TI-2018-00680 CVE-2018-0732 · GHSA-497c-86pp-222m
Client DoS due to large DH parameter
Priority HIGH 69
During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client.
RHSA-2018:2553
Red Hat OpenShift Application Runtimes Node.js 10.9.0 security update
Released 2018-08-22 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat OpenShift Application Runtimes Node.js 10 npm-1:6.2.0-1.10.9.0.1.el7, rhoar-nodejs-1:10.9.0-1.el7, rhoar-nodejs-docs-1:10.9.0-1.el7
Fixes 3 records
TI-2018-05189 CVE-2018-7166 · GHSA-6v28-c2x2-8p46
Use of uninitialized resource in NodeJS Node.js
Priority MEDIUM 45
In all versions of Node.js 10 prior to 10.9.0, an argument processing flaw can cause `Buffer.alloc()` to return uninitialized memory.
TI-2018-08691 CVE-2018-12115 · GHSA-q85m-543x-pwpc
Out-of-bounds write in NodeJS Node.js
Priority MEDIUM 43
In all versions of Node.js prior to 6.14.4, 8.11.4 and 10.9.0 when used with UCS-2 encoding (recognized by Node.js under the names `'ucs2'`, `'ucs-2'`, `'utf16le'` and `'utf-16le'`), `Buffer#write()` can be abused to wri…