SUSE-SU-2019:0395-1

Advisory lineage Upstream: 7 Downstream: 0
Published: 14 Feb 2019, 13:59
Last modified:04 Feb 2026, 04:00

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

14 Feb 2019, 13:59
Published
Vulnerability first disclosed
04 Feb 2026, 04:00
Last Modified
Vulnerability information updated

Description

Security update for nodejs6 This update for nodejs6 to version 6.16.0 fixes the following issues: Security issues fixed: - CVE-2018-0734: Fixed a timing vulnerability in the DSA signature generation (bsc#1113652) - CVE-2018-5407: Fixed a hyperthread port content side channel attack (aka 'PortSmash') (bsc#1113534) - CVE-2018-12120: Fixed that the debugger listens on any interface by default (bsc#1117625) - CVE-2018-12121: Fixed a denial of Service with large HTTP headers (bsc#1117626) - CVE-2018-12122: Fixed the 'Slowloris' HTTP Denial of Service (bsc#1117627) - CVE-2018-12116: Fixed HTTP request splitting (bsc#1117630) - CVE-2018-12123: Fixed hostname spoofing in URL parser for javascript protocol (bsc#1117629)

Affected Systems

  • suse•nodejs6&distro=SUSE Enterprise Storage 4

    < 6.16.0-11.21.1

  • suse•nodejs6&distro=SUSE Linux Enterprise Module for Web and Scripting 12

    < 6.16.0-11.21.1

  • suse•nodejs6&distro=SUSE OpenStack Cloud 7

    < 6.16.0-11.21.1

  • suse•nodejs6&distro=SUSE OpenStack Cloud Crowbar 8

    < 6.16.0-11.21.1

References (15)