VDB
BIT-node-2020-1971
BIT-node-2020-1971
PUBLISHED
CVSS 5.900000095367432 MEDIUM
EDIPARTYNAME NULL pointer dereference
Risk Scores
CVSS 3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | node | 10.13.0, 12.13.0, 14.15.0 |
Exploit Intelligence
- honeyvig/CVE-2020-1971 (github-poc-repo)
- honeyvig/CVE-2020-1971 (github-poc)
- CVE-2020-1971 Auto Scan & Remote Exploit Script. Auto Local Scan & Patch Script. (github-poc)
- Rapport_149185019.html (github-poc)
- TestCommand.yaml (github-poc)
Timeline
- Mar 6, 2024 CVE Published
- May 20, 2025 CVE Updated
- Apr 30, 2026 Distribution Patch
References
- http://www.openwall.com/lists/oss-security/2021/09/14/2 url
- https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf url
- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2154ab83e14ede338d2ede9bbe5cdfce5d5a6c9e url
- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f960d81215ebf3f65e03d4d5d857fb9b666d6920 url
- https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44676 url
- https://lists.apache.org/thread.html/r63c6f2dd363d9b514d0a4bcf624580616a679898cc14c109a49b750c%40%3Cdev.tomcat.apache.org%3E url
- https://lists.apache.org/thread.html/rbb769f771711fb274e0a4acb1b5911c8aab544a6ac5e8c12d40c5143%40%3Ccommits.pulsar.apache.org%3E url
- https://lists.debian.org/debian-lts-announce/2020/12/msg00020.html url
- https://lists.debian.org/debian-lts-announce/2020/12/msg00021.html url
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DGSI34Y5LQ5RYXN4M2I5ZQT65LFVDOUU/ url
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PWPSSZNZOBJU2YR6Z4TGHXKYW3YP5QG7/ url
- https://security.FreeBSD.org/advisories/FreeBSD-SA-20:33.openssl.asc url
- https://security.gentoo.org/glsa/202012-13 url
- https://security.netapp.com/advisory/ntap-20201218-0005/ url
- https://security.netapp.com/advisory/ntap-20210513-0002/ url
- https://www.debian.org/security/2020/dsa-4807 url
- https://www.openssl.org/news/secadv/20201208.txt url
- https://www.oracle.com//security-alerts/cpujul2021.html url
- https://www.oracle.com/security-alerts/cpuApr2021.html url
- https://www.oracle.com/security-alerts/cpuapr2022.html url
…and 7 more