8.6 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
7.6 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
45.8%
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.
Security Fix(es):
c-ares: 0-byte UDP payload Denial of Service (CVE-2023-32067)
c-ares: buffer overflow in config_sortlist() due to missing string length check (CVE-2022-4904)
c-ares: Buffer Underwrite in ares_inet_net_pton() (CVE-2023-31130)
c-ares: Insufficient randomness in generation of DNS query IDs (CVE-2023-31147)
c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation (CVE-2023-31124)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
8.6 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
7.6 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
45.8%