VDB
BDU%3A2022-00758
BDU%3A2022-00758
PUBLISHED
CVSS 7.099999904632568 HIGH
Уязвимость реализации способа указания всех доменных имен и IP-адресов Subject Alternative Names программной платформы Node.js, позволяющая нарушителю проводить спуфинг-атаки
Risk Scores
CVSS 2.0
7.099999904632568
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Сообщество свободного программного обеспечения, Red Hat Inc., Fedora Project, ООО «Ред Софт», Node.js Foundation | Debian GNU/Linux, Red Hat Enterprise Linux, Red Hat Software Collections, Red Hat Quay, Fedora, РЕД ОС (запись в едином реестре российских программ №3751), Red Hat Openshift Data Foundation, Node.js |
Timeline
- Feb 16, 2022 CVE Published
References
- https://redos.red-soft.ru/support/secure/uyazvimosti/uyazvimost-programmnoy-platformy-node-js-cve-2021-44531-cve-2021-44532-cve-2021-44533-cve-2022-21824/ url
- https://bugzilla.redhat.com/show_bug.cgi?id=2040839 url
- https://access.redhat.com/security/cve/cve-2021-44531 url
- http://nodejs.org/en/blog/vulnerability/jan-2022-security-releases/ url
- https://vulners.com/ubuntucve/UB:CVE-2021-44531 url
- https://bodhi.fedoraproject.org/updates/FEDORA-2022-0eda327cb4 url
- https://bodhi.fedoraproject.org/updates/FEDORA-2022-78090d2099 url
- https://bodhi.fedoraproject.org/updates/FEDORA-MODULAR-2022-1a016f9102 url
- https://bodhi.fedoraproject.org/updates/FEDORA-MODULAR-2022-b5d5c5a7b8 url
- https://bodhi.fedoraproject.org/updates/FEDORA-MODULAR-2022-f399a3794d url
- https://bodhi.fedoraproject.org/updates/FEDORA-MODULAR-2022-2a44c4f680 url
- https://bodhi.fedoraproject.org/updates/FEDORA-MODULAR-2022-9ae44d7e4c url
- https://bodhi.fedoraproject.org/updates/FEDORA-MODULAR-2022-a627320247 url
- https://github.com/nodejs/node/commit/50439b446f1e6bfc91f03d4b070edb5357b16b8b url
- https://security-tracker.debian.org/tracker/CVE-2021-44531 url