Lucene search

K
debianDebianDEBIAN:DSA-4669-1:2AD2E
HistoryApr 29, 2020 - 9:05 p.m.

[SECURITY] [DSA 4669-1] nodejs security update

2020-04-2921:05:57
lists.debian.org
52

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.3 High

AI Score

Confidence

Low

0.821 High

EPSS

Percentile

98.4%


Debian Security Advisory DSA-4669-1 [email protected]
https://www.debian.org/security/ Moritz Muehlenhoff
April 29, 2020 https://www.debian.org/security/faq


Package : nodejs
CVE ID : CVE-2019-9511 CVE-2019-9513 CVE-2019-9514 CVE-2019-15604
CVE-2019-15605 CVE-2019-15606

Multiple vulnerabilities were discovered in Node.js, which could result in
denial of service or HTTP request smuggling.

For the stable distribution (buster), these problems have been fixed in
version 10.19.0~dfsg1-1.

We recommend that you upgrade your nodejs packages.

For the detailed security status of nodejs please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/nodejs

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.3 High

AI Score

Confidence

Low

0.821 High

EPSS

Percentile

98.4%