High ELSA-2024-1438 1 CVE

Important: nodejs security update (Oracle Linux 9)

Published Mar 21, 2024 · Updated Mar 21, 2024

Ecosystem: Oracle Linux

Summary

[1:16.20.2-4.0.1]
- reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks
Resolves: CVE-2024-22019

Fixed packages 5

Release	Package	Fixed in
Oracle Linux · 9	nodejs	1:16.20.2-4.0.1.el9_3
Oracle Linux · 9	nodejs-docs	1:16.20.2-4.0.1.el9_3
Oracle Linux · 9	nodejs-full-i18n	1:16.20.2-4.0.1.el9_3
Oracle Linux · 9	nodejs-libs	1:16.20.2-4.0.1.el9_3
Oracle Linux · 9	npm	1:8.19.4-1.16.20.2.4.0.1.el9_3

Vulnerabilities 1

High 7.5

CVE-2024-22019

A vulnerability in Node.js HTTP servers allows an attacker to send a specially crafted HTTP request with chunked encodi…

Node.js node nodejs nodejs Debian Azure Linux Wolfi

Feb 20, 2024