Lucene search

RedHatRHSA-2024:2779

HistoryMay 09, 2024 - 5:32 a.m.

(RHSA-2024:2779) Important: nodejs:18 security update

2024-05-0905:32:17

access.redhat.com

node.js

security

update

cve

dos

http request smuggling

fetch()

cvss score

7.4 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

14.9%

JSON

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.

Security Fix(es):

nodejs: CONTINUATION frames DoS (CVE-2024-27983)
nodejs: using the fetch() function to retrieve content from an untrusted URL leads to denial of service (CVE-2024-22025)
nodejs: HTTP Request Smuggling via Content Length Obfuscation (CVE-2024-27982)
nghttp2: CONTINUATION frames DoS (CVE-2024-28182)
c-ares: Out of bounds read in ares__read_line() (CVE-2024-25629)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanyaarch64nodejs-debugsource< 18.20.2-2.module+el9.4.0+21742+692df1eanodejs-debugsource-18.20.2-2.module+el9.4.0+21742+692df1ea.aarch64.rpm
RedHatanys390xnodejs-full-i18n< 18.20.2-2.module+el9.4.0+21742+692df1eanodejs-full-i18n-18.20.2-2.module+el9.4.0+21742+692df1ea.s390x.rpm
RedHatanyppc64lenodejs< 18.20.2-2.module+el9.4.0+21742+692df1eanodejs-18.20.2-2.module+el9.4.0+21742+692df1ea.ppc64le.rpm
RedHatanys390xnodejs< 18.20.2-2.module+el9.4.0+21742+692df1eanodejs-18.20.2-2.module+el9.4.0+21742+692df1ea.s390x.rpm
RedHatanyppc64lenodejs-full-i18n< 18.20.2-2.module+el9.4.0+21742+692df1eanodejs-full-i18n-18.20.2-2.module+el9.4.0+21742+692df1ea.ppc64le.rpm
RedHatanyppc64lenodejs-debuginfo< 18.20.2-2.module+el9.4.0+21742+692df1eanodejs-debuginfo-18.20.2-2.module+el9.4.0+21742+692df1ea.ppc64le.rpm
RedHatanyppc64lenpm< 10.5.0-1.18.20.2.2.module+el9.4.0+21742+692df1eanpm-10.5.0-1.18.20.2.2.module+el9.4.0+21742+692df1ea.ppc64le.rpm
RedHatanyaarch64nodejs< 18.20.2-2.module+el9.4.0+21742+692df1eanodejs-18.20.2-2.module+el9.4.0+21742+692df1ea.aarch64.rpm
RedHatanyx86_64nodejs-full-i18n< 18.20.2-2.module+el9.4.0+21742+692df1eanodejs-full-i18n-18.20.2-2.module+el9.4.0+21742+692df1ea.x86_64.rpm
RedHatanyaarch64nodejs-full-i18n< 18.20.2-2.module+el9.4.0+21742+692df1eanodejs-full-i18n-18.20.2-2.module+el9.4.0+21742+692df1ea.aarch64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	aarch64	nodejs-debugsource	< 18.20.2-2.module+el9.4.0+21742+692df1ea	nodejs-debugsource-18.20.2-2.module+el9.4.0+21742+692df1ea.aarch64.rpm
RedHat	any	s390x	nodejs-full-i18n	< 18.20.2-2.module+el9.4.0+21742+692df1ea	nodejs-full-i18n-18.20.2-2.module+el9.4.0+21742+692df1ea.s390x.rpm
RedHat	any	ppc64le	nodejs	< 18.20.2-2.module+el9.4.0+21742+692df1ea	nodejs-18.20.2-2.module+el9.4.0+21742+692df1ea.ppc64le.rpm
RedHat	any	s390x	nodejs	< 18.20.2-2.module+el9.4.0+21742+692df1ea	nodejs-18.20.2-2.module+el9.4.0+21742+692df1ea.s390x.rpm
RedHat	any	ppc64le	nodejs-full-i18n	< 18.20.2-2.module+el9.4.0+21742+692df1ea	nodejs-full-i18n-18.20.2-2.module+el9.4.0+21742+692df1ea.ppc64le.rpm
RedHat	any	ppc64le	nodejs-debuginfo	< 18.20.2-2.module+el9.4.0+21742+692df1ea	nodejs-debuginfo-18.20.2-2.module+el9.4.0+21742+692df1ea.ppc64le.rpm
RedHat	any	ppc64le	npm	< 10.5.0-1.18.20.2.2.module+el9.4.0+21742+692df1ea	npm-10.5.0-1.18.20.2.2.module+el9.4.0+21742+692df1ea.ppc64le.rpm
RedHat	any	aarch64	nodejs	< 18.20.2-2.module+el9.4.0+21742+692df1ea	nodejs-18.20.2-2.module+el9.4.0+21742+692df1ea.aarch64.rpm
RedHat	any	x86_64	nodejs-full-i18n	< 18.20.2-2.module+el9.4.0+21742+692df1ea	nodejs-full-i18n-18.20.2-2.module+el9.4.0+21742+692df1ea.x86_64.rpm
RedHat	any	aarch64	nodejs-full-i18n	< 18.20.2-2.module+el9.4.0+21742+692df1ea	nodejs-full-i18n-18.20.2-2.module+el9.4.0+21742+692df1ea.aarch64.rpm

Rows per page:

1-10 of 281