Red Hat Security Advisory

RHSA-2024:1678

nodejs security update

Released 2024-04-04 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v.9.2) nodejs-1:16.20.2-4.el9_2, nodejs-docs-1:16.20.2-4.el9_2, nodejs-full-i18n-1:16.20.2-4.el9_2 +2

Fixes 1 record

TI-2024-14640 CVE-2024-22019 · GHSA-prhj-8562-p8gj

A vulnerability in Node.js HTTP servers allows an attacker to send a specially crafted…

MEDIUM 45

A vulnerability in Node.js HTTP servers allows an attacker to send a specially crafted HTTP request with chunked encoding, leading to resource exhaustion and denial of service (DoS).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03168 Published 2024-02-20 Partial fix · 18.19.1, 20.11.1 +1 CWE-404