PT-2025-21252 · Node.Js +4 · Node.Js +4

🗓️ 01 Jan 2025 00:00:00Reported by Positive TechnologiesType

ptsecurity

ptsecurity🔗 dbugs.ptsecurity.com👁 2 Views

Vulnerable Node.js function may lead to corrupted pointer, no fix available yet.

Reporter	Title	Published	Views	Family All 264
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to Node.js (CVE-2025-23165 & CVE-2025-23166) )	7 Aug 202513:42	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in NodeJS affect IBM Business Automation Workflow Configuration Editor	11 Sep 202511:41	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Planning Analytics Advanced Certified Containers	14 Nov 202520:49	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability affects IBM watsonx Orchestrate with watsonx Assistant Cartridge	11 Sep 202514:16	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Documentation Offline is vulnerable to `Node.js ReadFileUtf8 and HTTP Parser flaws` due to Node.js (CVE-2025-23165, CVE-2025-23167)	9 Dec 202510:59	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM watsonx Orchestrate with watsonx Assistant Cartridge	10 Sep 202520:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operands are vulnerable to denial of service [CVE-2025-23166]	6 Aug 202511:19	–	ibm
Tenable Nessus	Amazon Linux 2023 : nodejs22, nodejs22-devel, nodejs22-full-i18n (ALAS2023-2025-1009)	12 Jun 202500:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : nodejs20, nodejs20-devel, nodejs20-full-i18n (ALAS2023-2025-1010)	12 Jun 202500:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0090: nodejs:20 (ALINUX3-SA-2025:0090)	23 Jun 202500:00	–	nessus

Source	Link
security-tracker	www.security-tracker.debian.org/tracker/CVE-2025-23165
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
security-tracker	www.security-tracker.debian.org/tracker/source-package/nodejs
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-23165
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-23166
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
ubuntu	www.ubuntu.com/security/CVE-2025-23165
errata	www.errata.rockylinux.org/RLSA-2025:8468
osv	www.osv.dev/vulnerability/BELL-CVE-2025-23165

11 Jun 2025 00:00Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.13.7

CVSS 37.5

EPSS0.0056

SSVC

node.js vulnerability corrupted pointer debian linux no fix available