CVE-2018-7166

🗓️ 22 Aug 2018 17:49:58Reported by redhat.comType

In Node.js 10 prior to 10.9.0, an argument processing flaw can lead to uninitialized memory in Buffer.alloc() method, potentially exposing sensitive information

Reporter	Title	Published	Views	Family All 31
IBM Security Bulletins	Security Bulletin: Security vulnerabilities in IBM SDK for Node.js might affect the configuration editor used by IBM Business Automation Workflow and Business Process Manager (BPM)	14 Sep 202215:02	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities were identified in Node.js that affect IBM Cloud App Management V2018	15 Feb 201911:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect is affected by OpenSSL vulnerabilities (CVE-2018-0732 CVE-2018-12115 CVE-2018-7166 CVE-2018-0737)	23 Oct 201815:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Local is affected by multiple Node.js vulnerabilities	13 Nov 201815:55	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Node.js affect IBM Integration Bus & IBM App Connect Enterprise V11	20 Nov 201812:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM® SDK for Node.js™ in IBM Cloud	11 Sep 201818:41	–	ibm
IBM Security Bulletins	Security Bulletin: Node.js as used in IBM QRadar Packet Capture is susceptible to multiple vulnerabilities	7 Nov 201815:25	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities affect IBM® Cloud Private (CVE-2018-0732, CVE-2018-12115, CVE-2018-7166, CVE-2018-0737)	17 Dec 201818:10	–	ibm
CNVD	Unspecified vulnerability in Joyent Node.js (CNVD-2019-42560)	23 Aug 201800:00	–	cnvd
CVE	CVE-2018-7166	21 Aug 201813:00	–	cve

Source	Link
cve	www.cve.org/CVERecord
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

06 Apr 2023 05:02Current

2.6Low risk

Vulners AI Score2.6

CVSS 25

CVSS 3.17.5

CVSS 35.3

EPSS0.0086

node.js 10 buffer.alloc()argument flaw uninitialized memory sensitive information