rhsa-2018_2949
Vulnerability from csaf_redhat
Published
2018-10-18 10:11
Modified
2024-11-15 03:06
Summary
Red Hat Security Advisory: rh-nodejs8-nodejs security update
Notes
Topic
An update for rh-nodejs8-nodejs is now available for Red Hat Software Collections.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.
The following packages have been upgraded to a later upstream version: rh-nodejs8-nodejs (8.11.4). (BZ#1621761)
Security Fix(es):
* nodejs: Out of bounds (OOB) write via UCS-2 encoding (CVE-2018-12115)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for rh-nodejs8-nodejs is now available for Red Hat Software Collections.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.\n\nThe following packages have been upgraded to a later upstream version: rh-nodejs8-nodejs (8.11.4). (BZ#1621761)\n\nSecurity Fix(es):\n\n* nodejs: Out of bounds (OOB) write via UCS-2 encoding (CVE-2018-12115)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:2949",
"url": "https://access.redhat.com/errata/RHSA-2018:2949"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1620219",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1620219"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2949.json"
}
],
"title": "Red Hat Security Advisory: rh-nodejs8-nodejs security update",
"tracking": {
"current_release_date": "2024-11-15T03:06:26+00:00",
"generator": {
"date": "2024-11-15T03:06:26+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2018:2949",
"initial_release_date": "2018-10-18T10:11:49+00:00",
"revision_history": [
{
"date": "2018-10-18T10:11:49+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-10-18T10:11:49+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-15T03:06:26+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
"product_id": "7Server-RHSCL-3.1-7.4.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
"product_id": "7Server-RHSCL-3.1-7.5.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-Alt-RHSCL-3.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-3.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-3.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Software Collections"
},
{
"branches": [
{
"category": "product_version",
"name": "rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"product": {
"name": "rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"product_id": "rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-devel@8.11.4-1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"product": {
"name": "rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"product_id": "rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs8-npm@5.6.0-8.11.4.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"product": {
"name": "rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"product_id": "rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs8-nodejs@8.11.4-1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"product": {
"name": "rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"product_id": "rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-debuginfo@8.11.4-1.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"product": {
"name": "rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"product_id": "rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-docs@8.11.4-1.el7?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"product": {
"name": "rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"product_id": "rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs8-nodejs@8.11.4-1.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"product": {
"name": "rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"product_id": "rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-devel@8.11.4-1.el7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"product": {
"name": "rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"product_id": "rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs8-npm@5.6.0-8.11.4.1.el7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"product": {
"name": "rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"product_id": "rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs8-nodejs@8.11.4-1.el7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"product": {
"name": "rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"product_id": "rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-debuginfo@8.11.4-1.el7?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"product": {
"name": "rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"product_id": "rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-devel@8.11.4-1.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"product": {
"name": "rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"product_id": "rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs8-npm@5.6.0-8.11.4.1.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"product": {
"name": "rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"product_id": "rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs8-nodejs@8.11.4-1.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"product": {
"name": "rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"product_id": "rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-debuginfo@8.11.4-1.el7?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"product": {
"name": "rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"product_id": "rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-devel@8.11.4-1.el7?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"product": {
"name": "rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"product_id": "rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs8-npm@5.6.0-8.11.4.1.el7?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"product": {
"name": "rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"product_id": "rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs8-nodejs@8.11.4-1.el7?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"product": {
"name": "rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"product_id": "rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-debuginfo@8.11.4-1.el7?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64"
},
"product_reference": "rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"relates_to_product_reference": "7Server-Alt-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le"
},
"product_reference": "rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"relates_to_product_reference": "7Server-Alt-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x"
},
"product_reference": "rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"relates_to_product_reference": "7Server-Alt-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.11.4-1.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src"
},
"product_reference": "rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"relates_to_product_reference": "7Server-Alt-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64"
},
"product_reference": "rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"relates_to_product_reference": "7Server-Alt-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64"
},
"product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"relates_to_product_reference": "7Server-Alt-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le"
},
"product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"relates_to_product_reference": "7Server-Alt-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x"
},
"product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"relates_to_product_reference": "7Server-Alt-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64"
},
"product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"relates_to_product_reference": "7Server-Alt-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64"
},
"product_reference": "rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"relates_to_product_reference": "7Server-Alt-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le"
},
"product_reference": "rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"relates_to_product_reference": "7Server-Alt-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x"
},
"product_reference": "rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"relates_to_product_reference": "7Server-Alt-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64"
},
"product_reference": "rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"relates_to_product_reference": "7Server-Alt-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch"
},
"product_reference": "rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"relates_to_product_reference": "7Server-Alt-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64"
},
"product_reference": "rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"relates_to_product_reference": "7Server-Alt-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le"
},
"product_reference": "rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"relates_to_product_reference": "7Server-Alt-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x"
},
"product_reference": "rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"relates_to_product_reference": "7Server-Alt-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64"
},
"product_reference": "rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"relates_to_product_reference": "7Server-Alt-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
"product_id": "7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le"
},
"product_reference": "rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"relates_to_product_reference": "7Server-RHSCL-3.1-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
"product_id": "7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x"
},
"product_reference": "rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"relates_to_product_reference": "7Server-RHSCL-3.1-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.11.4-1.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
"product_id": "7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.src"
},
"product_reference": "rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"relates_to_product_reference": "7Server-RHSCL-3.1-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
"product_id": "7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64"
},
"product_reference": "rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-3.1-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
"product_id": "7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le"
},
"product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"relates_to_product_reference": "7Server-RHSCL-3.1-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
"product_id": "7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x"
},
"product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"relates_to_product_reference": "7Server-RHSCL-3.1-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
"product_id": "7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64"
},
"product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-3.1-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
"product_id": "7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le"
},
"product_reference": "rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"relates_to_product_reference": "7Server-RHSCL-3.1-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
"product_id": "7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x"
},
"product_reference": "rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"relates_to_product_reference": "7Server-RHSCL-3.1-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
"product_id": "7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64"
},
"product_reference": "rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-3.1-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
"product_id": "7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch"
},
"product_reference": "rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-3.1-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
"product_id": "7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le"
},
"product_reference": "rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"relates_to_product_reference": "7Server-RHSCL-3.1-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
"product_id": "7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x"
},
"product_reference": "rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"relates_to_product_reference": "7Server-RHSCL-3.1-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
"product_id": "7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64"
},
"product_reference": "rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-3.1-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
"product_id": "7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le"
},
"product_reference": "rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"relates_to_product_reference": "7Server-RHSCL-3.1-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
"product_id": "7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x"
},
"product_reference": "rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"relates_to_product_reference": "7Server-RHSCL-3.1-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.11.4-1.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
"product_id": "7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.src"
},
"product_reference": "rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"relates_to_product_reference": "7Server-RHSCL-3.1-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
"product_id": "7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64"
},
"product_reference": "rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-3.1-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
"product_id": "7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le"
},
"product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"relates_to_product_reference": "7Server-RHSCL-3.1-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
"product_id": "7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x"
},
"product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"relates_to_product_reference": "7Server-RHSCL-3.1-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
"product_id": "7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64"
},
"product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-3.1-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
"product_id": "7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le"
},
"product_reference": "rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"relates_to_product_reference": "7Server-RHSCL-3.1-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
"product_id": "7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x"
},
"product_reference": "rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"relates_to_product_reference": "7Server-RHSCL-3.1-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
"product_id": "7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64"
},
"product_reference": "rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-3.1-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
"product_id": "7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch"
},
"product_reference": "rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-3.1-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
"product_id": "7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le"
},
"product_reference": "rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"relates_to_product_reference": "7Server-RHSCL-3.1-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
"product_id": "7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x"
},
"product_reference": "rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"relates_to_product_reference": "7Server-RHSCL-3.1-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
"product_id": "7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64"
},
"product_reference": "rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-3.1-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64"
},
"product_reference": "rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"relates_to_product_reference": "7Server-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le"
},
"product_reference": "rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"relates_to_product_reference": "7Server-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x"
},
"product_reference": "rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"relates_to_product_reference": "7Server-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.11.4-1.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src"
},
"product_reference": "rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"relates_to_product_reference": "7Server-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64"
},
"product_reference": "rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64"
},
"product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"relates_to_product_reference": "7Server-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le"
},
"product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"relates_to_product_reference": "7Server-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x"
},
"product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"relates_to_product_reference": "7Server-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64"
},
"product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64"
},
"product_reference": "rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"relates_to_product_reference": "7Server-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le"
},
"product_reference": "rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"relates_to_product_reference": "7Server-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x"
},
"product_reference": "rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"relates_to_product_reference": "7Server-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64"
},
"product_reference": "rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch"
},
"product_reference": "rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64"
},
"product_reference": "rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"relates_to_product_reference": "7Server-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le"
},
"product_reference": "rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"relates_to_product_reference": "7Server-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x"
},
"product_reference": "rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"relates_to_product_reference": "7Server-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64"
},
"product_reference": "rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64"
},
"product_reference": "rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"relates_to_product_reference": "7Workstation-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le"
},
"product_reference": "rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"relates_to_product_reference": "7Workstation-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x"
},
"product_reference": "rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"relates_to_product_reference": "7Workstation-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.11.4-1.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src"
},
"product_reference": "rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"relates_to_product_reference": "7Workstation-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64"
},
"product_reference": "rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"relates_to_product_reference": "7Workstation-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64"
},
"product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"relates_to_product_reference": "7Workstation-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le"
},
"product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"relates_to_product_reference": "7Workstation-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x"
},
"product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"relates_to_product_reference": "7Workstation-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64"
},
"product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"relates_to_product_reference": "7Workstation-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64"
},
"product_reference": "rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"relates_to_product_reference": "7Workstation-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le"
},
"product_reference": "rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"relates_to_product_reference": "7Workstation-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x"
},
"product_reference": "rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"relates_to_product_reference": "7Workstation-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64"
},
"product_reference": "rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"relates_to_product_reference": "7Workstation-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch"
},
"product_reference": "rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64"
},
"product_reference": "rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"relates_to_product_reference": "7Workstation-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le"
},
"product_reference": "rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"relates_to_product_reference": "7Workstation-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x"
},
"product_reference": "rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"relates_to_product_reference": "7Workstation-RHSCL-3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64"
},
"product_reference": "rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-RHSCL-3.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-7159",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2018-03-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1561981"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the http module from Node.js could accept incorrect Content-Length values, containing spaces within the value, in HTTP headers. A specially crafted client could use this flaw to possibly confuse the script, causing unspecified behavior.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nodejs: HTTP parser allowed for spaces inside Content-Length header values",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-7159"
},
{
"category": "external",
"summary": "RHBZ#1561981",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1561981"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-7159",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-7159"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-7159",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-7159"
}
],
"release_date": "2018-03-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-10-18T10:11:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "nodejs: HTTP parser allowed for spaces inside Content-Length header values"
},
{
"cve": "CVE-2018-7160",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2018-03-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1561979"
}
],
"notes": [
{
"category": "description",
"text": "It was found that when a Node.js script is run in inspector mode, Node.js did not properly validate the Host header, leaving the inspector vulnerable to a DNS rebind attack and bypass same-origin policy. If a developer had an inspector session running, and was visiting a malicious website, the site could carry on a DNS rebind attack, allowing the site to have full access to the debugged script.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nodejs: Inspector DNS rebinding vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-7160"
},
{
"category": "external",
"summary": "RHBZ#1561979",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1561979"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-7160",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-7160"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-7160",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-7160"
}
],
"release_date": "2018-03-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-10-18T10:11:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nodejs: Inspector DNS rebinding vulnerability"
},
{
"cve": "CVE-2018-7161",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2018-06-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1591013"
}
],
"notes": [
{
"category": "description",
"text": "All versions of Node.js 8.x, 9.x, and 10.x are vulnerable and the severity is HIGH. An attacker can cause a denial of service (DoS) by causing a node server providing an http2 server to crash. This can be accomplished by interacting with the http2 server in a manner that triggers a cleanup bug where objects are used in native code after they are no longer available. This has been addressed by updating the http2 implementation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nodejs: denial of service (DoS) by causing a node server providing an http2 server to crash",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-7161"
},
{
"category": "external",
"summary": "RHBZ#1591013",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1591013"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-7161",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-7161"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-7161",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-7161"
}
],
"release_date": "2018-06-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-10-18T10:11:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nodejs: denial of service (DoS) by causing a node server providing an http2 server to crash"
},
{
"cve": "CVE-2018-7167",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2018-06-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1591006"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the Buffer.fill() and Buffer.alloc() function may hang. An attacker able to control the input of these function could use this flaw to cause a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nodejs: Denial of Service by calling Buffer.fill() or Buffer.alloc() with specially crafted parameters",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-7167"
},
{
"category": "external",
"summary": "RHBZ#1591006",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1591006"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-7167",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-7167"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-7167",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-7167"
}
],
"release_date": "2018-06-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-10-18T10:11:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2949"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nodejs: Denial of Service by calling Buffer.fill() or Buffer.alloc() with specially crafted parameters"
},
{
"cve": "CVE-2018-12115",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2018-08-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1620219"
}
],
"notes": [
{
"category": "description",
"text": "In all versions of Node.js prior to 6.14.4, 8.11.4 and 10.9.0 when used with UCS-2 encoding (recognized by Node.js under the names `\u0027ucs2\u0027`, `\u0027ucs-2\u0027`, `\u0027utf16le\u0027` and `\u0027utf-16le\u0027`), `Buffer#write()` can be abused to write outside of the bounds of a single `Buffer`. Writes that start from the second-to-last position of a buffer cause a miscalculation of the maximum length of the input bytes to be written.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nodejs: Out of bounds (OOB) write via UCS-2 encoding",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Openshift Container Platform 3.x versions are potentially vulnerable via the jenkins-slave-nodejs and jenkins-agent-nodejs containers. However a build would have to occur with a malicious jenkins pipeline, or nodejs source code supplied by an attacker, reducing the impact of this flaw to moderate. Both container images used nodejs delivered from Red Hat Software Collections.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-12115"
},
{
"category": "external",
"summary": "RHBZ#1620219",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1620219"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-12115",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-12115"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-12115",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-12115"
}
],
"release_date": "2018-08-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-10-18T10:11:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2949"
},
{
"category": "workaround",
"details": "On Openshift Container Platform 3.x you can override the container image used on the Jenkins Slave by specifying the JENKINS_SLAVE_IMAGE environment variable in your jenkins deployment configuration. Ref:\n\nhttps://github.com/openshift/jenkins/blob/8e1ab16fb5f44d6570018c5dfa3407692fdba6e5/2/contrib/jenkins/kube-slave-common.sh#L27-L33",
"product_ids": [
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-Alt-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-RHSCL-3.1-7.4.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-RHSCL-3.1-7.5.Z:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Server-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Server-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.src",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-0:8.11.4-1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-debuginfo-0:8.11.4-1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-devel-0:8.11.4-1.el7.x86_64",
"7Workstation-RHSCL-3.1:rh-nodejs8-nodejs-docs-0:8.11.4-1.el7.noarch",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.aarch64",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.ppc64le",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.s390x",
"7Workstation-RHSCL-3.1:rh-nodejs8-npm-0:5.6.0-8.11.4.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nodejs: Out of bounds (OOB) write via UCS-2 encoding"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.