nodejs6 vulnerabilities (SUSE)
35 vulnerabilities.
-
nodejs6SUSE napi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0,... 8.1 High -
nodejs6SUSE Prototype Pollution in minimist 5.6 Medium -
nodejs6SUSE Including trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of... 9.8 Critical -
nodejs6SUSE Improper Certificate Validation in Node.js 10, 12, and 13 causes the process to abort when... 7.5 High -
nodejs6SUSE HTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer... 9.8 Critical -
nodejs6SUSE Arbitrary File Overwrite in npm CLI 7.7 High -
nodejs6SUSE Unauthorized File Access in npm CLI before before version 6.13.3 7.7 High -
nodejs6SUSE Unauthorized File Access in npm CLI before before version 6.13.3 7.7 High -
nodejs6SUSE Arbitrary File Overwrite in fstream 7.5 High -
nodejs6SUSE Keep-alive HTTP and HTTPS connections can remain open and inactive for up to 2 minutes in Node.js... 7.5 High -
nodejs6SUSE In Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before... 7.5 High -
nodejs6SUSE 0-byte record padding oracle 5.9 Medium -
nodejs6SUSE Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Hostname spoofing in... 4.3 Medium -
nodejs6SUSE Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial... 7.5 High -
nodejs6SUSE Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with... 7.5 High -
nodejs6SUSE Node.js: All versions prior to Node.js 6.15.0: Debugger port 5858 listens on any interface by... 8.1 High -
nodejs6SUSE Node.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can... 7.5 High -
nodejs6SUSE Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software... 4.7 Medium -
nodejs6SUSE Timing attack against DSA 5.9 Medium -
nodejs6SUSE In all versions of Node.js prior to 6.14.4, 8.11.4 and 10.9.0 when used with UCS-2 encoding ... 7.5 High -
nodejs6SUSE Calling Buffer.fill() or Buffer.alloc() with some parameters can lead to a hang which could... 7.5 High -
nodejs6SUSE Client DoS due to large DH parameter 7.5 High -
nodejs6SUSE Withdrawn Advisory: Node.js Inspector RCE via DNS Rebinding 8.8 High -
nodejs6SUSE The HTTP parser in all current versions of Node.js ignores spaces in the `Content-Length` header,... 5.3 Medium -
nodejs6SUSE The `'path'` module in the Node.js 4.x release line contains a potential regular expression... 7.5 High -
nodejs6SUSE Node.js was affected by OpenSSL vulnerability CVE-2017-3737 in regards to the use of SSL_read()... 9.1 Critical -
nodejs6SUSE There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation... 5.9 Medium -
nodejs6SUSE There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1... 6.5 Medium -
nodejs6SUSE Node.js before 4.8.5, 6.x before 6.11.5, and 8.x before 8.8.0 allows remote attackers to cause a... 7.5 High -
nodejs6SUSE While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one... 5.3 Medium -
nodejs6SUSE Node.js v4.0 through v4.8.3, all versions of v5.x, v6.0 through v6.11.0, v7.0 through v7.10.0,... 7.5 High -
nodejs6SUSE The c-ares function `ares_parse_naptr_reply()`, which is used for parsing NAPTR responses, could... 7.5 High -
nodejs6SUSE BN_mod_exp may produce incorrect results on x86_64 5.9 Medium -
nodejs6SUSE Truncated packet could crash via OOB read 7.5 High -
nodejs6SUSE There is a carry propagating bug in the Broadwell-specific Montgomery multiplication procedure in... 5.9 Medium