Lucene search

RedHatRHSA-2024:2910

HistoryMay 20, 2024 - 1:02 a.m.

(RHSA-2024:2910) Important: nodejs security update

2024-05-2001:02:30

access.redhat.com

node.js

denial of service

security update

network applications

javascript

cvss score

unix

fetch function

http request smuggling

out of bounds read

cvss score

acknowledgments

7.4 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.5%

JSON

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.

Security Fix(es):

nodejs: CONTINUATION frames DoS (CVE-2024-27983)
nodejs: using the fetch() function to retrieve content from an untrusted URL leads to denial of service (CVE-2024-22025)
nodejs: HTTP Request Smuggling via Content Length Obfuscation (CVE-2024-27982)
nghttp2: CONTINUATION frames DoS (CVE-2024-28182)
c-ares: Out of bounds read in ares__read_line() (CVE-2024-25629)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat9ppc64lenodejs-libs-debuginfo< 16.20.2-8.el9_4nodejs-libs-debuginfo-16.20.2-8.el9_4.ppc64le.rpm
RedHat9s390xnodejs-libs-debuginfo< 16.20.2-8.el9_4nodejs-libs-debuginfo-16.20.2-8.el9_4.s390x.rpm
RedHat9s390xnodejs< 16.20.2-8.el9_4nodejs-16.20.2-8.el9_4.s390x.rpm
RedHat9x86_64nodejs-debuginfo< 16.20.2-8.el9_4nodejs-debuginfo-16.20.2-8.el9_4.x86_64.rpm
RedHat9aarch64nodejs-libs-debuginfo< 16.20.2-8.el9_4nodejs-libs-debuginfo-16.20.2-8.el9_4.aarch64.rpm
RedHat9s390xnodejs-debuginfo< 16.20.2-8.el9_4nodejs-debuginfo-16.20.2-8.el9_4.s390x.rpm
RedHat9s390xnpm< 8.19.4-1.16.20.2.8.el9_4npm-8.19.4-1.16.20.2.8.el9_4.s390x.rpm
RedHat9ppc64lenodejs-debugsource< 16.20.2-8.el9_4nodejs-debugsource-16.20.2-8.el9_4.ppc64le.rpm
RedHat9x86_64nodejs-libs< 16.20.2-8.el9_4nodejs-libs-16.20.2-8.el9_4.x86_64.rpm
RedHat9x86_64nodejs-libs-debuginfo< 16.20.2-8.el9_4nodejs-libs-debuginfo-16.20.2-8.el9_4.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	9	ppc64le	nodejs-libs-debuginfo	< 16.20.2-8.el9_4	nodejs-libs-debuginfo-16.20.2-8.el9_4.ppc64le.rpm
RedHat	9	s390x	nodejs-libs-debuginfo	< 16.20.2-8.el9_4	nodejs-libs-debuginfo-16.20.2-8.el9_4.s390x.rpm
RedHat	9	s390x	nodejs	< 16.20.2-8.el9_4	nodejs-16.20.2-8.el9_4.s390x.rpm
RedHat	9	x86_64	nodejs-debuginfo	< 16.20.2-8.el9_4	nodejs-debuginfo-16.20.2-8.el9_4.x86_64.rpm
RedHat	9	aarch64	nodejs-libs-debuginfo	< 16.20.2-8.el9_4	nodejs-libs-debuginfo-16.20.2-8.el9_4.aarch64.rpm
RedHat	9	s390x	nodejs-debuginfo	< 16.20.2-8.el9_4	nodejs-debuginfo-16.20.2-8.el9_4.s390x.rpm
RedHat	9	s390x	npm	< 8.19.4-1.16.20.2.8.el9_4	npm-8.19.4-1.16.20.2.8.el9_4.s390x.rpm
RedHat	9	ppc64le	nodejs-debugsource	< 16.20.2-8.el9_4	nodejs-debugsource-16.20.2-8.el9_4.ppc64le.rpm
RedHat	9	x86_64	nodejs-libs	< 16.20.2-8.el9_4	nodejs-libs-16.20.2-8.el9_4.x86_64.rpm
RedHat	9	x86_64	nodejs-libs-debuginfo	< 16.20.2-8.el9_4	nodejs-libs-debuginfo-16.20.2-8.el9_4.x86_64.rpm

Rows per page:

1-10 of 331