Alpine Linux Development TeamALPINE:CVE-2023-23919CVE-2023-23919
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.3 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
29.5%
A cryptographic vulnerability exists in Node.js <19.2.0, <18.14.1, <16.19.1, <14.21.3 that in some cases did does not clear the OpenSSL error stack after operations that may set it. This may lead to false positive errors during subsequent cryptographic operations that happen to be on the same thread. This in turn could be used to cause a denial of service.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | edge-main | noarch | nodejs | < 18.14.1-r0 | UNKNOWN |
| Alpine | 3.15-main | noarch | nodejs | < 16.19.1-r0 | UNKNOWN |
| Alpine | 3.16-main | noarch | nodejs | < 16.19.1-r0 | UNKNOWN |
| Alpine | 3.17-main | noarch | nodejs | < 18.14.1-r0 | UNKNOWN |
| Alpine | 3.18-main | noarch | nodejs | < 18.14.1-r0 | UNKNOWN |
| Alpine | 3.19-main | noarch | nodejs | < 18.14.1-r0 | UNKNOWN |
| Alpine | 3.20-main | noarch | nodejs | < 18.14.1-r0 | UNKNOWN |
Related
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.3 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
29.5%