Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
suseSuseOPENSUSE-SU-2019:0089-1
HistoryJan 28, 2019 - 12:00 a.m.

Security update for nodejs8 (important)

2019-01-2800:00:00
lists.opensuse.org
120

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.024 Low

EPSS

Percentile

88.7%

JSON

An update that fixes four vulnerabilities is now available.

Description:

This update for nodejs8 to version 8.15.0 fixes the following issues:

Security issues fixed:

  • CVE-2018-12121: Fixed a Denial of Service with large HTTP headers
    (bsc#1117626)
  • CVE-2018-12122: Fixed the ‘Slowloris’ HTTP Denial of Service
    (bsc#1117627)
  • CVE-2018-12116: Fixed HTTP request splitting (bsc#1117630)
  • CVE-2018-12123: Fixed hostname spoofing in URL parser for javascript
    protocol (bsc#1117629)

This update was imported from the SUSE:SLE-15:Update update project.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

  • openSUSE Leap 15.0:

    zypper in -t patch openSUSE-2019-89=1

OSVersionArchitecturePackageVersionFilename
openSUSE Leap15.0i586< - openSUSE Leap 15.0 (i586 x86_64):- openSUSE Leap 15.0 (i586 x86_64):.i586.rpm
openSUSE Leap15.0x86_64< - openSUSE Leap 15.0 (i586 x86_64):- openSUSE Leap 15.0 (i586 x86_64):.x86_64.rpm
openSUSE Leap15.0noarch< - openSUSE Leap 15.0 (noarch):- openSUSE Leap 15.0 (noarch):.noarch.rpm

Related

openvas 19
ibm 15
nessus 33
altlinux 1
f5 2
redhat 4
suse 2
freebsd 1
nodejsblog 2
ubuntu 1
prion 5
debiancve 5
redhatcve 5
cbl_mariner 4
ubuntucve 5
mageia 1
huntr 1
attackerkb 1
veracode 4
osv 7
alpinelinux 5
cve 5
oraclelinux 2
hackerone 1
gentoo 1
photon 8
amazon 2
github 1
centos 1
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2019:0118-1)
2021-06-09 00:00:00
openSUSE: Security Advisory for nodejs8 (openSUSE-SU-2019:0089-1)
2019-01-29 00:00:00
Node.js Multiple Vulnerabilities (Nov 2018) - Windows
2018-11-29 00:00:00
ibm
ibm
Security Bulletin: Multiple security vulnerabilities in Node.js affect IBM Voice Gateway
2019-02-20 18:30:01
Security Bulletin: Multiple vulnerabilities in Node.js affect IBM Integration Bus & IBM App Connect Enterprise V11
2020-03-23 20:41:52
Security Bulletin: IBM Planning Analytics Local is affected by multiple vulnerabilities (CVE-2018-12116, CVE-2018-12121, CVE-2018-12122, CVE-2018-12123)
2019-04-15 15:25:01
nessus
nessus
SUSE SLES15 Security Update : nodejs8 (SUSE-SU-2019:0118-1)
2019-01-22 00:00:00
openSUSE Security Update : nodejs8 (openSUSE-2019-89)
2019-01-29 00:00:00
F5 Networks BIG-IP : Node.js vulnerabilities (K000137090)
2023-10-02 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package node version 10.14.1-alt1
2018-11-30 00:00:00
f5
f5
K000137090 : Node.js vulnerabilities CVE-2018-12121, CVE-2018-12122, and CVE-2018-12123
2023-10-02 00:00:00
K000137093 : Node.js vulnerabilities CVE-2018-7167, CVE-2018-12115, and CVE-2018-12116
2023-10-02 00:00:00
redhat
redhat
(RHSA-2019:1821) Important: rh-nodejs8-nodejs security update
2019-07-22 13:09:06
(RHSA-2019:3497) Moderate: http-parser security and bug fix update
2019-11-05 17:52:33
(RHSA-2019:2939) Important: rh-nodejs10-nodejs security update
2019-09-30 23:10:11
suse
suse
Security update for nodejs6 (important)
2019-02-22 00:00:00
Security update for nodejs4 (important)
2019-01-25 00:00:00
freebsd
freebsd
node.js -- multiple vulnerabilities
2018-11-27 00:00:00
nodejsblog
nodejsblog
November 2018 Security Releases
2018-11-28 00:00:00
February 2019 Security Releases
2019-02-28 00:00:00
ubuntu
ubuntu
Node.js vulnerabilities
2021-03-15 00:00:00
prion
prion
Design/Logic Flaw
2018-11-28 17:29:00
Design/Logic Flaw
2018-11-28 17:29:00
Design/Logic Flaw
2018-11-28 17:29:00
debiancve
debiancve
CVE-2018-12123
2018-11-28 17:29:00
CVE-2018-12116
2018-11-28 17:29:00
CVE-2018-12121
2018-11-28 17:29:00
redhatcve
redhatcve
CVE-2018-12123
2020-02-02 02:37:48
CVE-2018-12116
2020-01-07 03:29:53
CVE-2018-12122
2019-12-28 10:04:03
cbl_mariner
cbl_mariner
CVE-2018-12123 affecting package nodejs 8.11.4-7
2021-08-11 06:39:34
CVE-2018-12116 affecting package nodejs 8.11.4-7
2021-08-11 06:39:34
CVE-2018-12122 affecting package nodejs 8.11.4-7
2021-08-11 06:39:34
ubuntucve
ubuntucve
CVE-2018-12122
2018-11-28 00:00:00
CVE-2018-12123
2018-11-28 00:00:00
CVE-2018-12116
2018-11-28 00:00:00
mageia
mageia
Updated nodejs packages fix security vulnerabilities
2019-09-15 16:24:16
huntr
huntr
hostname spoofing via javascript
2022-03-04 10:29:25
attackerkb
attackerkb
CVE-2018-12122
2018-11-28 00:00:00
veracode
veracode
Denial Of Service (DoS)
2018-11-30 05:44:46
HTTP Request Smuggling
2018-11-30 05:56:50
Hostname Spoofing
2018-11-30 05:49:00
osv
osv
CVE-2018-12116
2018-11-28 17:29:00
nodejs vulnerabilities
2021-03-15 21:18:37
CVE-2018-12121
2018-11-28 17:29:00
alpinelinux
alpinelinux
CVE-2018-12116
2018-11-28 17:29:00
CVE-2018-12121
2018-11-28 17:29:00
CVE-2018-12123
2018-11-28 17:29:00
cve
cve
CVE-2018-12116
2018-11-28 17:29:00
CVE-2018-12122
2018-11-28 17:29:00
CVE-2018-12123
2018-11-28 17:29:00
oraclelinux
oraclelinux
http-parser security and bug fix update
2019-11-14 00:00:00
http-parser security update
2019-08-13 00:00:00
hackerone
hackerone
Node.js: Fix for CVE-2018-12122 can be bypassed via keep-alive requests
2018-12-01 10:03:22
gentoo
gentoo
Node.js: Multiple vulnerabilities
2020-03-20 00:00:00
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0210
2020-02-21 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-1.0-0257
2019-11-20 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-2.0-0190
2019-11-20 00:00:00
amazon
amazon
Medium: http-parser
2019-10-21 18:01:00
Important: http-parser
2020-04-20 19:21:00
github
github
undici before v5.8.0 vulnerable to CRLF injection in request headers
2022-07-21 20:30:10
centos
centos
http security update
2019-09-18 20:20:44

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.024 Low

EPSS

Percentile

88.7%

JSON
Related for OPENSUSE-SU-2019:0089-1
openvas19ibm15nessus33altlinux1f52redhat4suse2freebsd1nodejsblog2ubuntu1prion5debiancve5redhatcve5cbl_mariner4ubuntucve5mageia1huntr1attackerkb1veracode4osv7alpinelinux5cve5oraclelinux2hackerone1gentoo1photon8amazon2github1centos1