Node.js was affected by OpenSSL vulnerability CVE-2017-3737 in regards to the use of SSL_read() due to TLS handshake failure. The result was that an active network attacker could send application data to Node.js using the TLS or HTTP2 modules in a way that bypassed TLS authentication and encryption.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade nodejsUpgrade nodejs-current | Aug 22, 2024 | Dec 11, 2017 |
| Freebsd | — | Upgrade nodeUpgrade node8Upgrade node6Upgrade node4 | Dec 14, 2017 | Dec 14, 2017 |
| Suse | — | Upgrade firefox-gtk3-toolsUpgrade MozillaFirefox-branding-SLEDUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade mozilla-nss-develUpgrade firefox-gio-branding-upstreamUpgrade libfirefox-glib-2_0-0Upgrade libfreebl3-32bitUpgrade nodejs6-docsUpgrade mozilla-nssUpgrade firefox-libpango-1_0-0Upgrade libfirefox-gio-2_0-0Upgrade mozilla-nss-32bitUpgrade mozilla-nss-certs-32bitUpgrade firefox-libffi7Upgrade libfirefox-gmodule-2_0-0Upgrade mozilla-nss-certsUpgrade nodejs8-develUpgrade nodejs4-docsUpgrade npm4Upgrade firefox-libcairo2Upgrade firefox-libgtk-3-0Upgrade nodejs10Upgrade nodejs6Upgrade nodejs4-develUpgrade libfreebl3Upgrade firefox-glib2-toolsUpgrade firefox-gtk3-immodule-ximUpgrade firefox-gtk3-branding-upstreamUpgrade MozillaFirefox-translations-otherUpgrade firefox-gtk3-dataUpgrade libfirefox-gthread-2_0-0Upgrade npm6Upgrade firefox-gtk3-immodule-vietnameseUpgrade nodejs8Upgrade nodejs8-docsUpgrade firefox-gtk3-immodule-thaiUpgrade mozilla-nspr-32bitUpgrade nodejs6-develUpgrade firefox-atk-langUpgrade firefox-gtk3-immodules-tigrignaUpgrade nodejs4Upgrade libfirefox-gobject-2_0-0Upgrade firefox-glib2-langUpgrade firefox-gtk3-immodule-amharicUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade mozilla-nspr-develUpgrade firefox-libharfbuzz0Upgrade mozilla-nsprUpgrade firefox-gtk3-langUpgrade npm8Upgrade firefox-gdk-pixbuf-query-loadersUpgrade libsoftokn3Upgrade nodejs10-develUpgrade MozillaFirefox-translations-commonUpgrade nodejs10-docsUpgrade firefox-libatk-1_0-0Upgrade firefox-libffi4Upgrade firefox-gtk3-immodule-inuktitutUpgrade firefox-libcairo-gobject2Upgrade npm10Upgrade libsoftokn3-32bitUpgrade MozillaFirefoxUpgrade firefox-gtk3-immodule-multipressUpgrade firefox-gdk-pixbuf-langUpgrade mozilla-nss-tools | Jan 5, 2018 | Dec 11, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub