The Vigil@nce team watches public vulnerabilities impacting your computers, and then offers security solutions, a vigilance database and tools to fix them.

Computer vulnerabilities of Node.js Core

OpenSSL 1.0.2: information disclosure via 0-byte Record Padding Oracle
An attacker can bypass access restrictions to data via 0-byte Record Padding Oracle of OpenSSL 1.0.2, in order to obtain sensitive information...
1170328, bulletinapr2019, bulletinjul2019, CERTFR-2019-AVI-080, CERTFR-2019-AVI-132, CERTFR-2019-AVI-214, CERTFR-2019-AVI-325, cpuapr2019, cpujan2020, cpujul2019, cpuoct2019, CVE-2019-1559, DLA-1701-1, DSA-2019-201, DSA-2020-062, DSA-2020-072, DSA-4400-1, FEDORA-2019-00c25b9379, ibm10876638, ibm10886237, ibm10886659, JSA10949, JSA10993, openSUSE-SU-2019:1076-1, openSUSE-SU-2019:1105-1, openSUSE-SU-2019:1173-1, openSUSE-SU-2019:1175-1, openSUSE-SU-2019:1432-1, openSUSE-SU-2019:1637-1, PAN-SA-2019-0039, RHBUG-1683804, RHBUG-1683807, RHSA-2019:2304-01, RHSA-2019:2471-01, SB10282, SSA:2019-057-01, SSB-439005, STORM-2019-001, SUSE-SU-2019:0572-1, SUSE-SU-2019:0600-1, SUSE-SU-2019:0658-1, SUSE-SU-2019:0803-1, SUSE-SU-2019:0818-1, SUSE-SU-2019:1362-1, SUSE-SU-2019:14091-1, SUSE-SU-2019:14092-1, SUSE-SU-2019:1553-1, SUSE-SU-2019:1608-1, SYMSA1490, TNS-2019-02, USN-3899-1, VIGILANCE-VUL-28600
Node Core: five vulnerabilities
An attacker can use several vulnerabilities of Node Core...
CVE-2018-12116, CVE-2018-12120, CVE-2018-12121, CVE-2018-12122, CVE-2018-12123, ibm10787619, ibm10794537, ibm10878136, K37111863, openSUSE-SU-2019:0088-1, openSUSE-SU-2019:0089-1, openSUSE-SU-2019:0234-1, RHSA-2019:1821-01, RHSA-2019:2258-01, RHSA-2019:3497-01, SUSE-SU-2019:0117-1, SUSE-SU-2019:0118-1, SUSE-SU-2019:0395-1, VIGILANCE-VUL-27900
OpenSSL: information disclosure via DSA Signature Generation
An attacker can bypass access restrictions to data via DSA Signature Generation of OpenSSL, in order to obtain sensitive information...
1170322, bulletinapr2019, bulletinjan2019, CERTFR-2018-AVI-607, cpuapr2019, cpuapr2020, cpujan2019, cpujan2020, cpujul2019, CVE-2018-0734, DSA-2019-197, DSA-2020-030, DSA-2020-062, DSA-4348-1, DSA-4355-1, FEDORA-2019-00c25b9379, ibm10794537, ibm10875298, openSUSE-SU-2018:3890-1, openSUSE-SU-2018:3903-1, openSUSE-SU-2018:4050-1, openSUSE-SU-2018:4104-1, openSUSE-SU-2019:0084-1, openSUSE-SU-2019:0088-1, openSUSE-SU-2019:0138-1, openSUSE-SU-2019:0234-1, openSUSE-SU-2019:1547-1, openSUSE-SU-2019:1814-1, RHSA-2019:2304-01, RHSA-2019:3700-01, SSA:2018-325-01, SUSE-SU-2018:3863-1, SUSE-SU-2018:3864-1, SUSE-SU-2018:3864-2, SUSE-SU-2018:3866-1, SUSE-SU-2018:3964-1, SUSE-SU-2018:3989-1, SUSE-SU-2018:4001-1, SUSE-SU-2018:4068-1, SUSE-SU-2018:4274-1, SUSE-SU-2019:0117-1, SUSE-SU-2019:0395-1, SUSE-SU-2019:1553-1, TNS-2018-16, TNS-2018-17, USN-3840-1, VIGILANCE-VUL-27640
OpenSSL: information disclosure via ECDSA Signature Generation
An attacker can bypass access restrictions to data via ECDSA Signature Generation of OpenSSL, in order to obtain sensitive information...
bulletinjan2019, cpuapr2019, cpujan2020, cpujul2019, CVE-2018-0735, DLA-1586-1, DSA-4348-1, ibm10794537, openSUSE-SU-2018:3890-1, RHSA-2019:3700-01, SUSE-SU-2018:3863-1, SYMSA1490, USN-3840-1, VIGILANCE-VUL-27631
Node Core: information disclosure via Buffer.alloc
A local attacker can read a memory fragment via Buffer.alloc() of Node Core, in order to obtain sensitive information...
CVE-2018-7166, ibm10730325, VIGILANCE-VUL-27030
Node Core: buffer overflow via UCS-2 Encoding Buffer.write
An attacker can generate a buffer overflow via UCS-2 Encoding Buffer.write() of Node Core, in order to trigger a denial of service, and possibly to run code...
CVE-2018-12115, FEDORA-2018-cfe558a202, FEDORA-2018-d0505c1f21, ibm10730325, openSUSE-SU-2018:2667-1, openSUSE-SU-2018:2816-1, openSUSE-SU-2018:2855-1, RHSA-2018:2949-01, SUSE-SU-2018:2647-1, SUSE-SU-2018:2812-1, VIGILANCE-VUL-27029
Node.js Core: denial of service via Unused Memory
An attacker can generate a fatal error via Unused Memory of Node.js Core, in order to trigger a denial of service...
CVE-2018-7164, ibm10715995, VIGILANCE-VUL-26421
Node.js Core: use after free via TLS
An attacker can force the usage of a freed memory area via TLS of Node.js Core, in order to trigger a denial of service, and possibly to run code...
CVE-2018-7162, FEDORA-2018-79841c871e, FEDORA-2018-f59d961d7b, ibm10715995, VIGILANCE-VUL-26420
Node.js Core: denial of service via HTTP2 Cleanup
An attacker can generate a fatal error via HTTP2 Cleanup of Node.js Core, in order to trigger a denial of service...
CVE-2018-7161, FEDORA-2018-79841c871e, FEDORA-2018-f59d961d7b, ibm10715995, ibm10728705, openSUSE-SU-2018:1963-1, SUSE-SU-2018:1918-1, VIGILANCE-VUL-26419
Node.js Core: denial of service via Buffer.fill
An attacker can generate a fatal error via Buffer.fill() of Node.js Core, in order to trigger a denial of service...
CVE-2018-7167, FEDORA-2018-79841c871e, FEDORA-2018-f59d961d7b, ibm10715995, openSUSE-SU-2018:1962-1, openSUSE-SU-2018:1963-1, SUSE-SU-2018:1892-1, SUSE-SU-2018:1918-1, VIGILANCE-VUL-26418
Our database contains other pages. You can request a free trial to read them.

Display information about Node.js Core: