VDB
BDU%3A2020-02545
BDU%3A2020-02545
PUBLISHED
CVSS 10 CRITICAL
Уязвимость программной платформы Node.js, связанная с недостаточной проверкой вводимых данных при обработке заголовков HTTP, позволяющая нарушителю получить полный контроль над приложением
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat Inc., Novell Inc., Сообщество свободного программного обеспечения, Node.js Foundation, Oracle Corp., АО «ИВК» | Red Hat Enterprise Linux, OpenSUSE Leap, Debian GNU/Linux, Node.js, GraalVM Enterprise Edition, Альт 8 СП (запись в едином реестре российских программ №4305) |
Timeline
- Jun 2, 2020 CVE Published
- Sep 16, 2024 CVE Updated
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Security Advisory
- Apr 4, 2026 Security Advisory
References
- http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00008.html url
- https://access.redhat.com/errata/RHSA-2020:0573 url
- https://access.redhat.com/errata/RHSA-2020:0579 url
- https://access.redhat.com/errata/RHSA-2020:0597 url
- https://access.redhat.com/errata/RHSA-2020:0598 url
- https://access.redhat.com/errata/RHSA-2020:0602 url
- https://hackerone.com/reports/730779 url
- https://nodejs.org/en/blog/vulnerability/february-2020-security-releases/ url
- https://security.gentoo.org/glsa/202003-48 url
- https://security.netapp.com/advisory/ntap-20200221-0004/ url
- https://www.oracle.com/security-alerts/cpuapr2020.html url
- https://altsp.su/obnovleniya-bezopasnosti/ url
- https://nodejs.org/en/blog/release/v10.19.0/ advisory
- https://nodejs.org/en/blog/release/v12.15.0/ advisory
- https://nodejs.org/en/blog/release/v13.8.0/ advisory
- https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00008.html advisory
- https://www.debian.org/security/2020/dsa-4669 advisory
- https://access.redhat.com/security/cve/CVE-2019-15606?extIdCarryOver=true&sc_cid=701f2000001OH7JAAW advisory