nodejs security update

2024-03-2100:00:00

linux.oracle.com

node.js

security update

http request

vulnerability

dos attacks

cve-2024-22019

unix

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.4

Confidence

Low

EPSS

Percentile

15.5%

JSON

[1:16.20.2-4.0.1]

reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks
Resolves: CVE-2024-22019

OSVersionArchitecturePackageVersionFilename
oracle linux9srcnodejs< 16.20.2-4.0.1.el9_3nodejs-16.20.2-4.0.1.el9_3.src.rpm
oracle linux9aarch64nodejs< 16.20.2-4.0.1.el9_3nodejs-16.20.2-4.0.1.el9_3.aarch64.rpm
oracle linux9noarchnodejs-docs< 16.20.2-4.0.1.el9_3nodejs-docs-16.20.2-4.0.1.el9_3.noarch.rpm
oracle linux9aarch64nodejs-full-i18n< 16.20.2-4.0.1.el9_3nodejs-full-i18n-16.20.2-4.0.1.el9_3.aarch64.rpm
oracle linux9aarch64nodejs-libs< 16.20.2-4.0.1.el9_3nodejs-libs-16.20.2-4.0.1.el9_3.aarch64.rpm
oracle linux9aarch64npm< 8.19.4-1.16.20.2.4.0.1.el9_3npm-8.19.4-1.16.20.2.4.0.1.el9_3.aarch64.rpm
oracle linux9srcnodejs< 16.20.2-4.0.1.el9_3nodejs-16.20.2-4.0.1.el9_3.src.rpm
oracle linux9x86_64nodejs< 16.20.2-4.0.1.el9_3nodejs-16.20.2-4.0.1.el9_3.x86_64.rpm
oracle linux9noarchnodejs-docs< 16.20.2-4.0.1.el9_3nodejs-docs-16.20.2-4.0.1.el9_3.noarch.rpm
oracle linux9x86_64nodejs-full-i18n< 16.20.2-4.0.1.el9_3nodejs-full-i18n-16.20.2-4.0.1.el9_3.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	9	src	nodejs	< 16.20.2-4.0.1.el9_3	nodejs-16.20.2-4.0.1.el9_3.src.rpm
oracle linux	9	aarch64	nodejs	< 16.20.2-4.0.1.el9_3	nodejs-16.20.2-4.0.1.el9_3.aarch64.rpm
oracle linux	9	noarch	nodejs-docs	< 16.20.2-4.0.1.el9_3	nodejs-docs-16.20.2-4.0.1.el9_3.noarch.rpm
oracle linux	9	aarch64	nodejs-full-i18n	< 16.20.2-4.0.1.el9_3	nodejs-full-i18n-16.20.2-4.0.1.el9_3.aarch64.rpm
oracle linux	9	aarch64	nodejs-libs	< 16.20.2-4.0.1.el9_3	nodejs-libs-16.20.2-4.0.1.el9_3.aarch64.rpm
oracle linux	9	aarch64	npm	< 8.19.4-1.16.20.2.4.0.1.el9_3	npm-8.19.4-1.16.20.2.4.0.1.el9_3.aarch64.rpm
oracle linux	9	src	nodejs	< 16.20.2-4.0.1.el9_3	nodejs-16.20.2-4.0.1.el9_3.src.rpm
oracle linux	9	x86_64	nodejs	< 16.20.2-4.0.1.el9_3	nodejs-16.20.2-4.0.1.el9_3.x86_64.rpm
oracle linux	9	noarch	nodejs-docs	< 16.20.2-4.0.1.el9_3	nodejs-docs-16.20.2-4.0.1.el9_3.noarch.rpm
oracle linux	9	x86_64	nodejs-full-i18n	< 16.20.2-4.0.1.el9_3	nodejs-full-i18n-16.20.2-4.0.1.el9_3.x86_64.rpm