Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2023:5850

Опубликовано: 24 окт. 2023
Источник: rocky
Оценка: Important

Описание

Important: nodejs:16 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.

Security Fix(es):

  • HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 8

НаименованиеАрхитектураРелизRPM
nodejs-nodemonnoarch1.module+el8.10.0+1935+d3cbe60fnodejs-nodemon-3.0.1-1.module+el8.10.0+1935+d3cbe60f.noarch.rpm
nodejs-nodemonnoarch1.module+el8.10.0+1823+b5789597nodejs-nodemon-3.0.1-1.module+el8.10.0+1823+b5789597.noarch.rpm
nodejs-nodemonnoarch1.module+el8.10.0+1667+4a788d89nodejs-nodemon-3.0.1-1.module+el8.10.0+1667+4a788d89.noarch.rpm
nodejs-nodemonnoarch1.module+el8.10.0+1924+614dc87fnodejs-nodemon-3.0.1-1.module+el8.10.0+1924+614dc87f.noarch.rpm
nodejs-nodemonnoarch1.module+el8.10.0+1666+930e28e8nodejs-nodemon-3.0.1-1.module+el8.10.0+1666+930e28e8.noarch.rpm
nodejs-nodemonnoarch1.module+el8.9.0+1760+903d54b9nodejs-nodemon-3.0.1-1.module+el8.9.0+1760+903d54b9.noarch.rpm
nodejs-nodemonnoarch1.module+el8.10.0+1989+e60144d9nodejs-nodemon-3.0.1-1.module+el8.10.0+1989+e60144d9.noarch.rpm
nodejs-nodemonnoarch1.module+el8.10.0+1824+532140eenodejs-nodemon-3.0.1-1.module+el8.10.0+1824+532140ee.noarch.rpm
nodejs-nodemonnoarch1.module+el8.10.0+1988+437f3d23nodejs-nodemon-3.0.1-1.module+el8.10.0+1988+437f3d23.noarch.rpm
nodejs-packagingnoarch1.module+el8.9.0+1760+903d54b9nodejs-packaging-26-1.module+el8.9.0+1760+903d54b9.noarch.rpm

Показывать по

Связанные CVE

CVE-2023-44487

Ссылки на источники

Исправления

Связанные уязвимости

ubuntu логотип

CVE-2023-44487

CVSS3: 7.5
ubuntu
почти 3 года назад

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

redhat логотип

CVE-2023-44487

CVSS3: 7.5
redhat
почти 3 года назад

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

nvd логотип

CVE-2023-44487

CVSS3: 7.5
nvd
почти 3 года назад

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

msrc логотип

CVE-2023-44487

msrc
почти 3 года назад

MITRE: CVE-2023-44487 HTTP/2 Rapid Reset Attack

debian логотип

CVE-2023-44487

CVSS3: 7.5
debian
почти 3 года назад

The HTTP/2 protocol allows a denial of service (server resource consum ...