The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A buffer over-read vulnerability exists in bl <4.0.3, <3.0.1, <2.2.1, and <1.2.3 which could allow an attacker to supply user input (even typed) that if it ends up in consume() argument and can become negative, the BufferList state can be corrupted, tricking it into exposing uninitialized memory via regular .slice() calls.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade node-bl | Jul 2, 2021 | Aug 30, 2020 |
| Ubuntu | — | Upgrade node-bl (Ubuntu Pro)Upgrade node-bl | Oct 5, 2021 | Aug 30, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub