Improper Certificate Validation in Node.js 10, 12, and 13 causes the process to abort when sending a crafted X.509 certificate
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-nodemonUpgrade nodejs-packaging | May 4, 2022 | Feb 7, 2020 |
| Alpine Linux | — | Upgrade nodejsUpgrade nodejs-current | Aug 22, 2024 | Feb 7, 2020 |
| Centos_linux | — | Upgrade nodejsUpgrade nodejs-debuginfoUpgrade npmUpgrade nodejs-docsUpgrade nodejs-debugsourceUpgrade nodejs-develUpgrade nodejs-packagingUpgrade nodejs-devel-debuginfoUpgrade nodejs-nodemon | Feb 26, 2020 | Feb 7, 2020 |
| Debian | — | Upgrade nodejs | May 1, 2020 | Feb 7, 2020 |
| Freebsd | — | Upgrade nodeUpgrade node12Upgrade node10 | Mar 10, 2020 | Mar 9, 2020 |
| Gentoo Linux | — | Upgrade net-libs/nodejs. | Mar 23, 2020 | Feb 7, 2020 |
| Oracle Solaris | — | Upgrade runtime/nodejs/nodejs-10 to version 10.19.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade runtime/nodejs to version 10.19.0-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Feb 7, 2020 |
| Oracle_linux | — | Upgrade nodejs-nodemonUpgrade nodejs-packagingUpgrade nodejs-docsUpgrade nodejs-develUpgrade nodejsUpgrade npm | Mar 2, 2020 | Feb 7, 2020 |
| Redhat_linux | — | Upgrade nodejs-debuginfoUpgrade nodejs-nodemonUpgrade npmUpgrade nodejs-develUpgrade nodejs-docsUpgrade nodejsUpgrade nodejs-packagingUpgrade nodejs-debugsourceUpgrade nodejs-devel-debuginfo | Feb 26, 2020 | Feb 7, 2020 |
| Rocky_linux | — | — | Aug 15, 2024 | Feb 7, 2020 |
| Suse | — | Upgrade nodejs6-develUpgrade npm12Upgrade nodejs12-docsUpgrade nodejs10-develUpgrade npm10Upgrade nodejs10-docsUpgrade npm6Upgrade npm8Upgrade nodejs8Upgrade nodejs12Upgrade nodejs10Upgrade nodejs12-develUpgrade nodejs6Upgrade nodejs8-develUpgrade nodejs6-docsUpgrade nodejs8-docs | Mar 3, 2020 | Feb 7, 2020 |
| Ubuntu | — | Upgrade libnode-devUpgrade nodejsUpgrade libnode64Upgrade nodejs (Ubuntu Pro)Upgrade nodejs-legacy (Ubuntu Pro)Upgrade nodejs-dev (Ubuntu Pro) | Sep 20, 2023 | Feb 7, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 7, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub