)	31 Aug 202116:05	–	vulnersosv
vulnersOsv	@bloq/create-package (1.2.0), @nrwl/insights (>=0.1.0, <=8.12.4) +21 more potentially affected by CVE-2021-32803 via tar (>=5.0.2, <=5.0.5)	3 Aug 202119:00	–	vulnersosv

Source	Link
github	www.github.com/terorie/cve-2021-3449
github	www.github.com/riptl/cve-2021-3449
github	www.github.com/drago-96/CVE-2022-0778
github	www.github.com/yywing/cve-2022-0778
github	www.github.com/jkakavas/CVE-2022-0778-POC
github	www.github.com/masahiro331/CVE-2020-8277
github	www.github.com/MBHudson/CVE-2020-1971
hackerone	www.hackerone.com/reports/1690000
safe-surf	www.safe-surf.ru/specialists/bulletins-nkcki/673705
bdu	www.bdu.fstec.ru/vul/2022-03042

16 Dec 2024 00:00Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.19.1 - 9.8

CVSS 29.3

EPSS0.81464

SSVC