The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 are vulnerable to a use-after-free bug in its TLS implementation. When writing to a TLS enabled socket, node::StreamBase::Write calls node::TLSWrap::DoWrite with a freshly allocated WriteWrap object as first argument. If the DoWrite method does not return an error, this object is passed back to the caller as part of a StreamWriteResult structure. This may be exploited to corrupt memory leading to a Denial of Service or potentially other exploits.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-packagingUpgrade nodejs-nodemon | May 4, 2022 | Jan 6, 2021 |
| Alpine Linux | — | Upgrade nodejs-currentUpgrade nodejs | Aug 22, 2024 | Jan 6, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 6, 2021 |
| Centos_linux | — | Upgrade npmUpgrade nodejs-develUpgrade nodejs-debuginfoUpgrade nodejs-nodemonUpgrade nodejs-docsUpgrade nodejs-packagingUpgrade nodejsUpgrade nodejs-debugsourceUpgrade nodejs-full-i18n | Feb 17, 2021 | Jan 6, 2021 |
| Debian | — | Upgrade nodejs | Jan 8, 2021 | Jan 6, 2021 |
| Freebsd | — | Upgrade nodeUpgrade node12Upgrade node14Upgrade node10 | Jan 15, 2021 | Jan 14, 2021 |
| Gentoo Linux | — | Upgrade net-libs/nodejs. | Jan 12, 2021 | Jan 6, 2021 |
| Oracle Solaris | — | Upgrade runtime/nodejs/nodejs-12 to version 12.21.0-11.4.32.0.1.88.2 on Solaris 11.4Upgrade runtime/nodejs/nodejs-10 to version 10.22.1-11.4.32.0.1.88.2 on Solaris 11.4Upgrade runtime/nodejs to version 12.21.0-11.4.32.0.1.88.2 on Solaris 11.4 | Apr 21, 2021 | Jan 6, 2021 |
| Oracle_linux | — | Upgrade nodejs-docsUpgrade npmUpgrade nodejs-develUpgrade nodejsUpgrade nodejs-packagingUpgrade nodejs-full-i18nUpgrade nodejs-nodemon | Feb 20, 2021 | Jan 4, 2021 |
| Redhat_linux | — | Upgrade nodejs-full-i18nUpgrade nodejs-debuginfoUpgrade nodejs-packagingUpgrade npmUpgrade nodejs-docsUpgrade nodejs-nodemonUpgrade nodejsUpgrade nodejs-develUpgrade nodejs-debugsource | Feb 17, 2021 | Jan 6, 2021 |
| Rocky_linux | — | — | Aug 15, 2024 | Jan 6, 2021 |
| Suse | — | Upgrade nodejs12-develUpgrade nodejs12Upgrade nodejs10Upgrade nodejs14Upgrade npm12Upgrade npm10Upgrade nodejs10-develUpgrade npm14Upgrade nodejs14-docsUpgrade nodejs10-docsUpgrade nodejs12-docsUpgrade nodejs14-devel | Jan 12, 2021 | Jan 6, 2021 |
| Ubuntu | — | Upgrade nodejs-dev (Ubuntu Pro)Upgrade libnode-devUpgrade libnode64Upgrade nodejs (Ubuntu Pro)Upgrade nodejs-legacy (Ubuntu Pro)Upgrade nodejs | Sep 20, 2023 | Jan 6, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 6, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub