rhsa-2017_0002
Vulnerability from csaf_redhat
Published
2017-01-02 15:55
Modified
2024-09-13 14:37
Summary
Red Hat Security Advisory: rh-nodejs4-nodejs and rh-nodejs4-http-parser security update
Notes
Topic
An update for rh-nodejs4-nodejs and rh-nodejs4-http-parser is now available for Red Hat Software Collections.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices.
The following packages have been upgraded to a newer upstream version: rh-nodejs4-nodejs (4.6.2), rh-nodejs4-http-parser (2.7.0). (BZ#1388097)
Security Fix(es):
* It was found that Node.js' tls.checkServerIdentity() function did not properly validate server certificates containing wildcards. A malicious TLS server could use this flaw to get a specially crafted certificate accepted by a Node.js TLS client. (CVE-2016-7099)
* It was found that the V8 Zone class was vulnerable to integer overflow when allocating new memory (Zone::New() and Zone::NewExpand()). An attacker with the ability to manipulate a large zone could crash the application or, potentially, execute arbitrary code with the application privileges. (CVE-2016-1669)
* A vulnerability was found in c-ares, a DNS resolver library bundled with Node.js. A hostname with an escaped trailing dot would have its size calculated incorrectly, leading to a single byte written beyond the end of a buffer on the heap. An attacker able to provide such a hostname to an application using c-ares, could potentially cause that application to crash. (CVE-2016-5180)
* It was found that the reason argument in ServerResponse#writeHead() was not properly validated. A remote attacker could possibly use this flaw to conduct an HTTP response splitting attack via a specially-crafted HTTP request. (CVE-2016-5325)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_vex",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for rh-nodejs4-nodejs and rh-nodejs4-http-parser is now available for Red Hat Software Collections.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Node.js is a platform built on Chrome\u0027s JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices.\n\nThe following packages have been upgraded to a newer upstream version: rh-nodejs4-nodejs (4.6.2), rh-nodejs4-http-parser (2.7.0). (BZ#1388097)\n\nSecurity Fix(es):\n\n* It was found that Node.js\u0027 tls.checkServerIdentity() function did not properly validate server certificates containing wildcards. A malicious TLS server could use this flaw to get a specially crafted certificate accepted by a Node.js TLS client. (CVE-2016-7099)\n\n* It was found that the V8 Zone class was vulnerable to integer overflow when allocating new memory (Zone::New() and Zone::NewExpand()). An attacker with the ability to manipulate a large zone could crash the application or, potentially, execute arbitrary code with the application privileges. (CVE-2016-1669)\n\n* A vulnerability was found in c-ares, a DNS resolver library bundled with Node.js. A hostname with an escaped trailing dot would have its size calculated incorrectly, leading to a single byte written beyond the end of a buffer on the heap. An attacker able to provide such a hostname to an application using c-ares, could potentially cause that application to crash. (CVE-2016-5180)\n\n* It was found that the reason argument in ServerResponse#writeHead() was not properly validated. A remote attacker could possibly use this flaw to conduct an HTTP response splitting attack via a specially-crafted HTTP request. (CVE-2016-5325)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat offerings.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2017:0002",
"url": "https://access.redhat.com/errata/RHSA-2017:0002"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1335449",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1335449"
},
{
"category": "external",
"summary": "1346910",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1346910"
},
{
"category": "external",
"summary": "1379921",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1379921"
},
{
"category": "external",
"summary": "1380463",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1380463"
},
{
"category": "external",
"summary": "1388097",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1388097"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/data/csaf/v2/advisories/2017/rhsa-2017_0002.json"
}
],
"title": "Red Hat Security Advisory: rh-nodejs4-nodejs and rh-nodejs4-http-parser security update",
"tracking": {
"current_release_date": "2024-09-13T14:37:27+00:00",
"generator": {
"date": "2024-09-13T14:37:27+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "3.33.3"
}
},
"id": "RHSA-2017:0002",
"initial_release_date": "2017-01-02T15:55:58+00:00",
"revision_history": [
{
"date": "2017-01-02T15:55:58+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2017-01-02T15:55:58+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-09-13T14:37:27+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.3-6.7.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.3-7.2.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)",
"product_id": "7Server-RHSCL-2.3-7.3.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.2-7.1.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Software Collections"
},
{
"branches": [
{
"category": "product_version",
"name": "rh-nodejs4-nodejs-devel-0:4.6.2-4.el6.x86_64",
"product": {
"name": "rh-nodejs4-nodejs-devel-0:4.6.2-4.el6.x86_64",
"product_id": "rh-nodejs4-nodejs-devel-0:4.6.2-4.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs4-nodejs-devel@4.6.2-4.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-nodejs4-nodejs-0:4.6.2-4.el6.x86_64",
"product": {
"name": "rh-nodejs4-nodejs-0:4.6.2-4.el6.x86_64",
"product_id": "rh-nodejs4-nodejs-0:4.6.2-4.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs4-nodejs@4.6.2-4.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el6.x86_64",
"product": {
"name": "rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el6.x86_64",
"product_id": "rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs4-nodejs-debuginfo@4.6.2-4.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-nodejs4-http-parser-devel-0:2.7.0-2.el6.x86_64",
"product": {
"name": "rh-nodejs4-http-parser-devel-0:2.7.0-2.el6.x86_64",
"product_id": "rh-nodejs4-http-parser-devel-0:2.7.0-2.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs4-http-parser-devel@2.7.0-2.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-nodejs4-http-parser-0:2.7.0-2.el6.x86_64",
"product": {
"name": "rh-nodejs4-http-parser-0:2.7.0-2.el6.x86_64",
"product_id": "rh-nodejs4-http-parser-0:2.7.0-2.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs4-http-parser@2.7.0-2.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el6.x86_64",
"product": {
"name": "rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el6.x86_64",
"product_id": "rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs4-http-parser-debuginfo@2.7.0-2.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"product": {
"name": "rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"product_id": "rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs4-nodejs-devel@4.6.2-4.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"product": {
"name": "rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"product_id": "rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs4-nodejs@4.6.2-4.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"product": {
"name": "rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"product_id": "rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs4-nodejs-debuginfo@4.6.2-4.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"product": {
"name": "rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"product_id": "rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs4-http-parser-debuginfo@2.7.0-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"product": {
"name": "rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"product_id": "rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs4-http-parser-devel@2.7.0-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"product": {
"name": "rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"product_id": "rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs4-http-parser@2.7.0-2.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "rh-nodejs4-nodejs-0:4.6.2-4.el6.src",
"product": {
"name": "rh-nodejs4-nodejs-0:4.6.2-4.el6.src",
"product_id": "rh-nodejs4-nodejs-0:4.6.2-4.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs4-nodejs@4.6.2-4.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "rh-nodejs4-http-parser-0:2.7.0-2.el6.src",
"product": {
"name": "rh-nodejs4-http-parser-0:2.7.0-2.el6.src",
"product_id": "rh-nodejs4-http-parser-0:2.7.0-2.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs4-http-parser@2.7.0-2.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"product": {
"name": "rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"product_id": "rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs4-nodejs@4.6.2-4.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"product": {
"name": "rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"product_id": "rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs4-http-parser@2.7.0-2.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "rh-nodejs4-nodejs-docs-0:4.6.2-4.el6.noarch",
"product": {
"name": "rh-nodejs4-nodejs-docs-0:4.6.2-4.el6.noarch",
"product_id": "rh-nodejs4-nodejs-docs-0:4.6.2-4.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs4-nodejs-docs@4.6.2-4.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"product": {
"name": "rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"product_id": "rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs4-nodejs-docs@4.6.2-4.el7?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-http-parser-0:2.7.0-2.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-0:2.7.0-2.el6.src"
},
"product_reference": "rh-nodejs4-http-parser-0:2.7.0-2.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.3-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-http-parser-0:2.7.0-2.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-0:2.7.0-2.el6.x86_64"
},
"product_reference": "rh-nodejs4-http-parser-0:2.7.0-2.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-2.3-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el6.x86_64"
},
"product_reference": "rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-2.3-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-http-parser-devel-0:2.7.0-2.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el6.x86_64"
},
"product_reference": "rh-nodejs4-http-parser-devel-0:2.7.0-2.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-2.3-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-nodejs-0:4.6.2-4.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-0:4.6.2-4.el6.src"
},
"product_reference": "rh-nodejs4-nodejs-0:4.6.2-4.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.3-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-nodejs-0:4.6.2-4.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-0:4.6.2-4.el6.x86_64"
},
"product_reference": "rh-nodejs4-nodejs-0:4.6.2-4.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-2.3-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el6.x86_64"
},
"product_reference": "rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-2.3-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-nodejs-devel-0:4.6.2-4.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el6.x86_64"
},
"product_reference": "rh-nodejs4-nodejs-devel-0:4.6.2-4.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-2.3-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-nodejs-docs-0:4.6.2-4.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el6.noarch"
},
"product_reference": "rh-nodejs4-nodejs-docs-0:4.6.2-4.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.3-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-http-parser-0:2.7.0-2.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.src"
},
"product_reference": "rh-nodejs4-http-parser-0:2.7.0-2.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-http-parser-0:2.7.0-2.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.x86_64"
},
"product_reference": "rh-nodejs4-http-parser-0:2.7.0-2.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-2.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el6.x86_64"
},
"product_reference": "rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-2.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-http-parser-devel-0:2.7.0-2.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el6.x86_64"
},
"product_reference": "rh-nodejs4-http-parser-devel-0:2.7.0-2.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-2.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-nodejs-0:4.6.2-4.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.src"
},
"product_reference": "rh-nodejs4-nodejs-0:4.6.2-4.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-nodejs-0:4.6.2-4.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.x86_64"
},
"product_reference": "rh-nodejs4-nodejs-0:4.6.2-4.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-2.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el6.x86_64"
},
"product_reference": "rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-2.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-nodejs-devel-0:4.6.2-4.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el6.x86_64"
},
"product_reference": "rh-nodejs4-nodejs-devel-0:4.6.2-4.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-2.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-nodejs-docs-0:4.6.2-4.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el6.noarch"
},
"product_reference": "rh-nodejs4-nodejs-docs-0:4.6.2-4.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-http-parser-0:2.7.0-2.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.src"
},
"product_reference": "rh-nodejs4-http-parser-0:2.7.0-2.el6.src",
"relates_to_product_reference": "6Workstation-RHSCL-2.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-http-parser-0:2.7.0-2.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.x86_64"
},
"product_reference": "rh-nodejs4-http-parser-0:2.7.0-2.el6.x86_64",
"relates_to_product_reference": "6Workstation-RHSCL-2.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el6.x86_64"
},
"product_reference": "rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el6.x86_64",
"relates_to_product_reference": "6Workstation-RHSCL-2.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-http-parser-devel-0:2.7.0-2.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el6.x86_64"
},
"product_reference": "rh-nodejs4-http-parser-devel-0:2.7.0-2.el6.x86_64",
"relates_to_product_reference": "6Workstation-RHSCL-2.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-nodejs-0:4.6.2-4.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.src"
},
"product_reference": "rh-nodejs4-nodejs-0:4.6.2-4.el6.src",
"relates_to_product_reference": "6Workstation-RHSCL-2.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-nodejs-0:4.6.2-4.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.x86_64"
},
"product_reference": "rh-nodejs4-nodejs-0:4.6.2-4.el6.x86_64",
"relates_to_product_reference": "6Workstation-RHSCL-2.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el6.x86_64"
},
"product_reference": "rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el6.x86_64",
"relates_to_product_reference": "6Workstation-RHSCL-2.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-nodejs-devel-0:4.6.2-4.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el6.x86_64"
},
"product_reference": "rh-nodejs4-nodejs-devel-0:4.6.2-4.el6.x86_64",
"relates_to_product_reference": "6Workstation-RHSCL-2.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-nodejs-docs-0:4.6.2-4.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el6.noarch"
},
"product_reference": "rh-nodejs4-nodejs-docs-0:4.6.2-4.el6.noarch",
"relates_to_product_reference": "6Workstation-RHSCL-2.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-http-parser-0:2.7.0-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.src"
},
"product_reference": "rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.2-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64"
},
"product_reference": "rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-2.2-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64"
},
"product_reference": "rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-2.2-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64"
},
"product_reference": "rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-2.2-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-nodejs-0:4.6.2-4.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.src"
},
"product_reference": "rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.2-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64"
},
"product_reference": "rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-2.2-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64"
},
"product_reference": "rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-2.2-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64"
},
"product_reference": "rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-2.2-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch"
},
"product_reference": "rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.2-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-http-parser-0:2.7.0-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.src"
},
"product_reference": "rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.3-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64"
},
"product_reference": "rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-2.3-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64"
},
"product_reference": "rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-2.3-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64"
},
"product_reference": "rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-2.3-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-nodejs-0:4.6.2-4.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.src"
},
"product_reference": "rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.3-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64"
},
"product_reference": "rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-2.3-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64"
},
"product_reference": "rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-2.3-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64"
},
"product_reference": "rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-2.3-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch"
},
"product_reference": "rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.3-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-http-parser-0:2.7.0-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)",
"product_id": "7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.src"
},
"product_reference": "rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.3-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)",
"product_id": "7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64"
},
"product_reference": "rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-2.3-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)",
"product_id": "7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64"
},
"product_reference": "rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-2.3-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)",
"product_id": "7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64"
},
"product_reference": "rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-2.3-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-nodejs-0:4.6.2-4.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)",
"product_id": "7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.src"
},
"product_reference": "rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.3-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)",
"product_id": "7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64"
},
"product_reference": "rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-2.3-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)",
"product_id": "7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64"
},
"product_reference": "rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-2.3-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)",
"product_id": "7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64"
},
"product_reference": "rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-2.3-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)",
"product_id": "7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch"
},
"product_reference": "rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.3-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-http-parser-0:2.7.0-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.src"
},
"product_reference": "rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64"
},
"product_reference": "rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-2.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64"
},
"product_reference": "rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-2.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64"
},
"product_reference": "rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-2.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-nodejs-0:4.6.2-4.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.src"
},
"product_reference": "rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64"
},
"product_reference": "rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-2.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64"
},
"product_reference": "rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-2.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64"
},
"product_reference": "rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-2.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch"
},
"product_reference": "rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-http-parser-0:2.7.0-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.src"
},
"product_reference": "rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"relates_to_product_reference": "7Workstation-RHSCL-2.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64"
},
"product_reference": "rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-RHSCL-2.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64"
},
"product_reference": "rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-RHSCL-2.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64"
},
"product_reference": "rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-RHSCL-2.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-nodejs-0:4.6.2-4.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.src"
},
"product_reference": "rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"relates_to_product_reference": "7Workstation-RHSCL-2.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64"
},
"product_reference": "rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"relates_to_product_reference": "7Workstation-RHSCL-2.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64"
},
"product_reference": "rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"relates_to_product_reference": "7Workstation-RHSCL-2.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64"
},
"product_reference": "rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"relates_to_product_reference": "7Workstation-RHSCL-2.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch"
},
"product_reference": "rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-2.3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-1669",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2016-05-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1335449"
}
],
"notes": [
{
"category": "description",
"text": "An integer-overflow flaw was found in V8\u0027s Zone class when allocating new memory (Zone::New() and Zone::NewExpand()). An attacker with the ability to manipulate a large zone could crash the application or, potentially, execute arbitrary code with the application privileges.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "V8: integer overflow leading to buffer overflow in Zone::New",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-0:2.7.0-2.el6.src",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-0:4.6.2-4.el6.src",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el6.noarch",
"6Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.src",
"6Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.src",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el6.noarch",
"6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.src",
"6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.src",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el6.noarch",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"7Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1669"
},
{
"category": "external",
"summary": "RHBZ#1335449",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1335449"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1669",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1669"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1669",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1669"
},
{
"category": "external",
"summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update.html",
"url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update.html"
}
],
"release_date": "2016-05-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-0:2.7.0-2.el6.src",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-0:4.6.2-4.el6.src",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el6.noarch",
"6Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.src",
"6Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.src",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el6.noarch",
"6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.src",
"6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.src",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el6.noarch",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"7Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0002"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-0:2.7.0-2.el6.src",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-0:4.6.2-4.el6.src",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el6.noarch",
"6Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.src",
"6Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.src",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el6.noarch",
"6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.src",
"6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.src",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el6.noarch",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"7Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "V8: integer overflow leading to buffer overflow in Zone::New"
},
{
"cve": "CVE-2016-5180",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"discovery_date": "2016-09-29T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1380463"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in c-ares. A hostname with an escaped trailing dot (such as \"hello\\.\") would have its size calculated incorrectly, leading to a single byte written beyond the end of a buffer on the heap. An attacker able to provide such a hostname to an application using c-ares, could potentially cause that application to crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "c-ares: Single byte out of buffer write",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security has rated this issue as having Moderate security impact. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-0:2.7.0-2.el6.src",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-0:4.6.2-4.el6.src",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el6.noarch",
"6Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.src",
"6Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.src",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el6.noarch",
"6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.src",
"6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.src",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el6.noarch",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"7Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-5180"
},
{
"category": "external",
"summary": "RHBZ#1380463",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1380463"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-5180",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-5180"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-5180",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-5180"
},
{
"category": "external",
"summary": "https://c-ares.haxx.se/adv_20160929.html",
"url": "https://c-ares.haxx.se/adv_20160929.html"
}
],
"release_date": "2016-09-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-0:2.7.0-2.el6.src",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-0:4.6.2-4.el6.src",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el6.noarch",
"6Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.src",
"6Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.src",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el6.noarch",
"6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.src",
"6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.src",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el6.noarch",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"7Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0002"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-0:2.7.0-2.el6.src",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-0:4.6.2-4.el6.src",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el6.noarch",
"6Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.src",
"6Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.src",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el6.noarch",
"6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.src",
"6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.src",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el6.noarch",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"7Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "c-ares: Single byte out of buffer write"
},
{
"cve": "CVE-2016-5325",
"discovery_date": "2016-06-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1346910"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the reason argument in ServerResponse#writeHead() was not properly validated. A remote attacker could possibly use this flaw to conduct an HTTP response splitting attack via a specially-crafted HTTP request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nodejs: reason argument in ServerResponse#writeHead() not properly validated",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-0:2.7.0-2.el6.src",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-0:4.6.2-4.el6.src",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el6.noarch",
"6Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.src",
"6Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.src",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el6.noarch",
"6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.src",
"6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.src",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el6.noarch",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"7Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-5325"
},
{
"category": "external",
"summary": "RHBZ#1346910",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1346910"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-5325",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-5325"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-5325",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-5325"
},
{
"category": "external",
"summary": "https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/",
"url": "https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/"
}
],
"release_date": "2016-06-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-0:2.7.0-2.el6.src",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-0:4.6.2-4.el6.src",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el6.noarch",
"6Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.src",
"6Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.src",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el6.noarch",
"6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.src",
"6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.src",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el6.noarch",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"7Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0002"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-0:2.7.0-2.el6.src",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-0:4.6.2-4.el6.src",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el6.noarch",
"6Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.src",
"6Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.src",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el6.noarch",
"6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.src",
"6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.src",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el6.noarch",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"7Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "nodejs: reason argument in ServerResponse#writeHead() not properly validated"
},
{
"cve": "CVE-2016-7099",
"discovery_date": "2016-09-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1379921"
}
],
"notes": [
{
"category": "description",
"text": "The tls.checkServerIdentity function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4.6.0, and 6.x before 6.7.0 does not properly handle wildcards in name fields of X.509 certificates, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nodejs: wildcard certificates not properly validated",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-0:2.7.0-2.el6.src",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-0:4.6.2-4.el6.src",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el6.noarch",
"6Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.src",
"6Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.src",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el6.noarch",
"6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.src",
"6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.src",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el6.noarch",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"7Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-7099"
},
{
"category": "external",
"summary": "RHBZ#1379921",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1379921"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-7099",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-7099"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-7099",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-7099"
},
{
"category": "external",
"summary": "https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/",
"url": "https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/"
}
],
"release_date": "2016-09-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-0:2.7.0-2.el6.src",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-0:4.6.2-4.el6.src",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el6.noarch",
"6Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.src",
"6Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.src",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el6.noarch",
"6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.src",
"6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.src",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el6.noarch",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"7Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0002"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-0:2.7.0-2.el6.src",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-0:4.6.2-4.el6.src",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3-6.7.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el6.noarch",
"6Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.src",
"6Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.src",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el6.x86_64",
"6Server-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el6.noarch",
"6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.src",
"6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.src",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el6.x86_64",
"6Workstation-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el6.noarch",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.2-7.1.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.2.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3-7.3.Z:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"7Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Server-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Server-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch",
"7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.src",
"7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-0:2.7.0-2.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-debuginfo-0:2.7.0-2.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-http-parser-devel-0:2.7.0-2.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.src",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-0:4.6.2-4.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-debuginfo-0:4.6.2-4.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-devel-0:4.6.2-4.el7.x86_64",
"7Workstation-RHSCL-2.3:rh-nodejs4-nodejs-docs-0:4.6.2-4.el7.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nodejs: wildcard certificates not properly validated"
}
]
}
Loading...