104 matches found
Moderate: Red Hat Security Advisory: nodejs:14 security and bug fix update
An update for the nodejs:14 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Moderate: nodejs:14 security and bug fix update
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The following packages have been upgraded to a later upstream version: nodejs 14.15.4. Security Fixes: nodejs-npm-user-validate: improper input validation when...
openSUSE Security Update : nodejs14 (openSUSE-2021-66)
This update for nodejs14 fixes the following issues : - New upstream LTS version 14.15.4 : - CVE-2020-8265: use-after-free in TLSWrap High bug in TLS implementation. When writing to a TLS enabled socket, node::StreamBase::Write calls node::TLSWrap::DoWrite with a freshly allocated WriteWrap objec...
Security Bulletin: IBM Cloud Pak for Integration is vulnerable to Node.js (CVE-2020-8277)
Summary IBM Cloud Pak for Integration is vulnerable to Node.js CVE-2020-8277, with details below. Vulnerability Details CVEID: CVE-2020-8277 DESCRIPTION: Node.js is vulnerable to a denial of service. By getting the application to resolve a DNS record with a larger number of responses, an attacker...
Security update for nodejs14 (moderate)
openSUSE Security Update: Security update for nodejs14 Announcement ID: openSUSE-SU-2021:0066-1 Rating: moderate References: 1178882 1180553 1180554 Cross-References: CVE-2020-8265 CVE-2020-8277 CVE-2020-8287 Affected Products: openSUSE Leap 15.2 An update that fixes three vulnerabilities is now...
SUSE SLES15 Security Update : nodejs14 (SUSE-SU-2021:0061-1)
This update for nodejs14 fixes the following issues : New upstream LTS version 14.15.4 : - CVE-2020-8265: use-after-free in TLSWrap High bug in TLS implementation. When writing to a TLS enabled socket, node::StreamBase::Write calls node::TLSWrap::DoWrite with a freshly allocated WriteWrap object ...
SUSE SLES15 Security Update : nodejs12 (SUSE-SU-2021:0062-1)
This update for nodejs12 fixes the following issues : New upstream LTS version 12.20.1 : - CVE-2020-8265: use-after-free in TLSWrap High bug in TLS implementation. When writing to a TLS enabled socket, node::StreamBase::Write calls node::TLSWrap::DoWrite with a freshly allocated WriteWrap object ...
RHEL 8 : nodejs:12 (RHSA-2020:5499)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:5499 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language...
Oracle Linux 8 : nodejs:12 (ELSA-2020-5499)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5499 advisory. nodejs 1:12.19.1-1 - Resolves: RHBZ1901044, 1901045, 1901046, 1901047 - c-ares, ajv and y18n CVEs and yarn installability issues Tenable has extracted...
Security Bulletin: Version 12.18.4 of Node.js included in IBM Netcool Operations Insight 1.6.2.x has a security vulnerability
Summary Security Bulletin: Version 12.18.4 of Node.js included in IBM Netcool Operations Insight 1.6.2.x has a security vulnerability Vulnerability Details CVEID: CVE-2020-8277 DESCRIPTION: Node.js is vulnerable to a denial of service. By getting the application to resolve a DNS record with a...
ALSA-2020:5499 Moderate: nodejs:12 security and bug fix update
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: nodejs-y18n: prototype pollution vulnerability CVE-2020-7774 c-ares: aresparsea,aaaareply insufficient naddrttls validation DoS CVE-2020-8277...
Moderate: nodejs:12 security and bug fix update
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: nodejs-y18n: prototype pollution vulnerability CVE-2020-7774 c-ares: aresparsea,aaaareply insufficient naddrttls validation DoS CVE-2020-8277...
Security Bulletin: IBM Cloud Transformation Advisor is affected by a Node.js vulnerability
Summary IBM Cloud Transformation Advisor has addressed Node.js vulnerability CVE-2020-8277 Vulnerability Details CVEID: CVE-2020-8277 DESCRIPTION: Node.js is vulnerable to a denial of service. By getting the application to resolve a DNS record with a larger number of responses, an attacker could...
Security Bulletin: IBM Cloud Transformation Advisor is affected by a Node.js vulnerability
Summary IBM Cloud Transformation Advisor has addressed the following vulnerability: CVE-2020-8277 Vulnerability Details CVEID: CVE-2020-8277 DESCRIPTION: Node.js is vulnerable to a denial of service. By getting the application to resolve a DNS record with a larger number of responses, an attacker...
SUSE SLED15 / SLES15 Security Update : c-ares (SUSE-SU-2020:3478-1)
This update for c-ares fixes the following issues : Version update to 1.17.0 - CVE-2020-8277: Fixed a Denial of Service through DNS request bsc1178882 - For further details see https://c-ares.haxx.se/changelog.html Note that Tenable Network Security has extracted the preceding description block...
SUSE SLES12 Security Update : nodejs12 (SUSE-SU-2020:3549-1)
This update for nodejs12 fixes the following issues : Update to 12.19.1 fixing : CVE-2020-8277: Denial of Service through DNS request bsc1178882. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...
Moderate: Red Hat Security Advisory: rh-nodejs12-nodejs security update
An update for rh-nodejs12-nodejs is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
openSUSE Security Update : c-ares (openSUSE-2020-2092)
This update for c-ares fixes the following issues : Version update to 1.17.0 - CVE-2020-8277: Fixed a Denial of Service through DNS request bsc1178882 - For further details see https://c-ares.haxx.se/changelog.html This update was imported from the SUSE:SLE-15:Update update project. C Tenable...
Security update for c-ares (moderate)
openSUSE Security Update: Security update for c-ares Announcement ID: openSUSE-SU-2020:2092-1 Rating: moderate References: 1178882 Cross-References: CVE-2020-8277 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for c-ares fix...