- Home
- CVEs with nessus.description==An update is now available for Red Hat OpenShift Application Runtimes.
Red Hat Product Security has rated this update as having a security
impact of Moderate. A Common Vulnerability Scoring System (CVSS) base
score, which gives a detailed severity rating, is available for each
vulnerability from the CVE link(s) in the References section.
Red Hat Openshift Application Runtimes provides an application
platform that reduces the complexity of developing and operating
applications (monoliths and microservices) for OpenShift as a
containerized platform.
This release of RHOAR Node.js 10.9.0 serves as a replacement for RHOAR
Node.js 10.8.0, and includes bug fixes and enhancements. For further
information, refer to the Release Notes linked to in the References
section.
Security Fix(es) :
* openssl: Malicious server can send large prime to client during
DH(E) TLS handshake causing the client to hang (CVE-2018-0732)
* nodejs: Unintentional exposure of uninitialized memory
(CVE-2018-7166)
* nodejs: Out of bounds (OOB) write via UCS-2 encoding
(CVE-2018-12115)
For more details about the security issue(s), including the impact, a
CVSS score, and other related information, refer to the CVE page(s)
listed in the References section.
Max CVSS | 0 |
Min CVSS | 0 |
Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published |
Back to Top
Mark selected
Back to Top