Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:7323
HistoryAug 17, 2018 - 7:37 a.m.

Out-of-Bounds (OOB) Write

2018-08-1707:37:44
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

JSON

node is vulnerable to out-of-bounds (OOB) write. The library does not handle UCS-2 encoding properly, allowing a malicious user to write outside the bounds of the memory space of a Buffer.

CPENameOperatorVersion
nodele6.14.3
nodele10.8.0
nodele8.11.3
node.jsle5.3.0

Related

debiancve 1
osv 2
alpinelinux 1
nessus 17
prion 1
redhatcve 1
veracode 1
ibm 11
redhat 5
openvas 11
ubuntucve 1
cve 1
suse 3
altlinux 1
f5 1
freebsd 1
nodejsblog 1
ubuntu 1
mageia 1
gentoo 1
debiancve
debiancve
CVE-2018-12115
2018-08-21 12:29:00
osv
osv
CVE-2018-12115
2018-08-21 12:29:00
nodejs vulnerabilities
2021-03-15 21:18:37
alpinelinux
alpinelinux
CVE-2018-12115
2018-08-21 12:29:00
nessus
nessus
RHEL 6 / 7 : rh-nodejs6-nodejs (RHSA-2018:2944)
2024-04-27 00:00:00
openSUSE Security Update : nodejs6 (openSUSE-2018-1041)
2018-09-25 00:00:00
openSUSE Security Update : nodejs8 (openSUSE-2019-718)
2019-03-27 00:00:00
prion
prion
Design/Logic Flaw
2018-08-21 12:29:00
redhatcve
redhatcve
CVE-2018-12115
2019-10-22 05:58:44
veracode
veracode
Out-of-Bounds (OOB) Write
2019-01-15 09:26:04
ibm
ibm
Security Bulletin: IBM DataPower Gateway is affected by a Denial of Service vulnerability (CVE-2018-12115)
2018-11-08 05:10:01
Security Bulletin: IBM API Connect is affected by OpenSSL vulnerabilities (CVE-2018-0732 CVE-2018-12115 CVE-2018-7166 CVE-2018-0737)
2018-10-23 15:10:01
Security Bulletin: Security vulnerabilities in IBM SDK for Node.js might affect the configuration editor used by IBM Business Automation Workflow and Business Process Manager (BPM)
2022-09-14 15:02:20
redhat
redhat
(RHSA-2018:2944) Important: rh-nodejs6-nodejs security update
2018-10-18 07:19:51
(RHSA-2018:2552) Moderate: Red Hat OpenShift Application Runtimes Node.js 8.11.4 security update
2018-08-22 21:04:23
(RHSA-2018:3537) Critical: OpenShift Container Platform 3.11 security update
2018-11-20 03:01:27
openvas
openvas
Node.js < 10.9.0, < 8.11.4, < 6.14.4 OOB Write Vulnerability - Mac OS X
2018-08-27 00:00:00
Node.js < 10.9.0, < 8.11.4, < 6.14.4 OOB Write Vulnerability - Windows
2018-08-27 00:00:00
SUSE: Security Advisory (SUSE-SU-2018:2812-1)
2021-06-09 00:00:00
ubuntucve
ubuntucve
CVE-2018-12115
2018-08-21 00:00:00
cve
cve
CVE-2018-12115
2018-08-21 12:29:00
suse
suse
Security update for nodejs8 (moderate)
2018-09-25 15:12:31
Security update for nodejs4 (moderate)
2018-09-08 12:14:51
Security update for nodejs6 (moderate)
2018-09-24 12:15:49
altlinux
altlinux
Security fix for the ALT Linux 10 package node version 8.11.4-alt1
2018-08-29 00:00:00
f5
f5
K000137093 : Node.js vulnerabilities CVE-2018-7167, CVE-2018-12115, and CVE-2018-12116
2023-10-02 00:00:00
freebsd
freebsd
node.js -- multiple vulnerabilities
2018-08-16 00:00:00
nodejsblog
nodejsblog
August 2018 Security Releases
2018-08-11 00:00:00
ubuntu
ubuntu
Node.js vulnerabilities
2021-03-15 00:00:00
mageia
mageia
Updated nodejs packages fix security vulnerabilities
2019-09-15 16:24:16
gentoo
gentoo
Node.js: Multiple vulnerabilities
2020-03-20 00:00:00

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

JSON
Related for VERACODE:7323
debiancve1osv2alpinelinux1nessus17prion1redhatcve1veracode1ibm11redhat5openvas11ubuntucve1cve1suse3altlinux1f51freebsd1nodejsblog1ubuntu1mageia1gentoo1