Red Hat Security AdvisoryRHSA-2017:2908
rh-nodejs6-nodejs security update
Released 2017-10-18 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) rh-nodejs6-nodejs-6.11.3-2.el6, rh-nodejs6-nodejs-devel-6.11.3-2.el6, rh-nodejs6-nodejs-docs-6.11.3-2.el6
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-nodejs6-nodejs-6.11.3-2.el7, rh-nodejs6-nodejs-devel-6.11.3-2.el7, rh-nodejs6-nodejs-docs-6.11.3-2.el7
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7) rh-nodejs6-nodejs-6.11.3-2.el6, rh-nodejs6-nodejs-devel-6.11.3-2.el6, rh-nodejs6-nodejs-docs-6.11.3-2.el6
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3) rh-nodejs6-nodejs-6.11.3-2.el7, rh-nodejs6-nodejs-devel-6.11.3-2.el7, rh-nodejs6-nodejs-docs-6.11.3-2.el7
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) rh-nodejs6-nodejs-6.11.3-2.el6, rh-nodejs6-nodejs-devel-6.11.3-2.el6, rh-nodejs6-nodejs-docs-6.11.3-2.el6
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-nodejs6-nodejs-6.11.3-2.el7, rh-nodejs6-nodejs-devel-6.11.3-2.el7, rh-nodejs6-nodejs-docs-6.11.3-2.el7
Fixes 2 records
Priority MEDIUM 41
Node.js v4.0 through v4.8.3, all versions of v5.x, v6.0 through v6.11.0, v7.0 through v7.10.0, and v8.0 through v8.1.3 was susceptible to hash flooding remote DoS attacks as the HashTable seed was constant across a given…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.05434 · Published 2017-07-25 · Partial fix CWE-20
Priority LOW 39
The c-ares function `ares_parse_naptr_reply()`, which is used for parsing NAPTR responses, could be triggered to read memory outside of the given input buffer if the passed in DNS response packet was crafted in a particu…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03337 · Published 2017-07-07 · Partial fix CWE-200
