nodejs4 vulnerabilities (SUSE)
33 vulnerabilities.
-
nodejs4SUSE Arbitrary File Overwrite in fstream 7.5 High -
nodejs4SUSE Keep-alive HTTP and HTTPS connections can remain open and inactive for up to 2 minutes in Node.js... 7.5 High -
nodejs4SUSE In Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before... 7.5 High -
nodejs4SUSE 0-byte record padding oracle 5.9 Medium -
nodejs4SUSE Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Hostname spoofing in... 4.3 Medium -
nodejs4SUSE Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial... 7.5 High -
nodejs4SUSE Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with... 7.5 High -
nodejs4SUSE Node.js: All versions prior to Node.js 6.15.0: Debugger port 5858 listens on any interface by... 8.1 High -
nodejs4SUSE Node.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can... 7.5 High -
nodejs4SUSE Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software... 4.7 Medium -
nodejs4SUSE Timing attack against DSA 5.9 Medium -
nodejs4SUSE In all versions of Node.js prior to 6.14.4, 8.11.4 and 10.9.0 when used with UCS-2 encoding ... 7.5 High -
nodejs4SUSE Client DoS due to large DH parameter 7.5 High -
nodejs4SUSE The HTTP parser in all current versions of Node.js ignores spaces in the `Content-Length` header,... 5.3 Medium -
nodejs4SUSE The `'path'` module in the Node.js 4.x release line contains a potential regular expression... 7.5 High -
nodejs4SUSE Node.js was affected by OpenSSL vulnerability CVE-2017-3737 in regards to the use of SSL_read()... 9.1 Critical -
nodejs4SUSE There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation... 5.9 Medium -
nodejs4SUSE There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1... 6.5 Medium -
nodejs4SUSE Node.js before 4.8.5, 6.x before 6.11.5, and 8.x before 8.8.0 allows remote attackers to cause a... 7.5 High -
nodejs4SUSE While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one... 5.3 Medium -
nodejs4SUSE Node.js v4.0 through v4.8.3, all versions of v5.x, v6.0 through v6.11.0, v7.0 through v7.10.0,... 7.5 High -
nodejs4SUSE The c-ares function `ares_parse_naptr_reply()`, which is used for parsing NAPTR responses, could... 7.5 High -
nodejs4SUSE BN_mod_exp may produce incorrect results on x86_64 5.9 Medium -
nodejs4SUSE Truncated packet could crash via OOB read 7.5 High -
nodejs4SUSE There is a carry propagating bug in the Broadwell-specific Montgomery multiplication procedure in... 5.9 Medium -
nodejs4SUSE The tls.checkServerIdentity function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x... 5.9 Medium -
nodejs4SUSE CRLF injection vulnerability in the ServerResponse#writeHead function in Node.js 0.10.x before 0... 6.1 Medium -
nodejs4SUSE Heap-based buffer overflow in the ares_create_query function in c-ares 1.x before 1.12.0 allows... 9.8 Critical -
nodejs4SUSE crypto/x509/x509_vfy.c in OpenSSL 1.0.2i allows remote attackers to cause a denial of service ... 7.5 High -
nodejs4SUSE Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before... 7.5 High -
nodejs4SUSE The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote... 5.9 Medium -
nodejs4SUSE The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols... 7.5 High -
nodejs4SUSE The dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly... 5.5 Medium