Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2020:3549-1

Опубликовано: 27 нояб. 2020
Источник: suse-cvrf

Описание

Security update for nodejs12

This update for nodejs12 fixes the following issues:

Update to 12.19.1 fixing:

  • CVE-2020-8277: Denial of Service through DNS request (bsc#1178882).

Список пакетов

SUSE Linux Enterprise Module for Web and Scripting 12
nodejs12-12.19.1-1.23.1
nodejs12-devel-12.19.1-1.23.1
nodejs12-docs-12.19.1-1.23.1
npm12-12.19.1-1.23.1

Ссылки

Описание

A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service in versions < 15.2.1, < 14.15.1, and < 12.19.1 by getting the application to resolve a DNS record with a larger number of responses. This is fixed in 15.2.1, 14.15.1, and 12.19.1.

Затронутые продукты
SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-12.19.1-1.23.1
SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel-12.19.1-1.23.1
SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-docs-12.19.1-1.23.1
SUSE Linux Enterprise Module for Web and Scripting 12:npm12-12.19.1-1.23.1
Ссылки