Node.js had a bug in versions 8.X and 9.X which caused buffers to not be initialized when the encoding for the fill value did not match the encoding specified. For example, 'Buffer.alloc(0x100, "This is not correctly encoded", "hex");' The buffer implementation was updated such that the buffer will be initialized to all zeros in these cases.
CVSS Details
- CVSS 3.1 Base Score: 3.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade nodejsUpgrade nodejs-current | Aug 22, 2024 | Dec 11, 2017 |
| Freebsd | — | Upgrade node4Upgrade nodeUpgrade node6Upgrade node8 | Dec 14, 2017 | Dec 14, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 7, 2017 |
| Suse | — | Upgrade firefox-libgtk-3-0Upgrade MozillaFirefoxUpgrade MozillaFirefox-translations-otherUpgrade npm10Upgrade libsoftokn3Upgrade mozilla-nspr-develUpgrade nodejs10-docsUpgrade firefox-libharfbuzz0Upgrade firefox-gtk3-immodule-inuktitutUpgrade firefox-libffi7Upgrade mozilla-nsprUpgrade firefox-gtk3-dataUpgrade libfirefox-gmodule-2_0-0Upgrade MozillaFirefox-translations-commonUpgrade firefox-gtk3-immodule-multipressUpgrade libsoftokn3-32bitUpgrade firefox-glib2-langUpgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-gtk3-immodule-thaiUpgrade mozilla-nspr-32bitUpgrade firefox-gtk3-branding-upstreamUpgrade firefox-gdk-pixbuf-query-loadersUpgrade libfirefox-gthread-2_0-0Upgrade firefox-libffi4Upgrade nodejs10-develUpgrade firefox-gtk3-immodule-vietnameseUpgrade nodejs8Upgrade mozilla-nss-toolsUpgrade firefox-gtk3-langUpgrade firefox-libcairo-gobject2Upgrade libfirefox-gio-2_0-0Upgrade mozilla-nssUpgrade libfreebl3Upgrade firefox-glib2-toolsUpgrade firefox-libatk-1_0-0Upgrade libfreebl3-32bitUpgrade firefox-gtk3-toolsUpgrade firefox-gtk3-immodule-ximUpgrade nodejs8-develUpgrade npm8Upgrade libfirefox-glib-2_0-0Upgrade nodejs8-docsUpgrade firefox-atk-langUpgrade firefox-gio-branding-upstreamUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade nodejs10Upgrade firefox-libpango-1_0-0Upgrade firefox-gtk3-immodule-amharicUpgrade mozilla-nss-32bitUpgrade mozilla-nss-develUpgrade firefox-gdk-pixbuf-langUpgrade mozilla-nss-certs-32bitUpgrade mozilla-nss-certsUpgrade MozillaFirefox-branding-SLEDUpgrade firefox-libcairo2Upgrade firefox-libgdk_pixbuf-2_0-0Upgrade libfirefox-gobject-2_0-0 | Dec 12, 2019 | Dec 11, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub