Lucene search
PRIOn knowledge basePRION:CVE-2016-7099HistoryOct 10, 2016 - 4:59 p.m.
Design/Logic Flaw
2016-10-1016:59:00
PRIOn knowledge base
www.prio-n.com
12
The tls.checkServerIdentity function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4.6.0, and 6.x before 6.7.0 does not properly handle wildcards in name fields of X.509 certificates, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.
Related
ubuntucve
ubuntucve
CVE-2016-7099
2016-10-10 00:00:00
nessus
nessus
Fedora 24 : 1:nodejs (2016-861b8c46b7)
2016-10-12 00:00:00
Fedora 25 : 1:nodejs (2016-43ff70c6b1)
2016-11-15 00:00:00
SUSE SLES12 Security Update : nodejs4 (SUSE-SU-2016:2470-1)
2019-01-02 00:00:00
openvas
openvas
Fedora Update for nodejs FEDORA-2016-861b8c46b7
2016-11-14 00:00:00
Fedora Update for nodejs FEDORA-2016-43ff70c6b1
2016-12-07 00:00:00
Mageia: Security Advisory (MGASA-2017-0204)
2022-01-28 00:00:00
nvd
nvd
CVE-2016-7099
2016-10-10 16:59:01
fedora
fedora
[SECURITY] Fedora 25 Update: nodejs-6.7.0-107.fc25
2016-10-09 03:20:39
[SECURITY] Fedora 24 Update: nodejs-4.6.0-5.fc24
2016-10-10 21:53:24
veracode
veracode
Man-in-the-Middle (MitM)
2018-09-24 07:23:39
cvelist
cvelist
CVE-2016-7099
2016-10-10 16:00:00
redhatcve
redhatcve
CVE-2016-7099
2016-09-28 06:47:27
cve
cve
CVE-2016-7099
2016-10-10 16:59:01
debiancve
debiancve
CVE-2016-7099
2016-10-10 16:59:01
ibm
ibm
mageia
mageia
Updated nodejs packages fix security vulnerability
2017-07-13 12:10:46
redhat
redhat
f5
f5
suse
suse
Security update for nodejs4 (important)
2016-10-06 20:14:21
Security update for nodejs4 (important)
2016-11-01 16:19:35
Security update for nodejs (important)
2016-10-11 19:20:03
osv
osv
nodejs vulnerabilities
2021-03-15 21:18:37
ubuntu
ubuntu
Node.js vulnerabilities
2021-03-15 00:00:00
nodejsblog
nodejsblog
Security updates for all active release lines, September 2016
2016-09-23 00:00:00