SUSE-SU-2019:0658-1: nodejs4&distro=SUSE Enterprise Storage 4 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2019:0658-1 is a vulnerability in nodejs4&distro=SUSE Enterprise Storage 4 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 3 · Downstream 0 · Related 3Timeline
- 20-03-2019PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for nodejs4 This update for nodejs4 fixes the following issues: Security issues fixed: - CVE-2019-5739: Fixed a potentially attack vector which could lead to Denial of Service when HTTP connection are kept active (bsc#1127533). - CVE-2019-5737: Fixed a potentially attack vector which could lead to Denial of Service when HTTP connection are kept active (bsc#1127532). - CVE-2019-1559: Fixed OpenSSL 0-byte Record Padding Oracle which under certain circumstances a TLS server can be forced to respond differently to a client and lead to the decryption of the data (bsc#1127080).
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse2 products
- nodejs4&distro=SUSE Enterprise Storage 4< 4.9.1-15.20.1
- nodejs4&distro=SUSE Linux Enterprise Module for Web and Scripting 12< 4.9.1-15.20.1
1 vendor · 2 products