[ALPINE:CVE-2023-23919] nodejs vulnerability

Severity High
Affected Packages 36
Fixed Packages 36
CVEs 1

[From CVE-2023-23919] A cryptographic vulnerability exists in Node.js <19.2.0, <18.14.1, <16.19.1, <14.21.3 that in some cases did does not clear the OpenSSL error stack after operations that may set it. This may lead to false positive errors during subsequent cryptographic operations that happen to be on the same thread. This in turn could be used to cause a denial of service.

Package Affected Version
pkg:apk/alpine/nodejs?arch=x86_64&distro=alpine-edge < 18.14.1-r0
pkg:apk/alpine/nodejs?arch=x86_64&distro=alpine-3.18 < 18.14.1-r0
pkg:apk/alpine/nodejs?arch=x86_64&distro=alpine-3.17 < 18.14.1-r0
pkg:apk/alpine/nodejs?arch=x86_64&distro=alpine-3.16 < 16.19.1-r0
pkg:apk/alpine/nodejs?arch=x86_64&distro=alpine-3.15 < 16.19.1-r0
pkg:apk/alpine/nodejs?arch=x86&distro=alpine-edge < 18.14.1-r0
pkg:apk/alpine/nodejs?arch=x86&distro=alpine-3.18 < 18.14.1-r0
pkg:apk/alpine/nodejs?arch=x86&distro=alpine-3.17 < 18.14.1-r0
pkg:apk/alpine/nodejs?arch=x86&distro=alpine-3.16 < 16.19.1-r0
pkg:apk/alpine/nodejs?arch=x86&distro=alpine-3.15 < 16.19.1-r0
pkg:apk/alpine/nodejs?arch=s390x&distro=alpine-edge < 18.14.1-r0
pkg:apk/alpine/nodejs?arch=s390x&distro=alpine-3.18 < 18.14.1-r0
pkg:apk/alpine/nodejs?arch=s390x&distro=alpine-3.17 < 18.14.1-r0
pkg:apk/alpine/nodejs?arch=s390x&distro=alpine-3.16 < 16.19.1-r0
pkg:apk/alpine/nodejs?arch=s390x&distro=alpine-3.15 < 16.19.1-r0
pkg:apk/alpine/nodejs?arch=riscv64&distro=alpine-edge < 18.14.1-r0
pkg:apk/alpine/nodejs?arch=ppc64le&distro=alpine-edge < 18.14.1-r0
pkg:apk/alpine/nodejs?arch=ppc64le&distro=alpine-3.18 < 18.14.1-r0
pkg:apk/alpine/nodejs?arch=ppc64le&distro=alpine-3.17 < 18.14.1-r0
pkg:apk/alpine/nodejs?arch=ppc64le&distro=alpine-3.16 < 16.19.1-r0
pkg:apk/alpine/nodejs?arch=ppc64le&distro=alpine-3.15 < 16.19.1-r0
pkg:apk/alpine/nodejs?arch=armv7&distro=alpine-edge < 18.14.1-r0
pkg:apk/alpine/nodejs?arch=armv7&distro=alpine-3.18 < 18.14.1-r0
pkg:apk/alpine/nodejs?arch=armv7&distro=alpine-3.17 < 18.14.1-r0
pkg:apk/alpine/nodejs?arch=armv7&distro=alpine-3.16 < 16.19.1-r0
pkg:apk/alpine/nodejs?arch=armv7&distro=alpine-3.15 < 16.19.1-r0
pkg:apk/alpine/nodejs?arch=armhf&distro=alpine-edge < 18.14.1-r0
pkg:apk/alpine/nodejs?arch=armhf&distro=alpine-3.18 < 18.14.1-r0
pkg:apk/alpine/nodejs?arch=armhf&distro=alpine-3.17 < 18.14.1-r0
pkg:apk/alpine/nodejs?arch=armhf&distro=alpine-3.16 < 16.19.1-r0
pkg:apk/alpine/nodejs?arch=armhf&distro=alpine-3.15 < 16.19.1-r0
pkg:apk/alpine/nodejs?arch=aarch64&distro=alpine-edge < 18.14.1-r0
pkg:apk/alpine/nodejs?arch=aarch64&distro=alpine-3.18 < 18.14.1-r0
pkg:apk/alpine/nodejs?arch=aarch64&distro=alpine-3.17 < 18.14.1-r0
pkg:apk/alpine/nodejs?arch=aarch64&distro=alpine-3.16 < 16.19.1-r0
pkg:apk/alpine/nodejs?arch=aarch64&distro=alpine-3.15 < 16.19.1-r0
Package Fixed Version
pkg:apk/alpine/nodejs?arch=x86_64&distro=alpine-edge = 18.14.1-r0
pkg:apk/alpine/nodejs?arch=x86_64&distro=alpine-3.18 = 18.14.1-r0
pkg:apk/alpine/nodejs?arch=x86_64&distro=alpine-3.17 = 18.14.1-r0
pkg:apk/alpine/nodejs?arch=x86_64&distro=alpine-3.16 = 16.19.1-r0
pkg:apk/alpine/nodejs?arch=x86_64&distro=alpine-3.15 = 16.19.1-r0
pkg:apk/alpine/nodejs?arch=x86&distro=alpine-edge = 18.14.1-r0
pkg:apk/alpine/nodejs?arch=x86&distro=alpine-3.18 = 18.14.1-r0
pkg:apk/alpine/nodejs?arch=x86&distro=alpine-3.17 = 18.14.1-r0
pkg:apk/alpine/nodejs?arch=x86&distro=alpine-3.16 = 16.19.1-r0
pkg:apk/alpine/nodejs?arch=x86&distro=alpine-3.15 = 16.19.1-r0
pkg:apk/alpine/nodejs?arch=s390x&distro=alpine-edge = 18.14.1-r0
pkg:apk/alpine/nodejs?arch=s390x&distro=alpine-3.18 = 18.14.1-r0
pkg:apk/alpine/nodejs?arch=s390x&distro=alpine-3.17 = 18.14.1-r0
pkg:apk/alpine/nodejs?arch=s390x&distro=alpine-3.16 = 16.19.1-r0
pkg:apk/alpine/nodejs?arch=s390x&distro=alpine-3.15 = 16.19.1-r0
pkg:apk/alpine/nodejs?arch=riscv64&distro=alpine-edge = 18.14.1-r0
pkg:apk/alpine/nodejs?arch=ppc64le&distro=alpine-edge = 18.14.1-r0
pkg:apk/alpine/nodejs?arch=ppc64le&distro=alpine-3.18 = 18.14.1-r0
pkg:apk/alpine/nodejs?arch=ppc64le&distro=alpine-3.17 = 18.14.1-r0
pkg:apk/alpine/nodejs?arch=ppc64le&distro=alpine-3.16 = 16.19.1-r0
pkg:apk/alpine/nodejs?arch=ppc64le&distro=alpine-3.15 = 16.19.1-r0
pkg:apk/alpine/nodejs?arch=armv7&distro=alpine-edge = 18.14.1-r0
pkg:apk/alpine/nodejs?arch=armv7&distro=alpine-3.18 = 18.14.1-r0
pkg:apk/alpine/nodejs?arch=armv7&distro=alpine-3.17 = 18.14.1-r0
pkg:apk/alpine/nodejs?arch=armv7&distro=alpine-3.16 = 16.19.1-r0
pkg:apk/alpine/nodejs?arch=armv7&distro=alpine-3.15 = 16.19.1-r0
pkg:apk/alpine/nodejs?arch=armhf&distro=alpine-edge = 18.14.1-r0
pkg:apk/alpine/nodejs?arch=armhf&distro=alpine-3.18 = 18.14.1-r0
pkg:apk/alpine/nodejs?arch=armhf&distro=alpine-3.17 = 18.14.1-r0
pkg:apk/alpine/nodejs?arch=armhf&distro=alpine-3.16 = 16.19.1-r0
pkg:apk/alpine/nodejs?arch=armhf&distro=alpine-3.15 = 16.19.1-r0
pkg:apk/alpine/nodejs?arch=aarch64&distro=alpine-edge = 18.14.1-r0
pkg:apk/alpine/nodejs?arch=aarch64&distro=alpine-3.18 = 18.14.1-r0
pkg:apk/alpine/nodejs?arch=aarch64&distro=alpine-3.17 = 18.14.1-r0
pkg:apk/alpine/nodejs?arch=aarch64&distro=alpine-3.16 = 16.19.1-r0
pkg:apk/alpine/nodejs?arch=aarch64&distro=alpine-3.15 = 16.19.1-r0
ID
ALPINE:CVE-2023-23919
Severity
high
Severity from
CVE-2023-23919
URL
https://security.alpinelinux.org/vuln/CVE-2023-23919
Published
2023-02-23T20:15:13
(19 months ago)
Modified
2023-02-23T20:15:13
(19 months ago)
Rights
Alpine Linux Security Team
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Fixed pkg:apk/alpine/nodejs?arch=x86_64&distro=alpine-edge alpine nodejs = 18.14.1-r0 alpine-edge x86_64
Affected pkg:apk/alpine/nodejs?arch=x86_64&distro=alpine-edge alpine nodejs < 18.14.1-r0 alpine-edge x86_64
Fixed pkg:apk/alpine/nodejs?arch=x86_64&distro=alpine-3.18 alpine nodejs = 18.14.1-r0 alpine-3.18 x86_64
Affected pkg:apk/alpine/nodejs?arch=x86_64&distro=alpine-3.18 alpine nodejs < 18.14.1-r0 alpine-3.18 x86_64
Fixed pkg:apk/alpine/nodejs?arch=x86_64&distro=alpine-3.17 alpine nodejs = 18.14.1-r0 alpine-3.17 x86_64
Affected pkg:apk/alpine/nodejs?arch=x86_64&distro=alpine-3.17 alpine nodejs < 18.14.1-r0 alpine-3.17 x86_64
Fixed pkg:apk/alpine/nodejs?arch=x86_64&distro=alpine-3.16 alpine nodejs = 16.19.1-r0 alpine-3.16 x86_64
Affected pkg:apk/alpine/nodejs?arch=x86_64&distro=alpine-3.16 alpine nodejs < 16.19.1-r0 alpine-3.16 x86_64
Fixed pkg:apk/alpine/nodejs?arch=x86_64&distro=alpine-3.15 alpine nodejs = 16.19.1-r0 alpine-3.15 x86_64
Affected pkg:apk/alpine/nodejs?arch=x86_64&distro=alpine-3.15 alpine nodejs < 16.19.1-r0 alpine-3.15 x86_64
Fixed pkg:apk/alpine/nodejs?arch=x86&distro=alpine-edge alpine nodejs = 18.14.1-r0 alpine-edge x86
Affected pkg:apk/alpine/nodejs?arch=x86&distro=alpine-edge alpine nodejs < 18.14.1-r0 alpine-edge x86
Fixed pkg:apk/alpine/nodejs?arch=x86&distro=alpine-3.18 alpine nodejs = 18.14.1-r0 alpine-3.18 x86
Affected pkg:apk/alpine/nodejs?arch=x86&distro=alpine-3.18 alpine nodejs < 18.14.1-r0 alpine-3.18 x86
Fixed pkg:apk/alpine/nodejs?arch=x86&distro=alpine-3.17 alpine nodejs = 18.14.1-r0 alpine-3.17 x86
Affected pkg:apk/alpine/nodejs?arch=x86&distro=alpine-3.17 alpine nodejs < 18.14.1-r0 alpine-3.17 x86
Fixed pkg:apk/alpine/nodejs?arch=x86&distro=alpine-3.16 alpine nodejs = 16.19.1-r0 alpine-3.16 x86
Affected pkg:apk/alpine/nodejs?arch=x86&distro=alpine-3.16 alpine nodejs < 16.19.1-r0 alpine-3.16 x86
Fixed pkg:apk/alpine/nodejs?arch=x86&distro=alpine-3.15 alpine nodejs = 16.19.1-r0 alpine-3.15 x86
Affected pkg:apk/alpine/nodejs?arch=x86&distro=alpine-3.15 alpine nodejs < 16.19.1-r0 alpine-3.15 x86
Fixed pkg:apk/alpine/nodejs?arch=s390x&distro=alpine-edge alpine nodejs = 18.14.1-r0 alpine-edge s390x
Affected pkg:apk/alpine/nodejs?arch=s390x&distro=alpine-edge alpine nodejs < 18.14.1-r0 alpine-edge s390x
Fixed pkg:apk/alpine/nodejs?arch=s390x&distro=alpine-3.18 alpine nodejs = 18.14.1-r0 alpine-3.18 s390x
Affected pkg:apk/alpine/nodejs?arch=s390x&distro=alpine-3.18 alpine nodejs < 18.14.1-r0 alpine-3.18 s390x
Fixed pkg:apk/alpine/nodejs?arch=s390x&distro=alpine-3.17 alpine nodejs = 18.14.1-r0 alpine-3.17 s390x
Affected pkg:apk/alpine/nodejs?arch=s390x&distro=alpine-3.17 alpine nodejs < 18.14.1-r0 alpine-3.17 s390x
Fixed pkg:apk/alpine/nodejs?arch=s390x&distro=alpine-3.16 alpine nodejs = 16.19.1-r0 alpine-3.16 s390x
Affected pkg:apk/alpine/nodejs?arch=s390x&distro=alpine-3.16 alpine nodejs < 16.19.1-r0 alpine-3.16 s390x
Fixed pkg:apk/alpine/nodejs?arch=s390x&distro=alpine-3.15 alpine nodejs = 16.19.1-r0 alpine-3.15 s390x
Affected pkg:apk/alpine/nodejs?arch=s390x&distro=alpine-3.15 alpine nodejs < 16.19.1-r0 alpine-3.15 s390x
Fixed pkg:apk/alpine/nodejs?arch=riscv64&distro=alpine-edge alpine nodejs = 18.14.1-r0 alpine-edge riscv64
Affected pkg:apk/alpine/nodejs?arch=riscv64&distro=alpine-edge alpine nodejs < 18.14.1-r0 alpine-edge riscv64
Fixed pkg:apk/alpine/nodejs?arch=ppc64le&distro=alpine-edge alpine nodejs = 18.14.1-r0 alpine-edge ppc64le
Affected pkg:apk/alpine/nodejs?arch=ppc64le&distro=alpine-edge alpine nodejs < 18.14.1-r0 alpine-edge ppc64le
Fixed pkg:apk/alpine/nodejs?arch=ppc64le&distro=alpine-3.18 alpine nodejs = 18.14.1-r0 alpine-3.18 ppc64le
Affected pkg:apk/alpine/nodejs?arch=ppc64le&distro=alpine-3.18 alpine nodejs < 18.14.1-r0 alpine-3.18 ppc64le
Fixed pkg:apk/alpine/nodejs?arch=ppc64le&distro=alpine-3.17 alpine nodejs = 18.14.1-r0 alpine-3.17 ppc64le
Affected pkg:apk/alpine/nodejs?arch=ppc64le&distro=alpine-3.17 alpine nodejs < 18.14.1-r0 alpine-3.17 ppc64le
Fixed pkg:apk/alpine/nodejs?arch=ppc64le&distro=alpine-3.16 alpine nodejs = 16.19.1-r0 alpine-3.16 ppc64le
Affected pkg:apk/alpine/nodejs?arch=ppc64le&distro=alpine-3.16 alpine nodejs < 16.19.1-r0 alpine-3.16 ppc64le
Fixed pkg:apk/alpine/nodejs?arch=ppc64le&distro=alpine-3.15 alpine nodejs = 16.19.1-r0 alpine-3.15 ppc64le
Affected pkg:apk/alpine/nodejs?arch=ppc64le&distro=alpine-3.15 alpine nodejs < 16.19.1-r0 alpine-3.15 ppc64le
Fixed pkg:apk/alpine/nodejs?arch=armv7&distro=alpine-edge alpine nodejs = 18.14.1-r0 alpine-edge armv7
Affected pkg:apk/alpine/nodejs?arch=armv7&distro=alpine-edge alpine nodejs < 18.14.1-r0 alpine-edge armv7
Fixed pkg:apk/alpine/nodejs?arch=armv7&distro=alpine-3.18 alpine nodejs = 18.14.1-r0 alpine-3.18 armv7
Affected pkg:apk/alpine/nodejs?arch=armv7&distro=alpine-3.18 alpine nodejs < 18.14.1-r0 alpine-3.18 armv7
Fixed pkg:apk/alpine/nodejs?arch=armv7&distro=alpine-3.17 alpine nodejs = 18.14.1-r0 alpine-3.17 armv7
Affected pkg:apk/alpine/nodejs?arch=armv7&distro=alpine-3.17 alpine nodejs < 18.14.1-r0 alpine-3.17 armv7
Fixed pkg:apk/alpine/nodejs?arch=armv7&distro=alpine-3.16 alpine nodejs = 16.19.1-r0 alpine-3.16 armv7
Affected pkg:apk/alpine/nodejs?arch=armv7&distro=alpine-3.16 alpine nodejs < 16.19.1-r0 alpine-3.16 armv7
Fixed pkg:apk/alpine/nodejs?arch=armv7&distro=alpine-3.15 alpine nodejs = 16.19.1-r0 alpine-3.15 armv7
Affected pkg:apk/alpine/nodejs?arch=armv7&distro=alpine-3.15 alpine nodejs < 16.19.1-r0 alpine-3.15 armv7
Fixed pkg:apk/alpine/nodejs?arch=armhf&distro=alpine-edge alpine nodejs = 18.14.1-r0 alpine-edge armhf
Affected pkg:apk/alpine/nodejs?arch=armhf&distro=alpine-edge alpine nodejs < 18.14.1-r0 alpine-edge armhf
Fixed pkg:apk/alpine/nodejs?arch=armhf&distro=alpine-3.18 alpine nodejs = 18.14.1-r0 alpine-3.18 armhf
Affected pkg:apk/alpine/nodejs?arch=armhf&distro=alpine-3.18 alpine nodejs < 18.14.1-r0 alpine-3.18 armhf
Fixed pkg:apk/alpine/nodejs?arch=armhf&distro=alpine-3.17 alpine nodejs = 18.14.1-r0 alpine-3.17 armhf
Affected pkg:apk/alpine/nodejs?arch=armhf&distro=alpine-3.17 alpine nodejs < 18.14.1-r0 alpine-3.17 armhf
Fixed pkg:apk/alpine/nodejs?arch=armhf&distro=alpine-3.16 alpine nodejs = 16.19.1-r0 alpine-3.16 armhf
Affected pkg:apk/alpine/nodejs?arch=armhf&distro=alpine-3.16 alpine nodejs < 16.19.1-r0 alpine-3.16 armhf
Fixed pkg:apk/alpine/nodejs?arch=armhf&distro=alpine-3.15 alpine nodejs = 16.19.1-r0 alpine-3.15 armhf
Affected pkg:apk/alpine/nodejs?arch=armhf&distro=alpine-3.15 alpine nodejs < 16.19.1-r0 alpine-3.15 armhf
Fixed pkg:apk/alpine/nodejs?arch=aarch64&distro=alpine-edge alpine nodejs = 18.14.1-r0 alpine-edge aarch64
Affected pkg:apk/alpine/nodejs?arch=aarch64&distro=alpine-edge alpine nodejs < 18.14.1-r0 alpine-edge aarch64
Fixed pkg:apk/alpine/nodejs?arch=aarch64&distro=alpine-3.18 alpine nodejs = 18.14.1-r0 alpine-3.18 aarch64
Affected pkg:apk/alpine/nodejs?arch=aarch64&distro=alpine-3.18 alpine nodejs < 18.14.1-r0 alpine-3.18 aarch64
Fixed pkg:apk/alpine/nodejs?arch=aarch64&distro=alpine-3.17 alpine nodejs = 18.14.1-r0 alpine-3.17 aarch64
Affected pkg:apk/alpine/nodejs?arch=aarch64&distro=alpine-3.17 alpine nodejs < 18.14.1-r0 alpine-3.17 aarch64
Fixed pkg:apk/alpine/nodejs?arch=aarch64&distro=alpine-3.16 alpine nodejs = 16.19.1-r0 alpine-3.16 aarch64
Affected pkg:apk/alpine/nodejs?arch=aarch64&distro=alpine-3.16 alpine nodejs < 16.19.1-r0 alpine-3.16 aarch64
Fixed pkg:apk/alpine/nodejs?arch=aarch64&distro=alpine-3.15 alpine nodejs = 16.19.1-r0 alpine-3.15 aarch64
Affected pkg:apk/alpine/nodejs?arch=aarch64&distro=alpine-3.15 alpine nodejs < 16.19.1-r0 alpine-3.15 aarch64
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date
Loading...