Remote Code Execution

🗓️ 14 Jul 2020 02:40:32Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 33 Views

Memory corruption vulnerability in nodej

Reporter	Title	Published	Views	Family All 191
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Cloud Pak for Data - Node.js (CVE-2020-8172, CVE-2020-8174, CVE-2020-11080)	7 Oct 202006:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM® SDK for Node.js™ in IBM Cloud	15 Jun 202022:03	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js affect IBM Spectrum Control (CVE-2020-8172, CVE-2020-8174, CVE-2020-11080)	23 Mar 202222:07	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Planning Analytics Workspace	3 Nov 202015:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is affected by multiple Node.js vulnerabilities.	15 Sep 202016:30	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insight - Cloud Native Event Analytics is affected by a International Components for Unicode (ICU) for C/C++ vulnerability (CVE-2020-10531)	13 Aug 202013:19	–	ibm
IBM Security Bulletins	Security Bulletin: Version 10.19.0 of Node.js included in IBM Netcool Operations Insight 1.6.0.x has several security vulnerabilities	7 Aug 202011:11	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in Node.js affect IBM App Connect Enterprise V11	29 Jul 202007:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Integration is affected by multiple Node.js vulnerabilities	4 Aug 202009:50	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js affect IBM Spectrum Protect Plus (CVE-2020-10531, CVE-2020-8172, CVE-2020-8174, CVE-2020-11080)	3 Aug 202022:56	–	ibm

Vulners

Node

nodejs-current nodejs-currentMatch14.2.0-r0os

AND

nodejs-current nodejs-currentMatch14.3.0-r0os

AND

alpinelinux alpine_linuxMatch3.12

nodejs nodejsMatch12.16.3-r0os

AND

nodejs nodejsMatch12.17.0-r0os

AND

alpinelinux alpine_linuxMatch3.12

nodejs nodejsMatch12.15.0-r1os

AND

alpinelinux alpine_linuxMatch3.11

nodejs-current nodejs-currentMatch14.0.0-r0os

AND

nodejs-current nodejs-currentMatch13.1.0-r0os

AND

nodejs-current nodejs-currentMatch14.3.0-r0os

AND

nodejs-current nodejs-currentMatch13.11.0-r0os

AND

nodejs-current nodejs-currentMatch14.2.0-r0os

AND

nodejs-current nodejs-currentMatch13.12.0-r1os

AND

nodejs-current nodejs-currentMatch13.12.0-r0os

AND

nodejs-current nodejs-currentMatch14.1.0-r0os

AND

nodejs-current nodejs-currentMatch13.13.0-r0os

AND

alpinelinux alpine_linuxMatchedge

nodejs nodejsMatch12.15.0-r1os

AND

nodejs nodejsMatch12.16.2-r0os

AND

nodejs nodejsMatch12.17.0-r0os

AND

alpinelinux alpine_linuxMatchedge

rh-nodejs12-nodejs rh-nodejs12-nodejsMatch12.10.0_4.el7

rh-nodejs12-nodejs rh-nodejs12-nodejsMatch12.14.1_1.el7

rh-nodejs10-nodejs rh-nodejs10-nodejsMatch10.10.0_3.el7

rh-nodejs10-nodejs rh-nodejs10-nodejsMatch10.10.0_2.el7

rh-nodejs10-nodejs rh-nodejs10-nodejsMatch10.16.3_4.el7

rh-nodejs10-nodejs rh-nodejs10-nodejsMatch10.19.0_1.el7

Source	Link
access	www.access.redhat.com/errata/RHSA-2020:2895
access	www.access.redhat.com/security/updates/classification/
security	www.security.gentoo.org/glsa/202101-07
hackerone	www.hackerone.com/reports/784186
security	www.security.netapp.com/advisory/ntap-20201023-0003/
oracle	www.oracle.com/security-alerts/cpuapr2022.html
oracle	www.oracle.com/security-alerts/cpujan2021.html
oracle	www.oracle.com/security-alerts/cpuoct2020.html
oracle	www.oracle.com//security-alerts/cpujul2021.html

12 May 2022 16:32Current

4.6Medium risk

Vulners AI Score4.6

CVSS 29.3

CVSS 3.18.1

EPSS0.01491