Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2018:2944
HistoryOct 18, 2018 - 7:19 a.m.

(RHSA-2018:2944) Important: rh-nodejs6-nodejs security update

2018-10-1807:19:51
access.redhat.com
49

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.016 Low

EPSS

Percentile

87.5%

JSON

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.

Security Fix(es):

  • nodejs: Out of bounds (OOB) write via UCS-2 encoding (CVE-2018-12115)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat6x86_64rh-nodejs6-nodejs-debuginfo< 6.11.3-6.el6rh-nodejs6-nodejs-debuginfo-6.11.3-6.el6.x86_64.rpm
RedHat7s390xrh-nodejs6-nodejs-devel< 6.11.3-7.el7rh-nodejs6-nodejs-devel-6.11.3-7.el7.s390x.rpm
RedHat7s390xrh-nodejs6-nodejs-debuginfo< 6.11.3-7.el7rh-nodejs6-nodejs-debuginfo-6.11.3-7.el7.s390x.rpm
RedHat7ppc64lerh-nodejs6-nodejs< 6.11.3-7.el7rh-nodejs6-nodejs-6.11.3-7.el7.ppc64le.rpm
RedHat7aarch64rh-nodejs6-nodejs-devel< 6.11.3-7.el7rh-nodejs6-nodejs-devel-6.11.3-7.el7.aarch64.rpm
RedHat6x86_64rh-nodejs6-nodejs< 6.11.3-6.el6rh-nodejs6-nodejs-6.11.3-6.el6.x86_64.rpm
RedHat7s390xrh-nodejs6-nodejs< 6.11.3-7.el7rh-nodejs6-nodejs-6.11.3-7.el7.s390x.rpm
RedHat7noarchrh-nodejs6-nodejs-docs< 6.11.3-7.el7rh-nodejs6-nodejs-docs-6.11.3-7.el7.noarch.rpm
RedHat7x86_64rh-nodejs6-nodejs-debuginfo< 6.11.3-7.el7rh-nodejs6-nodejs-debuginfo-6.11.3-7.el7.x86_64.rpm
RedHat7x86_64rh-nodejs6-nodejs< 6.11.3-7.el7rh-nodejs6-nodejs-6.11.3-7.el7.x86_64.rpm
Rows per page:
1-10 of 171

Related

debiancve 1
osv 2
alpinelinux 1
nessus 17
prion 1
redhatcve 1
veracode 2
ibm 11
openvas 11
ubuntucve 1
cve 1
suse 3
altlinux 1
redhat 4
f5 1
freebsd 1
nodejsblog 1
ubuntu 1
mageia 1
gentoo 1
debiancve
debiancve
CVE-2018-12115
2018-08-21 12:29:00
osv
osv
CVE-2018-12115
2018-08-21 12:29:00
nodejs vulnerabilities
2021-03-15 21:18:37
alpinelinux
alpinelinux
CVE-2018-12115
2018-08-21 12:29:00
nessus
nessus
RHEL 6 / 7 : rh-nodejs6-nodejs (RHSA-2018:2944)
2024-04-27 00:00:00
openSUSE Security Update : nodejs8 (openSUSE-2019-718)
2019-03-27 00:00:00
openSUSE Security Update : nodejs6 (openSUSE-2018-1041)
2018-09-25 00:00:00
prion
prion
Design/Logic Flaw
2018-08-21 12:29:00
redhatcve
redhatcve
CVE-2018-12115
2019-10-22 05:58:44
veracode
veracode
Out-of-Bounds (OOB) Write
2018-08-17 07:37:44
Out-of-Bounds (OOB) Write
2019-01-15 09:26:04
ibm
ibm
Security Bulletin: IBM DataPower Gateway is affected by a Denial of Service vulnerability (CVE-2018-12115)
2018-11-08 05:10:01
Security Bulletin: Multiple vulnerabilities were identified in Node.js that affect IBM Cloud App Management V2018
2019-02-15 11:35:01
Security Bulletin: Multiple Security Vulnerabilities affect IBM® Cloud Private (CVE-2018-0732, CVE-2018-12115, CVE-2018-7166, CVE-2018-0737)
2018-12-17 18:10:01
openvas
openvas
Node.js < 10.9.0, < 8.11.4, < 6.14.4 OOB Write Vulnerability - Mac OS X
2018-08-27 00:00:00
Node.js < 10.9.0, < 8.11.4, < 6.14.4 OOB Write Vulnerability - Windows
2018-08-27 00:00:00
SUSE: Security Advisory (SUSE-SU-2018:2796-1)
2021-06-09 00:00:00
ubuntucve
ubuntucve
CVE-2018-12115
2018-08-21 00:00:00
cve
cve
CVE-2018-12115
2018-08-21 12:29:00
suse
suse
Security update for nodejs8 (moderate)
2018-09-25 15:12:31
Security update for nodejs4 (moderate)
2018-09-08 12:14:51
Security update for nodejs6 (moderate)
2018-09-24 12:15:49
altlinux
altlinux
Security fix for the ALT Linux 10 package node version 8.11.4-alt1
2018-08-29 00:00:00
redhat
redhat
(RHSA-2018:2552) Moderate: Red Hat OpenShift Application Runtimes Node.js 8.11.4 security update
2018-08-22 21:04:23
(RHSA-2018:3537) Critical: OpenShift Container Platform 3.11 security update
2018-11-20 03:01:27
(RHSA-2018:2553) Moderate: Red Hat OpenShift Application Runtimes Node.js 10.9.0 security update
2018-08-22 21:04:25
f5
f5
K000137093 : Node.js vulnerabilities CVE-2018-7167, CVE-2018-12115, and CVE-2018-12116
2023-10-02 00:00:00
freebsd
freebsd
node.js -- multiple vulnerabilities
2018-08-16 00:00:00
nodejsblog
nodejsblog
August 2018 Security Releases
2018-08-11 00:00:00
ubuntu
ubuntu
Node.js vulnerabilities
2021-03-15 00:00:00
mageia
mageia
Updated nodejs packages fix security vulnerabilities
2019-09-15 16:24:16
gentoo
gentoo
Node.js: Multiple vulnerabilities
2020-03-20 00:00:00

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.016 Low

EPSS

Percentile

87.5%

JSON
Related for RHSA-2018:2944
debiancve1osv2alpinelinux1nessus17prion1redhatcve1veracode2ibm11openvas11ubuntucve1cve1suse3altlinux1redhat4f51freebsd1nodejsblog1ubuntu1mageia1gentoo1