SUSE-SU-2019:0818-1: nodejs6&distro=SUSE Enterprise Storage 4 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2019:0818-1 is a vulnerability in nodejs6&distro=SUSE Enterprise Storage 4 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 3 · Downstream 0 · Related 3Timeline
- 29-03-2019PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for nodejs6 This update for nodejs6 to version 6.17.0 fixes the following issues: Security issues fixed: - CVE-2019-5739: Fixed a potentially attack vector which could lead to Denial of Service when HTTP connection are kept active (bsc#1127533). - CVE-2019-5737: Fixed a potentially attack vector which could lead to Denial of Service when HTTP connection are kept active (bsc#1127532). - CVE-2019-1559: Fixed OpenSSL 0-byte Record Padding Oracle which under certain circumstances a TLS server can be forced to respond differently to a client and lead to the decryption of the data (bsc#1127080). Release Notes: https://nodejs.org/en/blog/release/v6.17.0/
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse4 products
- nodejs6&distro=SUSE Enterprise Storage 4< 6.17.0-11.24.1
- nodejs6&distro=SUSE Linux Enterprise Module for Web and Scripting 12< 6.17.0-11.24.1
- nodejs6&distro=SUSE OpenStack Cloud 7< 6.17.0-11.24.1
- nodejs6&distro=SUSE OpenStack Cloud Crowbar 8< 6.17.0-11.24.1
1 vendor · 4 products