High WID-SEC-2023-2535 6 CVEs

Red Hat rh-nodejs8-nodejs: Mehrere Schwachstellen

Published Jul 22, 2019 · Updated Oct 3, 2023 · Revision 2 · de-DE

Vendor: F5 Vendor: Red Hat Product: BIG-IP Product: Enterprise Linux Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat rh-nodejs8-nodejs ausnutzen, um Dateien zu manipulieren.

Product

Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution.

Vulnerabilities 6

High 7.5

CVE-2018-20834

Arbitrary File Overwrite in tar

A vulnerability was found in node-tar before version 4.4.2 (excluding version 2.2.2). An Arbitrary File Overwrite issue exists when extracting a tarball containing a hardlink to a file that already exists on the system, in conjunction with a later plain file …

tar node-tar Debian npm

Apr 30, 2019
Unscored —

CVE-2018-12116

Node.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can be convinced to use un…

The Node.js Project Node.js nodejs nodejs Debian Ubuntu Alpine

Nov 28, 2018
Unscored —

CVE-2018-12121 EPSS 10%

Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with large HTTP headers: B…

The Node.js Project Node.js nodejs nodejs Debian Ubuntu Alpine

Nov 28, 2018
Unscored —

CVE-2018-12122 EPSS 41%

Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial of Service: An attacke…

The Node.js Project Node.js nodejs nodejs Debian Ubuntu Alpine

Nov 28, 2018
Unscored —

CVE-2018-12123

Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Hostname spoofing in URL parser for javascri…

The Node.js Project Node.js nodejs nodejs Debian Ubuntu Alpine

Nov 28, 2018
Unscored —

CVE-2019-5737 Public exploit EPSS 16%

In Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before 11.10.1, an attacker ca…

Node.js Node.js nodejs nodejs Debian Ubuntu Alpine

Mar 28, 2019

Revision history

2023-10-03 #2
Neue Updates von F5 aufgenommen
2019-07-22 #1
Initiale Fassung

References

F5 Security Advisory K000137093 vom 2023-10-02
https://my.f5.com/manage/s/article/K000137093
F5 Security Advisory K000137090 vom 2023-10-02
https://my.f5.com/manage/s/article/K000137090
Red Hat Security Advisory RHSA-2019:1821 vom 2019-07-22
https://access.redhat.com/errata/RHSA-2019:1821