[USN-6564-1] Node.js vulnerabilities

Severity High

Affected Packages 4

CVEs 5

Several security issues were fixed in Node.js.

Hubert Kario discovered that Node.js incorrectly handled certain inputs. If a
user or an automated system were tricked into opening a specially crafted input
file, a remote attacker could possibly use this issue to obtain sensitive
information. (CVE-2022-4304)

CarpetFuzz, Dawei Wang discovered that Node.js incorrectly handled certain
inputs. If a user or an automated system were tricked into opening a specially
crafted input file, a remote attacker could possibly use this issue to cause a
denial of service. (CVE-2022-4450)

Octavio Galland and Marcel Böhme discovered that Node.js incorrectly handled
certain inputs. If a user or an automated system were tricked into opening a
specially crafted input file, a remote attacker could possibly use this issue
to cause a denial of service. (CVE-2023-0215)

David Benjamin discovered that Node.js incorrectly handled certain inputs. If a
user or an automated system were tricked into opening a specially crafted input
file, a remote attacker could possibly use this issue to obtain sensitive
information. (CVE-2023-0286)

Hubert Kario and Dmitry Belyavsky discovered that Node.js incorrectly handled
certain inputs. If a user or an automated system were tricked into opening a
specially crafted input file, a remote attacker could possibly use this issue
to cause a denial of service. (CVE-2023-0401)

Package	Affected Version
pkg:deb/ubuntu/nodejs?distro=jammy	< 12.22.9~dfsg-1ubuntu3.3
pkg:deb/ubuntu/nodejs-doc?distro=jammy	< 12.22.9~dfsg-1ubuntu3.3
pkg:deb/ubuntu/libnode72?distro=jammy	< 12.22.9~dfsg-1ubuntu3.3
pkg:deb/ubuntu/libnode-dev?distro=jammy	< 12.22.9~dfsg-1ubuntu3.3

ID

USN-6564-1

Severity

high

Severity from

CVE-2022-4450

URL

https://ubuntu.com/security/notices/USN-6564-1

Published

2024-01-03T09:31:07
(8 months ago)

Modified

2024-01-03T09:31:07
(8 months ago)

Other Advisories

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform
Affected	pkg:deb/ubuntu/nodejs?distro=jammy	ubuntu	nodejs	< 12.22.9~dfsg-1ubuntu3.3	jammy
Affected	pkg:deb/ubuntu/nodejs-doc?distro=jammy	ubuntu	nodejs-doc	< 12.22.9~dfsg-1ubuntu3.3	jammy
Affected	pkg:deb/ubuntu/libnode72?distro=jammy	ubuntu	libnode72	< 12.22.9~dfsg-1ubuntu3.3	jammy
Affected	pkg:deb/ubuntu/libnode-dev?distro=jammy	ubuntu	libnode-dev	< 12.22.9~dfsg-1ubuntu3.3	jammy

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date