nodejs vulnerabilities (Ubuntu)
224 vulnerabilities.
nodejsUbuntuAn untrusted search path vulnerability exists in Node.js. <19.6.1, <18.14.1, <16.19.1, and <14.21...4.2 MediumnodejsUbuntuA cryptographic vulnerability exists in Node.js <19.2.0, <18.14.1, <16.19.1, <14.21.3 that in...7.5 HighnodejsUbuntuNULL dereference during PKCS7 data verification7.5 HighnodejsUbuntuX.400 address type confusion in X.509 GeneralName7.4 HighnodejsUbuntuUse-after-free following BIO_new_NDEF7.5 HighnodejsUbuntuDouble free after calling PEM_read_bio_ex7.5 HighnodejsUbuntuTiming Oracle in RSA Decryption5.9 MediumnodejsUbuntuUsing long exponents in the Diffie-Hellman Key Agreement Protocol allows remote attackers (from...7.5 HighnodejsUbuntuA OS Command Injection vulnerability exists in Node.js versions <14.21.1, <16.18.1, <18.12.1, <19...8.1 HighnodejsUbuntuThe llhttp parser in the http module in Node v18.7.0 does not correctly handle header fields that...6.5 MediumnodejsUbuntuThe llhttp parser in the http module in Node v17.6.0 does not correctly handle multi-line...6.5 MediumnodejsUbuntullhttp allows HTTP Request Smuggling via Improper Delimiting of Header Fields6.5 MediumnodejsUbuntullhttp allows HTTP Request Smuggling via Flawed Parsing of Transfer-Encoding6.5 MediumnodejsUbuntuA OS Command Injection vulnerability exists in Node.js versions <14.20.0, <16.20.0, <18.5.0 due...8.1 HighnodejsUbuntuAES OCB fails to encrypt some bytes5.3 MediumnodejsUbuntuThe c_rehash script allows command injection7.3 HighnodejsUbuntuThe c_rehash script allows command injection7.3 HighnodejsUbuntuInfinite loop in BN_mod_sqrt() reachable when parsing certificates7.5 HighnodejsUbuntuModerate: nodejs:14 security update5.3 MediumnodejsUbuntuNode.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 converts SANs (Subject Alternative Names)...5.3 MediumnodejsUbuntuIf the Node.js https API was used incorrectly and "undefined" was in passed for the ...5.3 MediumnodejsUbuntuNode.js bad7.5 HighnodejsUbuntuNode.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack...7.5 HighnodejsUbuntuNode.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 allow two copies of a header field in...6.5 MediumnodejsUbuntuNode.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 are vulnerable to a use-after-free bug...8.1 HighnodejsUbuntunapi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0,...8.1 HighnodejsUbuntuIncluding trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of...9.8 CriticalnodejsUbuntuImproper Certificate Validation in Node.js 10, 12, and 13 causes the process to abort when...7.5 HighnodejsUbuntuHTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer...9.8 CriticalnodejsUbuntuPadding Oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey3.7 LownodejsUbuntuSome HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service7.5 HighnodejsUbuntuSome HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service7.5 HighnodejsUbuntuSome HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service7.5 HighnodejsUbuntuKeep-alive HTTP and HTTPS connections can remain open and inactive for up to 2 minutes in Node.js...7.5 HighnodejsUbuntuIn Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before...7.5 HighnodejsUbuntuNode.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Hostname spoofing in...4.3 MediumnodejsUbuntuNode.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial...7.5 HighnodejsUbuntuNode.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with...7.5 HighnodejsUbuntuNode.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can...7.5 HighnodejsUbuntuIn all versions of Node.js prior to 6.14.4, 8.11.4 and 10.9.0 when used with UCS-2 encoding ...7.5 HighnodejsUbuntuCalling Buffer.fill() or Buffer.alloc() with some parameters can lead to a hang which could...7.5 HighnodejsUbuntuAll versions of Node.js 8.x, 9.x, and 10.x are vulnerable and the severity is HIGH. An attacker...7.5 HighnodejsUbuntuWithdrawn Advisory: Node.js Inspector RCE via DNS Rebinding8.8 HighnodejsUbuntuThe HTTP parser in all current versions of Node.js ignores spaces in the `Content-Length` header,...5.3 MediumnodejsUbuntuThe `'path'` module in the Node.js 4.x release line contains a potential regular expression...7.5 HighnodejsUbuntuNode.js v4.0 through v4.8.3, all versions of v5.x, v6.0 through v6.11.0, v7.0 through v7.10.0,...7.5 HighnodejsUbuntuThe c-ares function `ares_parse_naptr_reply()`, which is used for parsing NAPTR responses, could...7.5 HighnodejsUbuntuThe tls.checkServerIdentity function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x...5.9 MediumnodejsUbuntuCRLF injection vulnerability in the ServerResponse#writeHead function in Node.js 0.10.x before 0...6.1 MediumnodejsUbuntuThe HTTP header parsing code in Node.js 0.10.x before 0.10.42, 0.11.6 through 0.11.16, 0.12.x...7.5 High- Show moreLoading…