nodejs vulnerabilities (Ubuntu)
224 vulnerabilities.
nodejsUbuntuPossible Heap Buffer Overflow in ASN.1 Multibyte String Conversion8.1 HighnodejsUbuntuHeap Use-After-Free in the PKCS7_verify() Function8.8 HighnodejsUbuntuIncorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes4.8 MediumnodejsUbuntuAES-OCB IV Ignored on EVP_Cipher() Path7.5 HighnodejsUbuntuPossible Out of Bounds Read in X509_VERIFY_PARAM_set1_email()6.2 MediumnodejsUbuntuFFC-DH Peer Validation Uses Attacker-Supplied q3.7 LownodejsUbuntuTrust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate5.3 MediumnodejsUbuntuMulti-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()3.7 LownodejsUbuntuNULL Pointer Dereference in CRMF EncryptedValue Decryption5.9 MediumnodejsUbuntuPossible NULL Dereference in Password-Based CMS Decryption5.9 MediumnodejsUbuntuNULL Dereference in Certificate Verification with OCSP Checking7.5 HighnodejsUbuntuNULL Pointer Dereference in QUIC Server Initial Packet Handling7.5 HighnodejsUbuntuDouble-free When Checking OCSP Stapled Response5.0 MediumnodejsUbuntuUnbounded Memory Growth in the QUIC PATH_CHALLENGE Handler7.5 HighnodejsUbuntuPKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys7.4 HighnodejsUbuntuHeap Buffer Over-read in ASN.1 Content Parsing7.5 HighnodejsUbuntuOut-of-Bounds Write in Google Brotli Decoder9.2 CriticalnodejsUbuntuA flaw in Node.js Permission API can cause a local server to be started (via a Unix domain socket...3.3 LownodejsUbuntuA flaw in Node.js Permission API can cause a file metadata to be modified even on a path that was...3.3 LownodejsUbuntuA flaw in Node.js TLS host verification can cause an attacker to bypass certification validation....4.3 MediumnodejsUbuntuA flaw in Node.js WebCrypto implementation can crash the process if the input of `subtle.encrypt(...7.5 HighnodejsUbuntuA flaw in Node.js TLS hostname handling can cause Embedded-nul hostnames can lead to silent...5.6 MediumnodejsUbuntuA inconsistency in Node.js hostname matching can cause a trust-policy bypass in multi-context...4.2 MediumnodejsUbuntuA flaw in Node.js HTTP/2 client allows a server to send an unlimited number of ORIGIN frames,...5.3 MediumnodejsUbuntuA flaw in Node.js TLS hostname handling can cause Node.js unicode dot separator handling can lead...7.7 HighnodejsUbuntuA flaw in Node.js proxy tunnel error handling could expose proxy credentials in `ERR_PROXY_TUNNEL...5.9 MediumnodejsUbuntuPossible NULL Dereference When Processing CMS KeyTransportRecipientInfo7.5 HighnodejsUbuntuPossible NULL Dereference When Processing CMS KeyAgreeRecipientInfo7.5 HighnodejsUbuntuNULL Pointer Dereference When Processing a Delta CRL7.5 HighnodejsUbuntuPotential Use-after-free in DANE Client Code8.1 HighnodejsUbuntuA flaw in Node.js Permission Model network enforcement leaves Unix Domain Socket (UDS) server...5.3 MediumnodejsUbuntuA flaw in Node.js HTTP request handling causes an uncaught `TypeError` when a request is received...7.5 HighnodejsUbuntuA flaw in Node.js HMAC verification uses a non-constant-time comparison when validating user...5.9 MediumnodejsUbuntuA memory leak occurs in Node.js HTTP/2 servers when a client sends WINDOW_UPDATE frames on stream...5.3 MediumnodejsUbuntuA flaw in Node.js Permission Model filesystem enforcement leaves `fs.realpathSync.native()`...3.3 LownodejsUbuntuAn incomplete fix for CVE-2024-36137 leaves `FileHandle.chmod()` and `FileHandle.chown()` in the...3.3 LownodejsUbuntuA flaw in V8's string hashing mechanism causes integer-like strings to be hashed to their numeric...5.9 MediumnodejsUbuntuOpenSSL TLS 1.3 server may choose unexpected key agreement group6.5 MediumnodejsUbuntuASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function5.3 MediumnodejsUbuntuMissing ASN1_TYPE validation in PKCS#12 parsing5.5 MediumnodejsUbuntuNULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function7.5 HighnodejsUbuntuMissing ASN1_TYPE validation in TS_RESP_verify_response() function7.5 HighnodejsUbuntuOut of bounds write in PKCS12_get_friendlyname() UTF-8 conversion7.4 HighnodejsUbuntuUnauthenticated/unencrypted trailing bytes with low-level OCB function calls4.0 MediumnodejsUbuntuHeap out-of-bounds write in BIO_f_linebuffer on short writes4.7 MediumnodejsUbuntuTLS 1.3 CompressedCertificate excessive memory allocation5.9 MediumnodejsUbuntu'openssl dgst' one-shot codepath silently truncates inputs >16MB5.5 MediumnodejsUbuntuNULL dereference in SSL_CIPHER_find() function on unknown cipher ID5.9 MediumnodejsUbuntuStack buffer overflow in CMS (Auth)EnvelopedData parsing8.8 HighnodejsUbuntuImproper validation of PBMAC1 parameters in PKCS#12 MAC verification6.1 Medium- Show moreLoading…