Skip to content
OpenAdvisories
Medium USN-5098-1 1 CVE

node-bl vulnerability

Published Sep 30, 2021 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

It was discovered that bl didn't properly sanitize the inputs. An attacker
could use this to leak sensitive information.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS node-bl 1.1.2-1ubuntu1.1

Vulnerabilities 1

  • Medium 6.5
    CVE-2020-8244

    Remote Memory Exposure in bl

    A buffer over-read vulnerability exists in bl <4.0.3, <3.0.1, <2.2.1, and <1.2.3 which could allow an attacker to supply user input (even typed) that if it ends up in consume() argument and can become negative, the BufferList state can be corrupted, tricking …

    bl node-bl node-bl Debian Ubuntu npm

References

  • report
    https://ubuntu.com/security/CVE-2020-8244