Improper Certificate Validation in Node.js 10, 12, and 13 causes the process to abort when sending a crafted X.509 certificate
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-nodemonUpgrade nodejs-packaging | May 4, 2022 | Feb 7, 2020 |
| Alpine Linux | — | Upgrade nodejsUpgrade nodejs-current | Aug 22, 2024 | Feb 7, 2020 |
| Centos_linux | — | Upgrade nodejs-debugsourceUpgrade nodejs-packagingUpgrade nodejs-nodemonUpgrade nodejs-docsUpgrade nodejs-develUpgrade nodejs-devel-debuginfoUpgrade nodejs-debuginfoUpgrade nodejsUpgrade npm | Feb 26, 2020 | Feb 7, 2020 |
| Debian | — | Upgrade nodejs | May 1, 2020 | Feb 7, 2020 |
| Freebsd | — | Upgrade node10Upgrade node12Upgrade node | Mar 10, 2020 | Mar 9, 2020 |
| Gentoo Linux | — | Upgrade net-libs/nodejs. | Mar 23, 2020 | Feb 7, 2020 |
| Oracle Solaris | — | Upgrade runtime/nodejs to version 10.19.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade runtime/nodejs/nodejs-10 to version 10.19.0-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Feb 7, 2020 |
| Oracle_linux | — | Upgrade nodejs-docsUpgrade nodejs-nodemonUpgrade nodejs-packagingUpgrade npmUpgrade nodejs-develUpgrade nodejs | Mar 2, 2020 | Feb 7, 2020 |
| Redhat_linux | — | Upgrade nodejs-devel-debuginfoUpgrade nodejsUpgrade nodejs-debugsourceUpgrade nodejs-docsUpgrade nodejs-packagingUpgrade nodejs-develUpgrade nodejs-nodemonUpgrade nodejs-debuginfoUpgrade npm | Feb 26, 2020 | Feb 7, 2020 |
| Rocky_linux | — | — | Aug 15, 2024 | Feb 7, 2020 |
| Suse | — | Upgrade npm12Upgrade npm6Upgrade nodejs6-develUpgrade nodejs10-develUpgrade npm8Upgrade nodejs10-docsUpgrade npm10Upgrade nodejs12-docsUpgrade nodejs10Upgrade nodejs6-docsUpgrade nodejs12-develUpgrade nodejs8-docsUpgrade nodejs8Upgrade nodejs8-develUpgrade nodejs12Upgrade nodejs6 | Mar 3, 2020 | Feb 7, 2020 |
| Ubuntu | — | Upgrade nodejsUpgrade libnode-devUpgrade nodejs (Ubuntu Pro)Upgrade libnode64Upgrade nodejs-dev (Ubuntu Pro)Upgrade nodejs-legacy (Ubuntu Pro) | Sep 20, 2023 | Feb 7, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 7, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub