SUSE-SU-2023:4207-1: nodejs16&distro=SUSE Enterprise Storage 7.1 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2023:4207-1 is a vulnerability in nodejs16&distro=SUSE Enterprise Storage 7.1 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 4 · Downstream 0 · Related 4Timeline
- 26-10-2023PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for nodejs18 This update for nodejs18 fixes the following issues: - Update to version 18.18.2 - CVE-2023-44487: Fixed the Rapid Reset attack in nghttp2. (bsc#1216190) - CVE-2023-45143: Fixed a cookie leakage in undici. (bsc#1216205) - CVE-2023-38552: Fixed an integrity checks according to policies that could be circumvented. (bsc#1216272) - CVE-2023-39333: Fixed a code injection via WebAssembly export names. (bsc#1216273)
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse6 products
- nodejs16&distro=SUSE Enterprise Storage 7.1< 16.20.2-150300.7.30.1
- nodejs16&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS< 16.20.2-150300.7.30.1
- nodejs16&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS< 16.20.2-150300.7.30.1
- nodejs16&distro=SUSE Linux Enterprise Server 15 SP3-LTSS< 16.20.2-150300.7.30.1
- nodejs16&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3< 16.20.2-150300.7.30.1
1 vendor · 6 products