The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The tls.checkServerIdentity function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4.6.0, and 6.x before 6.7.0 does not properly handle wildcards in name fields of X.509 certificates, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade nodejs-lts. | Aug 30, 2017 | Oct 10, 2016 |
| Debian | — | Upgrade nodejs | Jul 30, 2024 | Oct 10, 2016 |
| Suse | — | Upgrade mozilla-nss-develUpgrade mozilla-nss-32bitUpgrade firefox-gtk3-immodule-inuktitutUpgrade firefox-gdk-pixbuf-langUpgrade libfirefox-gobject-2_0-0Upgrade nodejs4Upgrade firefox-gtk3-immodule-thaiUpgrade MozillaFirefoxUpgrade mozilla-nsprUpgrade firefox-libcairo-gobject2Upgrade mozilla-nss-toolsUpgrade nodejs8-docsUpgrade libfirefox-gmodule-2_0-0Upgrade npm4Upgrade libfirefox-glib-2_0-0Upgrade firefox-libpango-1_0-0Upgrade mozilla-nss-certs-32bitUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade nodejs8Upgrade libfirefox-gio-2_0-0Upgrade firefox-glib2-toolsUpgrade firefox-gio-branding-upstreamUpgrade npm8Upgrade firefox-gtk3-immodule-vietnameseUpgrade libfreebl3-32bitUpgrade mozilla-nss-certsUpgrade nodejs4-develUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade firefox-gtk3-branding-upstreamUpgrade nodejs8-develUpgrade firefox-atk-langUpgrade mozilla-nssUpgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-libharfbuzz0Upgrade nodejs4-docsUpgrade firefox-libcairo2Upgrade firefox-libffi7Upgrade firefox-gtk3-immodule-ximUpgrade mozilla-nspr-32bitUpgrade firefox-gtk3-immodule-amharicUpgrade MozillaFirefox-translations-commonUpgrade MozillaFirefox-branding-SLEDUpgrade libfirefox-gthread-2_0-0Upgrade mozilla-nspr-develUpgrade firefox-gtk3-immodule-multipressUpgrade firefox-libffi4Upgrade libsoftokn3-32bitUpgrade firefox-gtk3-toolsUpgrade firefox-libatk-1_0-0Upgrade MozillaFirefox-translations-otherUpgrade firefox-gtk3-langUpgrade firefox-glib2-langUpgrade firefox-gdk-pixbuf-query-loadersUpgrade libfreebl3Upgrade firefox-gtk3-dataUpgrade firefox-libgtk-3-0Upgrade libsoftokn3 | Oct 12, 2016 | Oct 6, 2016 |
| Ubuntu | — | Upgrade nodejs-dev (Ubuntu Pro)Upgrade nodejs-legacy (Ubuntu Pro)Upgrade nodejs-doc (Ubuntu Pro)Upgrade nodejs (Ubuntu Pro) | Mar 22, 2023 | Oct 10, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub