PT-2023-27362 · Libboron +1 · Libboron +1

Name of the Vulnerable Software and Affected Versions: Boron version 2.0.8 Description: The issue is a heap-based buffer overflow in the ur parseBlockI function at i parse blk.c. This overflow can occur in the libboron component of Boron. Recommendations: For Boron version 2.0.8, consider disabli...

PT-2023-27363 · Boron · Boron

Name of the Vulnerable Software and Affected Versions: Boron version 2.0.8 Description: The issue is a heap-based buffer overflow in the ur strInitUtf8 function at string.c. This is a general information about the problem, but specific details such as the estimated number of potentially affected...

Joyent Node.js Denial of Service Vulnerability

Joyent Node.js is the United States Joyent company's set of web applications built on top of the Google V8 JavaScript engine platform. The platform is primarily used for building highly scalable applications and writing code that can handle tens of thousands of simultaneous connections to a singl...

CVE-2018-7167

Calling Buffer.fill or Buffer.alloc with some parameters can lead to a hang which could result in a Denial of Service. In order to address this vulnerability, the implementations of Buffer.alloc and Buffer.fill were updated so that they zero fill instead of hanging in these cases. All versions of...

Security fix for the ALT Linux 10 package node version 6.13.0-alt1

Feb. 27, 2018 Alexey Shabalin 6.13.0-alt1 - new version 6.13.0 - 2018-02-13, Version 6.13.0 'Boron' LTS - fixed CVE-2017-15896, CVE-2017-3738...

CVE-2017-1000411

CVE-2017-1000411 affects OpenFlow Plugin and OpenDaylight Controller (Nitrogen, Carbon, Boron) with a flaw where multiple expired flows consume memory in CONFIG DATASTORE, causing the controller to shutdown once JVM/resource limits are reached. The issue arises when idle-timeout and hard-timeout ...

CVE-2017-1000411: Improper Resource Shutdown or Release

OpenFlow Plugin and OpenDayLight Controller versions Nitrogen, Carbon, Boron, Robert Varga, Anil Vishnoi contain a flaw when multiple 'expired' flows take up the memory resource of CONFIG DATASTORE which leads to CONTROLLER shutdown. If multiple different flows with 'idle-timeout' and...

Fedora 25 : 1:nodejs (2017-c582c1e728)

2017-10-24, Version 6.11.5 'Boron' LTS, @MylesBorins This is a security release. All Node.js users should consult the security release summary at https://nodejs.org/en/blog/vulnerability/oct-2017-dos/ for details on patched vulnerabilities. Notable Changes - zlib : - CVE-2017-14919 - In zlib...

October security releases and v6 LTS "Boron" security inclusions

October security releases and v6 LTS "Boron" security inclusions Update 18-October-2016 Releases available Updates are now available for all active Node.js release lines. The following releases all contain fixes for CVE-2016-5180 "arescreatequery single byte out of buffer write": Node.js v0.10.48...