Red Hat Security Advisory

RHSA-2024:3472

rh-nodejs14 security update

Released 2024-05-29 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Software Collections for RHEL Workstation(v. 7) rh-nodejs14-nodejs-14.21.3-7.el7, rh-nodejs14-nodejs-devel-14.21.3-7.el7, rh-nodejs14-nodejs-docs-14.21.3-7.el7 +2
Red Hat Software Collections for RHEL(v. 7) rh-nodejs14-nodejs-14.21.3-7.el7, rh-nodejs14-nodejs-devel-14.21.3-7.el7, rh-nodejs14-nodejs-docs-14.21.3-7.el7 +2

Fixes 1 record

TI-2024-18584 CVE-2024-27983 · GHSA-j65r-8hrg-qc6x

Race condition in NodeJS Node

HIGH 84

An attacker can make the Node.js HTTP/2 server completely unavailable by sending a small amount of HTTP/2 frames packets with a few HTTP/2 frames inside.

CVSS 3.0HIGH 8.2 Network No auth No interaction EPSS 0.87211 Published 2024-04-09 Partial fix · 18.20.1, 20.12.1 +1 CWE-362