Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2019:0088-1

Опубликовано: 25 янв. 2019
Источник: suse-cvrf

Описание

Security update for nodejs4

This update for nodejs4 fixes the following issues:

Security issues fixed:

  • CVE-2018-0734: Fixed a timing vulnerability in the DSA signature generation (bsc#1113652)
  • CVE-2018-5407: Fixed a hyperthread port content side channel attack (aka 'PortSmash') (bsc#1113534)
  • CVE-2018-12120: Fixed that the debugger listens on any interface by default (bsc#1117625)
  • CVE-2018-12121: Fixed a denial of Service with large HTTP headers (bsc#1117626)
  • CVE-2018-12122: Fixed the 'Slowloris' HTTP Denial of Service (bsc#1117627)
  • CVE-2018-12116: Fixed HTTP request splitting (bsc#1117630)
  • CVE-2018-12123: Fixed hostname spoofing in URL parser for javascript protocol (bsc#1117629)

This update was imported from the SUSE:SLE-12:Update update project.

Список пакетов

openSUSE Leap 42.3
nodejs4-4.9.1-20.1
nodejs4-devel-4.9.1-20.1
nodejs4-docs-4.9.1-20.1
npm4-4.9.1-20.1

Ссылки

Описание

The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p).

Затронутые продукты
openSUSE Leap 42.3:nodejs4-4.9.1-20.1
openSUSE Leap 42.3:nodejs4-devel-4.9.1-20.1
openSUSE Leap 42.3:nodejs4-docs-4.9.1-20.1
openSUSE Leap 42.3:npm4-4.9.1-20.1
Ссылки

Описание

Node.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can be convinced to use unsanitized user-provided Unicode data for the `path` option of an HTTP request, then data can be provided which will trigger a second, unexpected, and user-defined HTTP request to made to the same server.

Затронутые продукты
openSUSE Leap 42.3:nodejs4-4.9.1-20.1
openSUSE Leap 42.3:nodejs4-devel-4.9.1-20.1
openSUSE Leap 42.3:nodejs4-docs-4.9.1-20.1
openSUSE Leap 42.3:npm4-4.9.1-20.1
Ссылки

Описание

Node.js: All versions prior to Node.js 6.15.0: Debugger port 5858 listens on any interface by default: When the debugger is enabled with `node --debug` or `node debug`, it listens to port 5858 on all interfaces by default. This may allow remote computers to attach to the debug port and evaluate arbitrary JavaScript. The default interface is now localhost. It has always been possible to start the debugger on a specific interface, such as `node --debug=localhost`. The debugger was removed in Node.js 8 and replaced with the inspector, so no versions from 8 and later are vulnerable.

Затронутые продукты
openSUSE Leap 42.3:nodejs4-4.9.1-20.1
openSUSE Leap 42.3:nodejs4-devel-4.9.1-20.1
openSUSE Leap 42.3:nodejs4-docs-4.9.1-20.1
openSUSE Leap 42.3:npm4-4.9.1-20.1
Ссылки

Описание

Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with large HTTP headers: By using a combination of many requests with maximum sized headers (almost 80 KB per connection), and carefully timed completion of the headers, it is possible to cause the HTTP server to abort from heap allocation failure. Attack potential is mitigated by the use of a load balancer or other proxy layer.

Затронутые продукты
openSUSE Leap 42.3:nodejs4-4.9.1-20.1
openSUSE Leap 42.3:nodejs4-devel-4.9.1-20.1
openSUSE Leap 42.3:nodejs4-docs-4.9.1-20.1
openSUSE Leap 42.3:npm4-4.9.1-20.1
Ссылки

Описание

Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial of Service: An attacker can cause a Denial of Service (DoS) by sending headers very slowly keeping HTTP or HTTPS connections and associated resources alive for a long period of time.

Затронутые продукты
openSUSE Leap 42.3:nodejs4-4.9.1-20.1
openSUSE Leap 42.3:nodejs4-devel-4.9.1-20.1
openSUSE Leap 42.3:nodejs4-docs-4.9.1-20.1
openSUSE Leap 42.3:npm4-4.9.1-20.1
Ссылки

Описание

Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Hostname spoofing in URL parser for javascript protocol: If a Node.js application is using url.parse() to determine the URL hostname, that hostname can be spoofed by using a mixed case "javascript:" (e.g. "javAscript:") protocol (other protocols are not affected). If security decisions are made about the URL based on the hostname, they may be incorrect.

Затронутые продукты
openSUSE Leap 42.3:nodejs4-4.9.1-20.1
openSUSE Leap 42.3:nodejs4-devel-4.9.1-20.1
openSUSE Leap 42.3:nodejs4-docs-4.9.1-20.1
openSUSE Leap 42.3:npm4-4.9.1-20.1
Ссылки

Описание

Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.

Затронутые продукты
openSUSE Leap 42.3:nodejs4-4.9.1-20.1
openSUSE Leap 42.3:nodejs4-devel-4.9.1-20.1
openSUSE Leap 42.3:nodejs4-docs-4.9.1-20.1
openSUSE Leap 42.3:npm4-4.9.1-20.1
Ссылки
Уязвимость openSUSE-SU-2019:0088-1