Lucene search
Redhat.comRH:CVE-2016-7099HistorySep 28, 2016 - 6:47 a.m.
CVE-2016-7099
2016-09-2806:47:27
redhat.com
access.redhat.com
11
0.003 Low
EPSS
Percentile
70.2%
The tls.checkServerIdentity function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4.6.0, and 6.x before 6.7.0 does not properly handle wildcards in name fields of X.509 certificates, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.
Related
ubuntucve
ubuntucve
CVE-2016-7099
2016-10-10 00:00:00
prion
prion
Design/Logic Flaw
2016-10-10 16:59:00
fedora
fedora
[SECURITY] Fedora 25 Update: nodejs-6.7.0-107.fc25
2016-10-09 03:20:39
[SECURITY] Fedora 24 Update: nodejs-4.6.0-5.fc24
2016-10-10 21:53:24
veracode
veracode
Man-in-the-Middle (MitM)
2018-09-24 07:23:39
cvelist
cvelist
CVE-2016-7099
2016-10-10 16:00:00
nessus
nessus
Fedora 24 : 1:nodejs (2016-861b8c46b7)
2016-10-12 00:00:00
Fedora 25 : 1:nodejs (2016-43ff70c6b1)
2016-11-15 00:00:00
SUSE SLES12 Security Update : nodejs4 (SUSE-SU-2016:2470-1)
2019-01-02 00:00:00
openvas
openvas
Fedora Update for nodejs FEDORA-2016-861b8c46b7
2016-11-14 00:00:00
Fedora Update for nodejs FEDORA-2016-43ff70c6b1
2016-12-07 00:00:00
Mageia: Security Advisory (MGASA-2017-0204)
2022-01-28 00:00:00
nvd
nvd
CVE-2016-7099
2016-10-10 16:59:01
cve
cve
CVE-2016-7099
2016-10-10 16:59:01
debiancve
debiancve
CVE-2016-7099
2016-10-10 16:59:01
ibm
ibm
mageia
mageia
Updated nodejs packages fix security vulnerability
2017-07-13 12:10:46
redhat
redhat
f5
f5
suse
suse
Security update for nodejs4 (important)
2016-11-01 16:19:35
Security update for nodejs4 (important)
2016-10-06 20:14:21
Security update for nodejs (important)
2016-10-11 19:20:03
osv
osv
nodejs vulnerabilities
2021-03-15 21:18:37
ubuntu
ubuntu
Node.js vulnerabilities
2021-03-15 00:00:00
nodejsblog
nodejsblog
Security updates for all active release lines, September 2016
2016-09-23 00:00:00