USN-6735-1: nodejs Ubuntu
Vulnerability summary
USN-6735-1 is a vulnerability in nodejs Ubuntu with no CVSS score yet.
Advisory lineage
Upstream 3 · Downstream 0 · Related 3Timeline
- 16-04-2024PublishedVulnerability first disclosed.
- 29-06-2026Last modifiedVulnerability information updated.
Description
nodejs vulnerabilities It was discovered that Node.js incorrectly handled the use of invalid public keys while creating an x509 certificate. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 23.10. (CVE-2023-30588) It was discovered that Node.js incorrectly handled the use of CRLF sequences to delimit HTTP requests. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to obtain unauthorised access. This issue only affected Ubuntu 23.10. (CVE-2023-30589) It was discovered that Node.js incorrectly described the generateKeys() function in the documentation. This inconsistency could possibly lead to security issues in applications that use these APIs. (CVE-2023-30590)
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu1 product
- nodejs< 0.10.25~dfsg2-2ubuntu1.2+esm2 | < 4.2.6~dfsg-1ubuntu4.2+esm3 | < 8.10.0~dfsg-2ubuntu0.4+esm5 | < 10.19.0~dfsg-3ubuntu1.6 | < 12.22.9~dfsg-1ubuntu3.5
1 vendor · 1 product