[USN-6822-1] Node.js vulnerabilities

  1. Home
  2. Security Advisories
  3. Ubuntu
  4. USN-6822-1
Severity Critical
Affected Packages 8
CVEs 3
Info Packages Vulnerabilities

Several security issues were fixed in Node.js.

It was discovered that Node.js incorrectly handled certain inputs when it is
using the policy mechanism. If a user or an automated system were tricked into
opening a specially crafted input file, a remote attacker could possibly use
this issue to bypass the policy mechanism. (CVE-2023-32002, CVE-2023-32006)

It was discovered that Node.js incorrectly handled certain inputs when it is
using the policy mechanism. If a user or an automated system were tricked into
opening a specially crafted input file, a remote attacker could possibly use
this issue to perform a privilege escalation. (CVE-2023-32559)

Package Affected Version
pkg:deb/ubuntu/nodejs?distro=mantic < 18.13.0+dfsg1-1ubuntu2.3
pkg:deb/ubuntu/nodejs?distro=jammy < 12.22.9~dfsg-1ubuntu3.6
pkg:deb/ubuntu/nodejs-doc?distro=mantic < 18.13.0+dfsg1-1ubuntu2.3
pkg:deb/ubuntu/nodejs-doc?distro=jammy < 12.22.9~dfsg-1ubuntu3.6
pkg:deb/ubuntu/libnode72?distro=jammy < 12.22.9~dfsg-1ubuntu3.6
pkg:deb/ubuntu/libnode108?distro=mantic < 18.13.0+dfsg1-1ubuntu2.3
pkg:deb/ubuntu/libnode-dev?distro=mantic < 18.13.0+dfsg1-1ubuntu2.3
pkg:deb/ubuntu/libnode-dev?distro=jammy < 12.22.9~dfsg-1ubuntu3.6
ID
USN-6822-1
Severity
critical
URL
https://ubuntu.com/security/notices/USN-6822-1
Published
2024-06-10T08:42:42
(6 weeks ago)
Modified
2024-06-10T08:42:42
(6 weeks ago)
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:deb/ubuntu/nodejs?distro=mantic ubuntu nodejs < 18.13.0+dfsg1-1ubuntu2.3 mantic
Affected pkg:deb/ubuntu/nodejs?distro=jammy ubuntu nodejs < 12.22.9~dfsg-1ubuntu3.6 jammy
Affected pkg:deb/ubuntu/nodejs-doc?distro=mantic ubuntu nodejs-doc < 18.13.0+dfsg1-1ubuntu2.3 mantic
Affected pkg:deb/ubuntu/nodejs-doc?distro=jammy ubuntu nodejs-doc < 12.22.9~dfsg-1ubuntu3.6 jammy
Affected pkg:deb/ubuntu/libnode72?distro=jammy ubuntu libnode72 < 12.22.9~dfsg-1ubuntu3.6 jammy
Affected pkg:deb/ubuntu/libnode108?distro=mantic ubuntu libnode108 < 18.13.0+dfsg1-1ubuntu2.3 mantic
Affected pkg:deb/ubuntu/libnode-dev?distro=mantic ubuntu libnode-dev < 18.13.0+dfsg1-1ubuntu2.3 mantic
Affected pkg:deb/ubuntu/libnode-dev?distro=jammy ubuntu libnode-dev < 12.22.9~dfsg-1ubuntu3.6 jammy
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date