libuv vulnerabilities (Mageia)
31 vulnerabilities.
-
libuvMageia Improper Domain Lookup that potentially leads to SSRF attacks in libuv 7.3 High -
libuvMageia Out-of-Bounds Read in Node.js 5.3 Medium -
libuvMageia The implementation of realpath in libuv < 10.22.1, < 12.18.4, and < 14.9.0 used within Node.js... 7.8 High -
libuvMageia napi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0,... 8.1 High -
libuvMageia Including trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of... 9.8 Critical -
libuvMageia Improper Certificate Validation in Node.js 10, 12, and 13 causes the process to abort when... 7.5 High -
libuvMageia HTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer... 9.8 Critical -
libuvMageia Arbitrary File Overwrite in npm CLI 7.7 High -
libuvMageia Unauthorized File Access in npm CLI before before version 6.13.3 7.7 High -
libuvMageia Unauthorized File Access in npm CLI before before version 6.13.3 7.7 High -
libuvMageia Some HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service 7.5 High -
libuvMageia Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service 7.5 High -
libuvMageia Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service 7.5 High -
libuvMageia Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service 7.5 High -
libuvMageia Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service 7.5 High -
libuvMageia Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service 7.5 High -
libuvMageia Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service 7.5 High -
libuvMageia Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service 7.5 High -
libuvMageia Keep-alive HTTP and HTTPS connections can remain open and inactive for up to 2 minutes in Node.js... 7.5 High -
libuvMageia In Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before... 7.5 High -
libuvMageia Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Hostname spoofing in... 4.3 Medium -
libuvMageia Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial... 7.5 High -
libuvMageia Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with... 7.5 High -
libuvMageia Node.js: All versions prior to Node.js 6.15.0: Debugger port 5858 listens on any interface by... 8.1 High -
libuvMageia Node.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can... 7.5 High -
libuvMageia In all versions of Node.js prior to 6.14.4, 8.11.4 and 10.9.0 when used with UCS-2 encoding ... 7.5 High -
libuvMageia Calling Buffer.fill() or Buffer.alloc() with some parameters can lead to a hang which could... 7.5 High -
libuvMageia Withdrawn Advisory: Node.js Inspector RCE via DNS Rebinding 8.8 High -
libuvMageia The HTTP parser in all current versions of Node.js ignores spaces in the `Content-Length` header,... 5.3 Medium -
libuvMageia The `'path'` module in the Node.js 4.x release line contains a potential regular expression... 7.5 High -
libuvMageia The c-ares function `ares_parse_naptr_reply()`, which is used for parsing NAPTR responses, could... 7.5 High