Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2018:2944
HistoryOct 18, 2018 - 7:19 a.m.

(RHSA-2018:2944) Important: rh-nodejs6-nodejs security update

2018-10-1807:19:51
access.redhat.com
58

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.016

Percentile

87.6%

JSON

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.

Security Fix(es):

  • nodejs: Out of bounds (OOB) write via UCS-2 encoding (CVE-2018-12115)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat7x86_64rh-nodejs6-nodejs< 6.11.3-7.el7rh-nodejs6-nodejs-6.11.3-7.el7.x86_64.rpm
RedHat7ppc64lerh-nodejs6-nodejs-devel< 6.11.3-7.el7rh-nodejs6-nodejs-devel-6.11.3-7.el7.ppc64le.rpm
RedHat7s390xrh-nodejs6-nodejs-debuginfo< 6.11.3-7.el7rh-nodejs6-nodejs-debuginfo-6.11.3-7.el7.s390x.rpm
RedHat6noarchrh-nodejs6-nodejs-docs< 6.11.3-6.el6rh-nodejs6-nodejs-docs-6.11.3-6.el6.noarch.rpm
RedHat7aarch64rh-nodejs6-nodejs-devel< 6.11.3-7.el7rh-nodejs6-nodejs-devel-6.11.3-7.el7.aarch64.rpm
RedHat7noarchrh-nodejs6-nodejs-docs< 6.11.3-7.el7rh-nodejs6-nodejs-docs-6.11.3-7.el7.noarch.rpm
RedHat7ppc64lerh-nodejs6-nodejs-debuginfo< 6.11.3-7.el7rh-nodejs6-nodejs-debuginfo-6.11.3-7.el7.ppc64le.rpm
RedHat6x86_64rh-nodejs6-nodejs-devel< 6.11.3-6.el6rh-nodejs6-nodejs-devel-6.11.3-6.el6.x86_64.rpm
RedHat7ppc64lerh-nodejs6-nodejs< 6.11.3-7.el7rh-nodejs6-nodejs-6.11.3-7.el7.ppc64le.rpm
RedHat7x86_64rh-nodejs6-nodejs-debuginfo< 6.11.3-7.el7rh-nodejs6-nodejs-debuginfo-6.11.3-7.el7.x86_64.rpm
Rows per page:
1-10 of 171

Related

nessus 17
osv 2
alpinelinux 1
nvd 1
cvelist 1
debiancve 1
openvas 11
ibm 11
veracode 2
prion 1
redhatcve 1
ubuntucve 1
cve 1
altlinux 1
suse 3
redhat 4
f5 1
freebsd 1
nodejsblog 1
ubuntu 1
mageia 1
gentoo 1
nessus
nessus
RHEL 6 / 7 : rh-nodejs6-nodejs (RHSA-2018:2944)
2024-04-27 00:00:00
openSUSE Security Update : nodejs6 (openSUSE-2018-1041)
2018-09-25 00:00:00
openSUSE Security Update : nodejs8 (openSUSE-2019-718)
2019-03-27 00:00:00
osv
osv
CVE-2018-12115
2018-08-21 12:29:00
nodejs vulnerabilities
2021-03-15 21:18:37
alpinelinux
alpinelinux
CVE-2018-12115
2018-08-21 13:00:00
nvd
nvd
CVE-2018-12115
2018-08-21 12:29:00
cvelist
cvelist
CVE-2018-12115
2018-08-21 13:00:00
debiancve
debiancve
CVE-2018-12115
2018-08-21 13:00:00
openvas
openvas
Node.js < 10.9.0, < 8.11.4, < 6.14.4 OOB Write Vulnerability - Mac OS X
2018-08-27 00:00:00
Node.js < 10.9.0, < 8.11.4, < 6.14.4 OOB Write Vulnerability - Windows
2018-08-27 00:00:00
openSUSE: Security Advisory for nodejs6 (openSUSE-SU-2018:2816-1)
2018-09-25 00:00:00
ibm
ibm
Security Bulletin: IBM DataPower Gateway is affected by a Denial of Service vulnerability (CVE-2018-12115)
2018-11-08 05:10:01
Security Bulletin: IBM API Connect is affected by OpenSSL vulnerabilities (CVE-2018-0732 CVE-2018-12115 CVE-2018-7166 CVE-2018-0737)
2018-10-23 15:10:01
Security Bulletin: Security vulnerabilities in IBM SDK for Node.js might affect the configuration editor used by IBM Business Automation Workflow and Business Process Manager (BPM)
2022-09-14 15:02:20
veracode
veracode
Out-of-Bounds (OOB) Write
2018-08-17 07:37:44
Out-of-Bounds (OOB) Write
2019-01-15 09:26:04
prion
prion
Design/Logic Flaw
2018-08-21 12:29:00
redhatcve
redhatcve
CVE-2018-12115
2019-10-22 05:58:44
ubuntucve
ubuntucve
CVE-2018-12115
2018-08-21 00:00:00
cve
cve
CVE-2018-12115
2018-08-21 13:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package node version 8.11.4-alt1
2018-08-29 00:00:00
suse
suse
Security update for nodejs4 (moderate)
2018-09-08 12:14:51
Security update for nodejs6 (moderate)
2018-09-24 12:15:49
Security update for nodejs8 (moderate)
2018-09-25 15:12:31
redhat
redhat
(RHSA-2018:2552) Moderate: Red Hat OpenShift Application Runtimes Node.js 8.11.4 security update
2018-08-22 21:04:23
(RHSA-2018:3537) Critical: OpenShift Container Platform 3.11 security update
2018-11-20 03:01:27
(RHSA-2018:2553) Moderate: Red Hat OpenShift Application Runtimes Node.js 10.9.0 security update
2018-08-22 21:04:25
f5
f5
K000137093 : Node.js vulnerabilities CVE-2018-7167, CVE-2018-12115, and CVE-2018-12116
2023-10-02 00:00:00
freebsd
freebsd
node.js -- multiple vulnerabilities
2018-08-16 00:00:00
nodejsblog
nodejsblog
August 2018 Security Releases
2018-08-11 00:00:00
ubuntu
ubuntu
Node.js vulnerabilities
2021-03-15 00:00:00
mageia
mageia
Updated nodejs packages fix security vulnerabilities
2019-09-15 16:24:16
gentoo
gentoo
Node.js: Multiple vulnerabilities
2020-03-20 00:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.016

Percentile

87.6%

JSON
Related for RHSA-2018:2944
nessus17osv2alpinelinux1nvd1cvelist1debiancve1openvas11ibm11veracode2prion1redhatcve1ubuntucve1cve1altlinux1suse3redhat4f51freebsd1nodejsblog1ubuntu1mageia1gentoo1