RHEL 8 : file-type (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - file-type: a malformed MKV file could cause the file type detector to get caught in an infinite loop CVE-2022-36313...

RHEL 8 : file-type (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - file-type: a malformed MKV file could cause the file type detector to get caught in an infinite loop CVE-2022-36313...

Important: Red Hat Security Advisory: Red Hat Data Grid 8.4.1 security update

An update for Red Hat Data Grid 8 is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...

CVE-2022-36313

A flaw was found in the file-type npm package. A malformed MKV file could lead the file type detector to a denial of Service. This issue allows an attacker to input a malicious file and make the server unresponsive...

Security Bulletin: IBM App Connect Enterprise is vulnerable to a denial of service due to Node.js module file-type (CVE-2022-36313)

Summary IBM App Connect Enterprise is vulnerable to denial of service due to Node.js module file-type CVE-2022-36313. The fix includes a version of file-type 16.5.4 Vulnerability Details CVEID:CVE-2022-36313 DESCRIPTION: Node.js file-type module is vulnerable to a denial of service, caused by an...

@compas/store (>=0.0.178, <=0.0.210), @flyacts/backend-media-management (2.1.1) +12 more potentially affected by CVE-2022-36313 via file-type (>=17.0.0, <=17.1.2)

file-type NPM version =17.0.0, =0.0.178, =0.6.14, =0.1.0, =0.2.15, =0.2.8, =0.0.207, =0.0.0-alpha.11, =4.5.3, =7.2.0, =7.2.2 Source cves: CVE-2022-36313 Source advisory: OSV:GHSA-MHXJ-85R3-2X55...

123yun-share (1.0.0), 1k-tasks (>=2.3.0, <=3.6.1) +813 more potentially affected by CVE-2022-36313 via file-type (>=13.0.3, <=16.5.3)

file-type NPM version =13.0.3, =2.3.0, =1.0.0, =0.0.2, =1.0.0, =1.0.6, =1.0.0-alpha.0, =1.0.0-alpha.1, =0.17.17, =0.1.41, =1.1.0, =0.1.3, =1.10.0 and more Source cves: CVE-2022-36313 Source advisory: OSV:GHSA-MHXJ-85R3-2X55...

CVE-2022-36313

An issue was discovered in the file-type package before 16.5.4 and 17.x before 17.1.3 for Node.js. A malformed MKV file could cause the file type detector to get caught in an infinite loop. This would make the application become unresponsive and could be used to cause a DoS attack...

CVE-2022-36313

An issue was discovered in the file-type package before 16.5.4 and 17.x before 17.1.3 for Node.js. A malformed MKV file could cause the file type detector to get caught in an infinite loop. This would make the application become unresponsive and could be used to cause a DoS attack...

CVE-2022-36313

CVE-2022-36313 affects the Node.js file-type npm package. A malformed MKV file can cause the file-type detector to enter an infinite loop, leading to DoS. Affected: file-type before 16.5.4 and before 17.1.3 (17.x). Remediation: upgrade to version 16.5.4 or 17.1.3 (or newer). NVD CVSS v3.1 base sc...