1. Home
  2. Security Advisories
  3. Ubuntu
  4. USN-6491-1

[USN-6491-1] Node.js vulnerabilities

Severity High
Affected Packages 11
CVEs 6
Info Packages Vulnerabilities

Several security issues were fixed in Node.js.

Axel Chong discovered that Node.js incorrectly handled certain inputs. If a
user or an automated system were tricked into opening a specially crafted
input file, a remote attacker could possibly use this issue to execute
arbitrary code. (CVE-2022-32212)

Zeyu Zhang discovered that Node.js incorrectly handled certain inputs. If a
user or an automated system were tricked into opening a specially crafted
input file, a remote attacker could possibly use this issue to execute
arbitrary code. This issue only affected Ubuntu 22.04 LTS. (CVE-2022-32213,
CVE-2022-32214, CVE-2022-32215)

It was discovered that Node.js incorrectly handled certain inputs. If a user
or an automated system were tricked into opening a specially crafted input
file, a remote attacker could possibly use this issue to execute arbitrary
code. This issue only affected Ubuntu 22.04 LTS. (CVE-2022-35256)

It was discovered that Node.js incorrectly handled certain inputs. If a user
or an automated system were tricked into opening a specially crafted input
file, a remote attacker could possibly use this issue to execute arbitrary
code. This issue only affected Ubuntu 22.04 LTS. (CVE-2022-43548)

Package Affected Version
pkg:deb/ubuntu/nodejs?distro=jammy < 12.22.9~dfsg-1ubuntu3.2
pkg:deb/ubuntu/nodejs?distro=focal < 10.19.0~dfsg-3ubuntu1.3
pkg:deb/ubuntu/nodejs?distro=bionic < 8.10.0~dfsg-2ubuntu0.4+esm4
pkg:deb/ubuntu/nodejs-doc?distro=jammy < 12.22.9~dfsg-1ubuntu3.2
pkg:deb/ubuntu/nodejs-doc?distro=focal < 10.19.0~dfsg-3ubuntu1.3
pkg:deb/ubuntu/nodejs-doc?distro=bionic < 8.10.0~dfsg-2ubuntu0.4+esm4
pkg:deb/ubuntu/nodejs-dev?distro=bionic < 8.10.0~dfsg-2ubuntu0.4+esm4
pkg:deb/ubuntu/libnode72?distro=jammy < 12.22.9~dfsg-1ubuntu3.2
pkg:deb/ubuntu/libnode64?distro=focal < 10.19.0~dfsg-3ubuntu1.3
pkg:deb/ubuntu/libnode-dev?distro=jammy < 12.22.9~dfsg-1ubuntu3.2
pkg:deb/ubuntu/libnode-dev?distro=focal < 10.19.0~dfsg-3ubuntu1.3
ID
USN-6491-1
Severity
high
Severity from
CVE-2022-32212
URL
https://ubuntu.com/security/notices/USN-6491-1
Published
2023-11-21T09:15:47
(10 months ago)
Modified
2023-11-21T09:15:47
(10 months ago)
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:deb/ubuntu/nodejs?distro=jammy ubuntu nodejs < 12.22.9~dfsg-1ubuntu3.2 jammy
Affected pkg:deb/ubuntu/nodejs?distro=focal ubuntu nodejs < 10.19.0~dfsg-3ubuntu1.3 focal
Affected pkg:deb/ubuntu/nodejs?distro=bionic ubuntu nodejs < 8.10.0~dfsg-2ubuntu0.4+esm4 bionic
Affected pkg:deb/ubuntu/nodejs-doc?distro=jammy ubuntu nodejs-doc < 12.22.9~dfsg-1ubuntu3.2 jammy
Affected pkg:deb/ubuntu/nodejs-doc?distro=focal ubuntu nodejs-doc < 10.19.0~dfsg-3ubuntu1.3 focal
Affected pkg:deb/ubuntu/nodejs-doc?distro=bionic ubuntu nodejs-doc < 8.10.0~dfsg-2ubuntu0.4+esm4 bionic
Affected pkg:deb/ubuntu/nodejs-dev?distro=bionic ubuntu nodejs-dev < 8.10.0~dfsg-2ubuntu0.4+esm4 bionic
Affected pkg:deb/ubuntu/libnode72?distro=jammy ubuntu libnode72 < 12.22.9~dfsg-1ubuntu3.2 jammy
Affected pkg:deb/ubuntu/libnode64?distro=focal ubuntu libnode64 < 10.19.0~dfsg-3ubuntu1.3 focal
Affected pkg:deb/ubuntu/libnode-dev?distro=jammy ubuntu libnode-dev < 12.22.9~dfsg-1ubuntu3.2 jammy
Affected pkg:deb/ubuntu/libnode-dev?distro=focal ubuntu libnode-dev < 10.19.0~dfsg-3ubuntu1.3 focal
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date