The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The tls.checkServerIdentity function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4.6.0, and 6.x before 6.7.0 does not properly handle wildcards in name fields of X.509 certificates, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade nodejs-lts. | Aug 30, 2017 | Oct 10, 2016 |
| Debian | — | Upgrade nodejs | Jul 30, 2024 | Oct 10, 2016 |
| Suse | — | Upgrade mozilla-nss-develUpgrade mozilla-nss-32bitUpgrade nodejs8Upgrade firefox-gtk3-immodule-inuktitutUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade firefox-gio-branding-upstreamUpgrade firefox-atk-langUpgrade firefox-gtk3-immodule-vietnameseUpgrade nodejs4Upgrade MozillaFirefoxUpgrade firefox-gtk3-branding-upstreamUpgrade mozilla-nss-certsUpgrade nodejs4-develUpgrade firefox-gdk-pixbuf-langUpgrade mozilla-nss-certs-32bitUpgrade firefox-glib2-toolsUpgrade nodejs8-develUpgrade npm8Upgrade firefox-libcairo-gobject2Upgrade libfreebl3-32bitUpgrade libfirefox-gio-2_0-0Upgrade firefox-gtk3-immodule-thaiUpgrade libfirefox-gmodule-2_0-0Upgrade libfirefox-glib-2_0-0Upgrade npm4Upgrade firefox-libpango-1_0-0Upgrade libfirefox-gobject-2_0-0Upgrade mozilla-nsprUpgrade mozilla-nss-toolsUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade nodejs8-docsUpgrade firefox-gtk3-immodule-amharicUpgrade firefox-libffi7Upgrade firefox-libatk-1_0-0Upgrade nodejs4-docsUpgrade libsoftokn3Upgrade firefox-libcairo2Upgrade firefox-gtk3-immodules-tigrignaUpgrade mozilla-nspr-32bitUpgrade firefox-gtk3-immodule-ximUpgrade libfirefox-gthread-2_0-0Upgrade mozilla-nspr-develUpgrade firefox-gtk3-langUpgrade libfreebl3Upgrade firefox-gtk3-dataUpgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-libharfbuzz0Upgrade firefox-glib2-langUpgrade mozilla-nssUpgrade MozillaFirefox-translations-otherUpgrade libsoftokn3-32bitUpgrade firefox-libffi4Upgrade firefox-gtk3-immodule-multipressUpgrade firefox-gtk3-toolsUpgrade MozillaFirefox-translations-commonUpgrade MozillaFirefox-branding-SLEDUpgrade firefox-libgtk-3-0 | Oct 12, 2016 | Oct 6, 2016 |
| Ubuntu | — | Upgrade nodejs-dev (Ubuntu Pro)Upgrade nodejs (Ubuntu Pro)Upgrade nodejs-doc (Ubuntu Pro)Upgrade nodejs-legacy (Ubuntu Pro) | Mar 22, 2023 | Oct 10, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub