Red Hat Security AdvisoryRHSA-2017:3002
rh-nodejs4-nodejs security and bug fix update
Released 2017-10-23 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) rh-nodejs4-2.4-4.el6, rh-nodejs4-node-gyp-3.3.1-5.el6, rh-nodejs4-nodejs-1:4.6.2-7.el6 +4
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-nodejs4-2.4-3.el7, rh-nodejs4-nodejs-1:4.6.2-6.el7, rh-nodejs4-nodejs-devel-1:4.6.2-6.el7 +3
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7) rh-nodejs4-2.4-4.el6, rh-nodejs4-node-gyp-3.3.1-5.el6, rh-nodejs4-nodejs-1:4.6.2-7.el6 +4
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3) rh-nodejs4-2.4-3.el7, rh-nodejs4-nodejs-1:4.6.2-6.el7, rh-nodejs4-nodejs-devel-1:4.6.2-6.el7 +3
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) rh-nodejs4-2.4-4.el6, rh-nodejs4-node-gyp-3.3.1-5.el6, rh-nodejs4-nodejs-1:4.6.2-7.el6 +4
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-nodejs4-2.4-3.el7, rh-nodejs4-nodejs-1:4.6.2-6.el7, rh-nodejs4-nodejs-devel-1:4.6.2-6.el7 +3
Fixes 1 record
Priority MEDIUM 41
Node.js v4.0 through v4.8.3, all versions of v5.x, v6.0 through v6.11.0, v7.0 through v7.10.0, and v8.0 through v8.1.3 was susceptible to hash flooding remote DoS attacks as the HashTable seed was constant across a given…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.05434 · Published 2017-07-25 · Partial fix CWE-20
