Security update for nodejs6 (moderate)

openSUSE Security Update: Security update for nodejs6 Announcement ID: openSUSE-SU-2019:1173-1 Rating: moderate References: 1127080 1127532 1127533 Cross-References: CVE-2019-1559 CVE-2019-5737 CVE-2019-5739 Affected Products: openSUSE Leap 42.3 An update that fixes three vulnerabilities is now...

openSUSE Security Update : nodejs8 (openSUSE-2019-1167)

This update for nodejs8 to version 8.15.1 fixes the following issue : Security issue fixed : - CVE-2019-5737: Fixed a potentially attack vector which could lead to Denial of Service when HTTP connection are kept active bsc1127532. This update was imported from the SUSE:SLE-15:Update update projec...

Security Bulletin: Multiple security vulnerabilities in Node.js affect IBM Voice Gateway

Summary Security Vulnerabilities in Node.js affect IBM Voice Gateway. Vulnerability Details CVEID: CVE-2019-5737 DESCRIPTION: Node.js is vulnerable to a denial of service. By establishing an HTTP or HTTPS connection in keep-alive mode and sending headers very slowly to force the connection and...

SUSE SLES12 Security Update : nodejs6 (SUSE-SU-2019:0818-1)

This update for nodejs6 to version 6.17.0 fixes the following issues : Security issues fixed : CVE-2019-5739: Fixed a potentially attack vector which could lead to Denial of Service when HTTP connection are kept active bsc1127533. CVE-2019-5737: Fixed a potentially attack vector which could lead ...

openSUSE Security Update : nodejs4 (openSUSE-2019-1076)

This update for nodejs4 fixes the following issues : Security issues fixed : - CVE-2019-5739: Fixed a potentially attack vector which could lead to Denial of Service when HTTP connection are kept active bsc1127533. - CVE-2019-5737: Fixed a potentially attack vector which could lead to Denial of...

CVE-2019-5737

In Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before 11.10.1, an attacker can cause a Denial of Service DoS by establishing an HTTP or HTTPS connection in keep-alive mode and by sending headers very slowly. This keeps the connection and associated...

CVE-2019-5737

CVE-2019-5737 affects Node.js branches: 6.x < 6.17.0, 8.x < 8.15.1, 10.x < 10.15.2, and 11.x

CVE-2019-5737

In Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before 11.10.1, an attacker can cause a Denial of Service DoS by establishing an HTTP or HTTPS connection in keep-alive mode and by sending headers very slowly. This keeps the connection and associated...

Security update for nodejs4 (moderate)

openSUSE Security Update: Security update for nodejs4 Announcement ID: openSUSE-SU-2019:1076-1 Rating: moderate References: 1127080 1127532 1127533 Cross-References: CVE-2019-1559 CVE-2019-5737 CVE-2019-5739 Affected Products: openSUSE Leap 42.3 An update that fixes three vulnerabilities is now...

SUSE SLES12 Security Update : nodejs4 (SUSE-SU-2019:0658-1)

This update for nodejs4 fixes the following issues : Security issues fixed : CVE-2019-5739: Fixed a potentially attack vector which could lead to Denial of Service when HTTP connection are kept active bsc1127533. CVE-2019-5737: Fixed a potentially attack vector which could lead to Denial of Servi...

SUSE SLES12 Security Update : nodejs10 (SUSE-SU-2019:0636-1)

This update for nodejs10 to version 10.1.2 fixes the following issue : Security issue fixed : CVE-2019-5737: Fixed a potentially attack vector which could lead to Denial of Service when HTTP connection are kept active bsc1127532. Note that Tenable Network Security has extracted the preceding...

SUSE SLES15 Security Update : nodejs8 (SUSE-SU-2019:0635-1)

This update for nodejs8 to version 8.15.1 fixes the following issue : Security issue fixed : CVE-2019-5737: Fixed a potentially attack vector which could lead to Denial of Service when HTTP connection are kept active bsc1127532. Note that Tenable Network Security has extracted the preceding...

SUSE-SU-2019:0636-1 Security update for nodejs10

This update for nodejs10 to version 10.1.2 fixes the following issue: Security issue fixed: - CVE-2019-5737: Fixed a potentially attack vector which could lead to Denial of Service when HTTP connection are kept active bsc1127532...

SUSE-SU-2019:0635-1 Security update for nodejs8

This update for nodejs8 to version 8.15.1 fixes the following issue: Security issue fixed: - CVE-2019-5737: Fixed a potentially attack vector which could lead to Denial of Service when HTTP connection are kept active bsc1127532...

SUSE SLES15 Security Update : nodejs10 (SUSE-SU-2019:0627-1)

This update for nodejs10 to versio 10.15.2 fixes the following issue : Security issue fixed : CVE-2019-5737: Fixed a potentially attack vector which could lead to Denial of Service when HTTP connection are kept active bsc1127532. Note that Tenable Network Security has extracted the preceding...

SUSE-SU-2019:0627-1 Security update for nodejs10

This update for nodejs10 to versio 10.15.2 fixes the following issue: Security issue fixed: - CVE-2019-5737: Fixed a potentially attack vector which could lead to Denial of Service when HTTP connection are kept active bsc1127532...

Security fix for the ALT Linux 10 package node version 10.15.3-alt1

March 9, 2019 Vitaly Lipatov 10.15.3-alt1 - new version 10.15.3 with rpmrb script - 2018-03-05, Version 10.15.3 'Dubnium' LTS, @BethGriggs - CVE-2019-5737 - fix rpm's cflags using, add -latomic on mipsel - use external gyp...

CVE-2018-5737 BIND 9.12's serve-stale implementation can cause an assertion failure in rbtdb.c or other undesirable behavior, even if serve-stale is not enabled.

A problem with the implementation of the new serve-stale feature in BIND 9.12 can lead to an assertion failure in rbtdb.c, even when stale-answer-enable is off. Additionally, problematic interaction between the serve-stale feature and NSEC aggressive negative caching can in some cases cause...

CVE-2018-5737

CVE-2018-5737 concerns ISC BIND 9.12.x. The issue arises from the implementation of the new serve-stale feature, which can trigger an assertion failure in rbtdb.c even when stale-answer-enable is off. Additionally, interaction between serve-stale and NSEC aggressive negative caching can, in some ...

ISC BIND vulnerabilities

Multiple Denial of Service DoS or process crash vulnerabilities CVE-2018-5737, CVE-2018-5736 are affecting ISC BIND...