nodejs-libs-debuginfo vulnerabilities (Red Hat)
116 vulnerabilities.
nodejs-libs-debuginfoRed Hatundici is vulnerable to Unhandled Exception in undici WebSocket Client Due to Invalid server_max_window_bits Validation7.5 Highnodejs-libs-debuginfoRed Hatundici is vulnerable to Malicious WebSocket 64-bit length overflows undici parser and crashes the client7.5 Highnodejs-libs-debuginfoRed Hatundici is vulnerable to CRLF Injection via upgrade option4.6 Mediumnodejs-libs-debuginfoRed Hatundici is vulnerable to Unbounded Memory Consumption in in Undici's DeduplicationHandler via Response Buffering leads to DoS5.9 Mediumnodejs-libs-debuginfoRed Hatundici is vulnerable to Unbounded Memory Consumption in undici WebSocket permessage-deflate Decompression7.5 Highnodejs-libs-debuginfoRed Hatundici is vulnerable to Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')6.5 Mediumnodejs-libs-debuginfoRed Hatminimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions7.5 Highnodejs-libs-debuginfoRed Hatminimatch has a ReDoS via repeated wildcards with non-matching literal in pattern8.7 Highnodejs-libs-debuginfoRed HatUncontrolled Resource Consumption in @isaacs/brace-expansion9.2 Criticalnodejs-libs-debuginfoRed HatA flaw in Node.js TLS error handling allows remote attackers to crash or exhaust resources of a...5.9 Mediumnodejs-libs-debuginfoRed HatWe have identified a bug in Node.js error handling where "Maximum call stack size exceeded"...5.9 Mediumnodejs-libs-debuginfoRed HatA malformed `HTTP/2 HEADERS` frame with oversized, invalid `HPACK` data can cause Node.js to...7.5 Highnodejs-libs-debuginfoRed HatA flaw in Node.js's permission model allows a file's access and modification timestamps to be...2.8 Lownodejs-libs-debuginfoRed HatA flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are...7.1 Highnodejs-libs-debuginfoRed HatA flaw in Node.js’s Permissions model allows attackers to bypass `--allow-fs-read` and `--allow...7.1 Highnodejs-libs-debuginfoRed HatInteger Truncation on SQLite7.2 Highnodejs-libs-debuginfoRed HatThe C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user...7.5 Highnodejs-libs-debuginfoRed HatIn Node.js, the `ReadFileUtf8` internal binding leaks memory due to a corrupted pointer in ...3.7 Lownodejs-libs-debuginfoRed HatAn integer overflow can be triggered in SQLite’s `concat_ws()` function. The resulting, truncated...6.9 Mediumnodejs-libs-debuginfoRed Hatc-ares has a use-after-free in read_answers()8.3 Highnodejs-libs-debuginfoRed HatA memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY...5.3 Mediumnodejs-libs-debuginfoRed HatWith the aid of the diagnostics_channel utility, an event can be hooked into whenever a worker...7.7 Highnodejs-libs-debuginfoRed HatUndici Uses Insufficiently Random Values6.8 Mediumnodejs-libs-debuginfoRed HatThe team has identified a critical vulnerability in the http server of the most recent version of...6.5 Mediumnodejs-libs-debuginfoRed HatReading unbounded number of HTTP/2 CONTINUATION frames to cause excessive CPU usage5.3 Mediumnodejs-libs-debuginfoRed HatAn attacker can make the Node.js HTTP/2 server completely unavailable by sending a small amount...8.2 Highnodejs-libs-debuginfoRed Hatc-ares out of bounds read in ares__read_line()4.4 Mediumnodejs-libs-debuginfoRed HatA vulnerability in Node.js has been identified, allowing for a Denial of Service (DoS) attack...6.5 Mediumnodejs-libs-debuginfoRed HatA vulnerability in Node.js HTTP servers allows an attacker to send a specially crafted HTTP...7.5 Highnodejs-libs-debuginfoRed HatA privilege escalation vulnerability exists in the experimental policy mechanism in all active...7.5 Highnodejs-libs-debuginfoRed HatThe use of `module.constructor.createRequire()` can bypass the policy mechanism and require...8.8 Highnodejs-libs-debuginfoRed HatThe use of `Module._load()` can bypass the policy mechanism and require modules outside of the...9.8 Criticalnodejs-libs-debuginfoRed HatEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 Highnodejs-libs-debuginfoRed HatThe generateKeys() API function returned from crypto.createDiffieHellman() only generates missing...7.5 Highnodejs-libs-debuginfoRed Hatllhttp vulnerable to HTTP request smuggling7.5 Highnodejs-libs-debuginfoRed HatWhen an invalid public key is used to create an x509 certificate using the crypto.X509Certificate...5.3 Mediumnodejs-libs-debuginfoRed HatThe use of __proto__ in process.mainModule.__proto__.require() can bypass the policy mechanism...7.5 Highnodejs-libs-debuginfoRed Hat0-byte UDP payload DoS in c-ares7.5 Highnodejs-libs-debuginfoRed HatInsufficient randomness in generation of DNS query IDs in c-ares5.9 Mediumnodejs-libs-debuginfoRed HatBuffer Underwrite in ares_inet_net_pton()4.1 Mediumnodejs-libs-debuginfoRed HatAutoTools does not set CARES_RANDOM_FILE during cross compilation3.7 Lownodejs-libs-debuginfoRed HatAn untrusted search path vulnerability exists in Node.js. <19.6.1, <18.14.1, <16.19.1, and <14.21...4.2 Mediumnodejs-libs-debuginfoRed HatA privilege escalation vulnerability exists in Node.js <19.6.1, <18.14.1, <16.19.1 and <14.21.3...7.5 Highnodejs-libs-debuginfoRed HatCRLF Injection in Nodejs ‘undici’ via host6.5 Mediumnodejs-libs-debuginfoRed HatUndici vulnerable to Regular Expression Denial of Service in Headers7.5 Highnodejs-libs-debuginfoRed HatA flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the...8.6 Highnodejs-libs-debuginfoRed Hathttp-cache-semantics vulnerable to Regular Expression Denial of Service5.3 Mediumnodejs-libs-debuginfoRed HatA OS Command Injection vulnerability exists in Node.js versions <14.21.1, <16.18.1, <18.12.1, <19...8.1 Highnodejs-libs-debuginfoRed Hatminimatch ReDoS vulnerability7.5 Highnodejs-libs-debuginfoRed HatA weak randomness in WebCrypto keygen vulnerability exists in Node.js 18 due to a change with...9.1 Critical- Show moreLoading…