Node.js had a bug in versions 8.X and 9.X which caused buffers to not be initialized when the encoding for the fill value did not match the encoding specified. For example, 'Buffer.alloc(0x100, "This is not correctly encoded", "hex");' The buffer implementation was updated such that the buffer will be initialized to all zeros in these cases.
CVSS Details
- CVSS 3.1 Base Score: 3.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade nodejs-currentUpgrade nodejs | Aug 22, 2024 | Dec 11, 2017 |
| Freebsd | — | Upgrade node8Upgrade node6Upgrade nodeUpgrade node4 | Dec 14, 2017 | Dec 14, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 7, 2017 |
| Suse | — | Upgrade mozilla-nspr-develUpgrade firefox-gtk3-immodule-inuktitutUpgrade MozillaFirefox-translations-commonUpgrade firefox-libharfbuzz0Upgrade firefox-libgtk-3-0Upgrade mozilla-nspr-32bitUpgrade nodejs10-docsUpgrade firefox-gtk3-branding-upstreamUpgrade firefox-libffi4Upgrade MozillaFirefoxUpgrade libsoftokn3-32bitUpgrade firefox-gtk3-immodule-multipressUpgrade firefox-gdk-pixbuf-query-loadersUpgrade libfirefox-gmodule-2_0-0Upgrade libsoftokn3Upgrade firefox-gtk3-immodules-tigrignaUpgrade MozillaFirefox-translations-otherUpgrade libfirefox-gthread-2_0-0Upgrade firefox-gtk3-dataUpgrade nodejs10-develUpgrade npm10Upgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-glib2-langUpgrade firefox-libffi7Upgrade firefox-gtk3-immodule-thaiUpgrade mozilla-nsprUpgrade firefox-gio-branding-upstreamUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade nodejs10Upgrade libfreebl3Upgrade firefox-libatk-1_0-0Upgrade libfreebl3-32bitUpgrade firefox-gtk3-toolsUpgrade firefox-glib2-toolsUpgrade mozilla-nss-certsUpgrade firefox-gtk3-immodule-ximUpgrade libfirefox-gobject-2_0-0Upgrade npm8Upgrade firefox-gtk3-langUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade nodejs8Upgrade firefox-libcairo-gobject2Upgrade mozilla-nss-toolsUpgrade firefox-libcairo2Upgrade mozilla-nss-develUpgrade mozilla-nss-32bitUpgrade firefox-gdk-pixbuf-langUpgrade mozilla-nssUpgrade firefox-libpango-1_0-0Upgrade libfirefox-gio-2_0-0Upgrade nodejs8-develUpgrade libfirefox-glib-2_0-0Upgrade mozilla-nss-certs-32bitUpgrade firefox-atk-langUpgrade nodejs8-docsUpgrade MozillaFirefox-branding-SLEDUpgrade firefox-gtk3-immodule-amharic | Dec 12, 2019 | Dec 11, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub