OPENSUSE-SU-2020:0802-1

Advisory lineage Upstream: 3 Downstream: 0
Published: 12 Jun 2020, 18:17
Last modified:04 Feb 2026, 04:32

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

12 Jun 2020, 18:17
Published
Vulnerability first disclosed
04 Feb 2026, 04:32
Last Modified
Vulnerability information updated

Description

Security update for nodejs8 This update for nodejs8 fixes the following issues: - CVE-2020-8174: Fixed multiple memory corruption in napi_get_value_string_*() (bsc#1172443). - CVE-2020-11080: Fixed a potential denial of service when receiving unreasonably large HTTP/2 SETTINGS frames (bsc#1172442). - CVE-2020-7598: Fixed an issue which could have tricked minimist into adding or modifying properties of Object.prototype (bsc#1166916). This update was imported from the SUSE:SLE-15:Update update project.

Affected Systems

  • opensuse•nodejs8&distro=openSUSE Leap 15.1

    < 8.17.0-lp151.2.15.1

References (7)