PT-2023-2002 · Node.Js+9 · Node.Js+9
Morgan Jones
+1
·
Publicado
2023-02-16
·
Atualizado
2026-05-18
·
CVE-2023-23919
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Node.js versions prior to 19.2.0
Node.js versions prior to 18.14.1
Node.js versions prior to 16.19.1
Node.js versions prior to 14.21.3
Description
A cryptographic issue exists that may not clear the OpenSSL error stack after certain operations, potentially leading to false positive errors during subsequent cryptographic operations on the same thread. This could be exploited to cause a denial of service. The issue is related to errors in data encryption.
Recommendations
For versions prior to 19.2.0, update to version 19.2.0 or later to resolve the issue.
For versions prior to 18.14.1, update to version 18.14.1 or later to resolve the issue.
For versions prior to 16.19.1, update to version 16.19.1 or later to resolve the issue.
For versions prior to 14.21.3, update to version 14.21.3 or later to resolve the issue.
Exploit
Correção
DoS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Almalinux
Centos
Linuxmint
Node.Js
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu