(RHSA-2024:1678) Important: nodejs security update

2024-04-0415:58:25

access.redhat.com

node.js

security update

unprocessed http request

dos attacks

cvss score

cve page

software development

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

JSON

Node.js is a software development platform for building fast and scalable
network applications in the JavaScript programming language.

Security Fix(es):

nodejs: reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks (CVE-2024-22019)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat9s390xnodejs-libs< 16.20.2-4.el9_2nodejs-libs-16.20.2-4.el9_2.s390x.rpm
RedHat9noarchnodejs-docs< 16.20.2-4.el9_2nodejs-docs-16.20.2-4.el9_2.noarch.rpm
RedHat9s390xnodejs-debugsource< 16.20.2-4.el9_2nodejs-debugsource-16.20.2-4.el9_2.s390x.rpm
RedHat9x86_64nodejs-libs-debuginfo< 16.20.2-4.el9_2nodejs-libs-debuginfo-16.20.2-4.el9_2.x86_64.rpm
RedHat9ppc64lenodejs-debugsource< 16.20.2-4.el9_2nodejs-debugsource-16.20.2-4.el9_2.ppc64le.rpm
RedHat9x86_64npm< 8.19.4-1.16.20.2.4.el9_2npm-8.19.4-1.16.20.2.4.el9_2.x86_64.rpm
RedHat9aarch64nodejs-libs-debuginfo< 16.20.2-4.el9_2nodejs-libs-debuginfo-16.20.2-4.el9_2.aarch64.rpm
RedHat9aarch64nodejs-full-i18n< 16.20.2-4.el9_2nodejs-full-i18n-16.20.2-4.el9_2.aarch64.rpm
RedHat9aarch64nodejs-debuginfo< 16.20.2-4.el9_2nodejs-debuginfo-16.20.2-4.el9_2.aarch64.rpm
RedHat9aarch64nodejs-libs< 16.20.2-4.el9_2nodejs-libs-16.20.2-4.el9_2.aarch64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	9	s390x	nodejs-libs	< 16.20.2-4.el9_2	nodejs-libs-16.20.2-4.el9_2.s390x.rpm
RedHat	9	noarch	nodejs-docs	< 16.20.2-4.el9_2	nodejs-docs-16.20.2-4.el9_2.noarch.rpm
RedHat	9	s390x	nodejs-debugsource	< 16.20.2-4.el9_2	nodejs-debugsource-16.20.2-4.el9_2.s390x.rpm
RedHat	9	x86_64	nodejs-libs-debuginfo	< 16.20.2-4.el9_2	nodejs-libs-debuginfo-16.20.2-4.el9_2.x86_64.rpm
RedHat	9	ppc64le	nodejs-debugsource	< 16.20.2-4.el9_2	nodejs-debugsource-16.20.2-4.el9_2.ppc64le.rpm
RedHat	9	x86_64	npm	< 8.19.4-1.16.20.2.4.el9_2	npm-8.19.4-1.16.20.2.4.el9_2.x86_64.rpm
RedHat	9	aarch64	nodejs-libs-debuginfo	< 16.20.2-4.el9_2	nodejs-libs-debuginfo-16.20.2-4.el9_2.aarch64.rpm
RedHat	9	aarch64	nodejs-full-i18n	< 16.20.2-4.el9_2	nodejs-full-i18n-16.20.2-4.el9_2.aarch64.rpm
RedHat	9	aarch64	nodejs-debuginfo	< 16.20.2-4.el9_2	nodejs-debuginfo-16.20.2-4.el9_2.aarch64.rpm
RedHat	9	aarch64	nodejs-libs	< 16.20.2-4.el9_2	nodejs-libs-16.20.2-4.el9_2.aarch64.rpm