Node.js had a bug in versions 8.X and 9.X which caused buffers to not be initialized when the encoding for the fill value did not match the encoding specified. For example, 'Buffer.alloc(0x100, "This is not correctly encoded", "hex");' The buffer implementation was updated such that the buffer will be initialized to all zeros in these cases.
CVSS Details
- CVSS 3.1 Base Score: 3.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade nodejsUpgrade nodejs-current | Aug 22, 2024 | Dec 11, 2017 |
| Freebsd | — | Upgrade node6Upgrade node8Upgrade nodeUpgrade node4 | Dec 14, 2017 | Dec 14, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 7, 2017 |
| Suse | — | Upgrade firefox-gtk3-immodule-ximUpgrade firefox-glib2-toolsUpgrade mozilla-nss-toolsUpgrade firefox-libcairo2Upgrade firefox-gtk3-langUpgrade libfirefox-gio-2_0-0Upgrade mozilla-nss-certs-32bitUpgrade mozilla-nss-develUpgrade mozilla-nss-32bitUpgrade mozilla-nssUpgrade firefox-gdk-pixbuf-langUpgrade npm8Upgrade mozilla-nss-certsUpgrade MozillaFirefox-branding-SLEDUpgrade libfirefox-glib-2_0-0Upgrade firefox-atk-langUpgrade firefox-libcairo-gobject2Upgrade nodejs8Upgrade firefox-gtk3-toolsUpgrade firefox-libatk-1_0-0Upgrade libfreebl3-32bitUpgrade firefox-gtk3-immodule-amharicUpgrade nodejs10Upgrade nodejs8-develUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade nodejs8-docsUpgrade libfirefox-gobject-2_0-0Upgrade firefox-gdk-pixbuf-thumbnailerUpgrade libfreebl3Upgrade firefox-libpango-1_0-0Upgrade firefox-gio-branding-upstreamUpgrade libfirefox-gmodule-2_0-0Upgrade npm10Upgrade firefox-gtk3-immodule-inuktitutUpgrade nodejs10-develUpgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-libffi4Upgrade firefox-gdk-pixbuf-query-loadersUpgrade mozilla-nspr-32bitUpgrade firefox-gtk3-immodule-multipressUpgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-gtk3-branding-upstreamUpgrade libfirefox-gthread-2_0-0Upgrade MozillaFirefoxUpgrade firefox-gtk3-dataUpgrade libsoftokn3-32bitUpgrade firefox-libgtk-3-0Upgrade nodejs10-docsUpgrade firefox-gtk3-immodule-thaiUpgrade firefox-libffi7Upgrade firefox-libharfbuzz0Upgrade MozillaFirefox-translations-commonUpgrade firefox-glib2-langUpgrade MozillaFirefox-translations-otherUpgrade libsoftokn3Upgrade mozilla-nsprUpgrade mozilla-nspr-devel | Dec 12, 2019 | Dec 11, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub