跳转到帖子

SUSE: CVE-2023-23919: SUSE Linux Security Advisory

recommended_posts

发布于
  • Members

SUSE: CVE-2023-23919: SUSE Linux Security Advisory

Severity
8
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:C)
Published
02/23/2023
Created
03/07/2023
Added
03/06/2023
Modified
01/28/2025

Description

A cryptographic vulnerability exists in Node.js <19.2.0, <18.14.1, <16.19.1, <14.21.3 that in some cases did does not clear the OpenSSL error stack after operations that may set it. This may lead to false positive errors during subsequent cryptographic operations that happen to be on the same thread. This in turn could be used to cause a denial of service.

Solution(s)

  • suse-upgrade-corepack16
  • suse-upgrade-corepack18
  • suse-upgrade-nodejs16
  • suse-upgrade-nodejs16-devel
  • suse-upgrade-nodejs16-docs
  • suse-upgrade-nodejs18
  • suse-upgrade-nodejs18-devel
  • suse-upgrade-nodejs18-docs
  • suse-upgrade-npm16
  • suse-upgrade-npm18

References

  • https://attackerkb.com/topics/cve-2023-23919
  • CVE - 2023-23919
  • 查看数 694
  • 已创建
  • 最后回复

参与讨论

你可立刻发布并稍后注册。 如果你有帐户,立刻登录发布帖子。

游客
回帖…